Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a633030303a3a2f33342d3334203d3e20323632333132.roa
File:                     323830343a333730303a633030303a3a2f33342d3334203d3e20323632333132.roa (raw, json)
Hash identifier:          iGElJTEsR4lkTEI4fFxx5n/+7xSH7UOqsXBwcr4+UPI=
Subject key identifier:   C6:0D:C4:54:F7:28:B5:4A:C8:55:B6:5A:53:1F:2C:7F:06:6F:E5:9E
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       4F882C118B3A09A2B96B9253013338DB6614B86F
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a633030303a3a2f33342d3334203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:24 +0000
ROA not before:           Fri 16 Aug 2024 16:21:24 +0000
ROA not after:            Fri 15 Aug 2025 16:26:24 +0000
asID:                     262312
IP address blocks:        2804:3700:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:88:2c:11:8b:3a:09:a2:b9:6b:92:53:01:33:38:db:66:14:b8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:24 2024 GMT
            Not After : Aug 15 16:26:24 2025 GMT
        Subject: CN=C60DC454F728B54AC855B65A531F2C7F066FE59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:ae:92:b8:7e:a9:c7:83:1f:fe:d9:6d:ea:
                    d7:6c:0d:06:ee:85:a7:98:4e:20:a0:4b:8c:b5:3d:
                    e5:35:ab:df:2b:10:fe:2f:9d:22:ae:ad:80:f6:ab:
                    35:e5:d1:36:84:e3:65:3f:c8:69:7f:52:b3:58:51:
                    cd:1a:ae:07:e4:a6:be:40:f8:83:cf:c6:46:2f:66:
                    3e:95:54:d0:3e:f9:ce:d8:82:79:10:93:d7:e8:be:
                    9b:5a:d6:02:b8:b8:cc:0c:4a:8a:11:65:fd:9f:85:
                    f0:7e:09:6c:55:97:9d:a7:6f:ea:5b:54:31:99:56:
                    b2:eb:4c:2c:b5:3c:48:5d:16:1f:35:7e:d8:bc:ee:
                    87:27:f4:16:25:99:2e:3a:8b:23:e8:ba:3d:95:11:
                    c4:b9:18:f1:60:52:d3:d8:6a:d0:a6:c2:a9:67:86:
                    35:6c:c2:b1:e5:ad:cd:f0:7f:0c:26:42:79:90:dc:
                    4e:04:b6:75:ea:1d:6e:4e:3c:e7:f7:cd:7f:1c:82:
                    4c:2a:1b:b9:1d:2e:1e:3c:b9:0f:5a:8b:21:df:77:
                    a2:3b:20:7b:27:e2:35:d5:4f:61:c2:32:ce:72:34:
                    ad:82:31:0b:aa:ed:22:8a:12:a0:3b:ad:23:ba:a5:
                    f3:4f:0b:55:82:ff:61:87:5a:c4:58:1d:92:c0:cd:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0D:C4:54:F7:28:B5:4A:C8:55:B6:5A:53:1F:2C:7F:06:6F:E5:9E
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a633030303a3a2f33342d3334203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         95:02:c9:0c:63:6c:04:14:f9:f6:13:4d:10:05:e5:7a:f0:93:
         e6:58:21:79:fb:0a:58:8c:33:7a:83:4c:c8:c2:24:93:4e:66:
         e1:3e:26:94:af:5c:1d:bb:ce:4d:8d:c9:c5:68:73:70:26:1e:
         54:f0:90:ba:c0:92:41:46:54:4a:4e:74:96:4d:df:67:b0:91:
         55:e0:83:c1:10:21:1a:82:e0:06:73:27:75:67:9c:37:83:9b:
         68:27:ba:b0:e7:60:8a:ac:77:03:ee:a1:7d:ce:4e:98:7c:d1:
         b2:c2:65:86:03:86:e1:e2:10:fa:17:63:6e:a7:dc:ce:ca:37:
         5a:a6:11:82:50:c5:df:cc:2a:50:79:c7:54:b6:fd:4b:4e:3a:
         10:ee:fb:6c:ec:8c:e3:dc:31:fc:dd:e1:b9:9c:07:c7:fb:49:
         48:4f:e1:55:9c:d3:0f:ca:a7:b9:cf:36:41:ba:87:85:6a:d2:
         51:52:9a:ab:0c:8f:2f:08:87:4c:95:43:ce:fd:a0:b0:0b:a9:
         e2:c3:fa:c5:cb:af:0c:2a:e0:e4:67:b8:3f:5c:14:e6:60:bd:
         71:bc:1b:a2:97:0d:ef:df:f4:99:e9:aa:5b:9f:5c:4d:65:34:
         68:9a:f9:4c:7a:33:50:cd:c0:4f:97:b7:95:ce:d0:8a:ef:81:
         a9:a8:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----