Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/323830343a373765633a3a2f33322d313238203d3e20323731323038.roa
File:                     323830343a373765633a3a2f33322d313238203d3e20323731323038.roa (raw, json)
Hash identifier:          K7s6jNumeAP1+COsMYmkURgxMbBNkAcN0vZmEI4m9Hg=
Subject key identifier:   99:92:4F:86:FA:FB:04:DF:E4:BD:87:DD:E2:44:0B:FD:DF:7F:43:3B
Certificate issuer:       /CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
Certificate serial:       1111272FAB5327DCAA1966F1E2F71B32DC5F2178
Authority key identifier: AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/323830343a373765633a3a2f33322d313238203d3e20323731323038.roa
Signing time:             Thu 21 Nov 2024 21:29:43 +0000
ROA not before:           Thu 21 Nov 2024 21:24:43 +0000
ROA not after:            Thu 20 Nov 2025 21:29:43 +0000
asID:                     271208
IP address blocks:        2804:77ec::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:11:27:2f:ab:53:27:dc:aa:19:66:f1:e2:f7:1b:32:dc:5f:21:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE
        Validity
            Not Before: Nov 21 21:24:43 2024 GMT
            Not After : Nov 20 21:29:43 2025 GMT
        Subject: CN=99924F86FAFB04DFE4BD87DDE2440BFDDF7F433B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:1b:88:37:81:2d:58:e4:15:8a:aa:82:1f:
                    2c:79:db:24:77:8a:65:3f:93:41:e9:4a:91:2b:2a:
                    9c:90:54:a9:65:b9:ff:58:7a:cb:28:04:b0:6b:ca:
                    92:d7:31:f9:53:77:cd:db:1a:54:49:c4:df:11:00:
                    bc:c1:85:37:27:6d:c0:f4:ab:66:23:86:fe:f6:45:
                    2c:71:a2:41:ca:d8:e8:45:ac:c1:9e:ee:43:e0:38:
                    a2:43:07:08:f3:87:56:88:e0:72:e0:6e:f3:85:12:
                    7e:f8:f9:ae:df:f8:c0:c2:02:6f:07:e3:29:be:96:
                    a8:ff:41:6a:d2:a8:91:a5:3c:03:5c:46:68:fc:4d:
                    c3:dc:f0:c9:27:73:c9:4d:1f:2e:fb:ef:53:35:ac:
                    f3:c2:42:63:63:d0:56:48:c8:3c:25:55:5c:85:25:
                    4a:45:a1:f0:76:c4:ef:9a:d1:50:10:dd:da:aa:37:
                    c0:6f:3e:0c:cd:7b:49:88:31:a7:6f:b9:b9:4f:54:
                    da:69:79:9e:1e:87:13:60:02:25:e1:e8:21:0f:60:
                    10:c1:83:89:7d:36:af:36:b1:e6:05:34:a9:cc:d4:
                    38:d6:ad:b4:0f:d6:c2:e2:73:9c:12:68:dc:3f:79:
                    f0:d7:22:c2:d6:27:96:be:81:3e:f6:3c:e6:cb:45:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:4F:86:FA:FB:04:DF:E4:BD:87:DD:E2:44:0B:FD:DF:7F:43:3B
            X509v3 Authority Key Identifier:
                keyid:AF:B3:AA:DF:BD:2A:7A:D0:DE:D7:E0:30:0C:9C:AC:A7:C5:DF:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB3AADFBD2A7AD0DED7E0300C9CACA7C5DF5BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/323830343a373765633a3a2f33322d313238203d3e20323731323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:31:86:8d:02:26:e4:b0:6a:28:ba:2f:11:30:23:b7:70:
         f1:23:6f:77:80:4e:7b:3b:1d:d1:e4:b2:1b:9e:4b:ac:a3:f9:
         3b:0c:3b:ae:70:50:04:07:e9:f3:fd:76:c0:c9:43:c2:a1:10:
         28:bc:3d:70:b6:d4:ec:ca:58:51:3c:1a:7e:2e:81:76:01:06:
         7a:ab:42:45:55:ce:a5:0e:f6:47:bc:22:94:cf:fd:d7:d8:4c:
         76:4f:34:e8:12:43:cd:0f:dd:93:c3:15:ff:a6:9e:c4:85:39:
         80:88:18:af:dc:70:84:fa:dd:1e:de:ec:07:35:73:dc:c6:fb:
         bf:cd:ff:b4:dc:96:67:da:2d:59:c0:26:f6:0e:f7:83:a2:d1:
         6a:3c:8a:eb:88:17:4c:e1:20:f1:99:d6:d4:34:18:b1:d0:88:
         dc:73:f8:a0:9b:bd:23:b7:ea:a4:af:c7:f5:47:81:15:fc:16:
         bf:a9:8f:a1:61:92:b4:2b:4c:af:be:3e:c9:c8:b1:66:7c:10:
         9c:d6:a0:ee:56:18:91:a3:95:91:ce:45:65:e9:1f:8d:f0:84:
         cb:87:46:68:79:ad:8f:96:e2:67:1a:1b:d5:90:8e:ca:4a:d4:
         d3:77:33:1b:5a:70:ac:5d:97:90:12:64:e3:2e:e2:73:05:0a:
         67:64:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----