Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d313238203d3e20323636343730.roa
File:                     323830343a333835343a3a2f33322d313238203d3e20323636343730.roa (raw, json)
Hash identifier:          o8Ql3dXDFRqy3UZ89FSoUGuo/FRBsm1KhoLabTx/joM=
Subject key identifier:   81:4D:7C:9A:77:34:14:92:B2:4F:E0:72:52:5F:58:60:0C:8D:DB:51
Certificate issuer:       /CN=4F6BBD87751395114C910ADBBDBA9F81D89340F4
Certificate serial:       3BD3D5CA785E452AC37BC959B7E6A229A52966BE
Authority key identifier: 4F:6B:BD:87:75:13:95:11:4C:91:0A:DB:BD:BA:9F:81:D8:93:40:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6BBD87751395114C910ADBBDBA9F81D89340F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d313238203d3e20323636343730.roa
Signing time:             Tue 27 Aug 2024 14:02:13 +0000
ROA not before:           Tue 27 Aug 2024 13:57:13 +0000
ROA not after:            Tue 26 Aug 2025 14:02:13 +0000
asID:                     266470
IP address blocks:        2804:3854::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d3:d5:ca:78:5e:45:2a:c3:7b:c9:59:b7:e6:a2:29:a5:29:66:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F6BBD87751395114C910ADBBDBA9F81D89340F4
        Validity
            Not Before: Aug 27 13:57:13 2024 GMT
            Not After : Aug 26 14:02:13 2025 GMT
        Subject: CN=814D7C9A77341492B24FE072525F58600C8DDB51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:b2:67:25:e2:8c:60:13:6a:26:3e:79:34:
                    2c:37:03:83:4a:1a:0f:be:57:fd:bb:84:f8:b4:67:
                    1f:d1:f5:84:8d:be:53:3d:d4:a7:53:89:9a:d7:91:
                    be:8f:22:56:34:83:70:39:d3:e6:12:b0:87:f7:f7:
                    fe:89:00:2b:aa:65:53:c8:7c:17:4b:c7:14:42:16:
                    69:81:20:ae:2b:e5:f9:90:bd:40:39:d4:19:12:7b:
                    e1:01:3f:fb:59:00:44:35:1c:5a:a6:70:8b:89:2b:
                    bf:4e:4e:2b:ef:a2:d7:ad:e4:fe:0a:9b:b0:5f:ba:
                    49:67:43:e5:30:d3:bf:20:8d:46:93:e6:a7:5a:9a:
                    cf:a1:9a:6a:50:6c:d2:5d:c9:c3:e9:a4:32:c9:82:
                    99:d9:a5:44:4d:2b:8f:e9:88:f1:70:6c:37:ff:90:
                    35:ae:a4:15:78:34:8b:58:c4:6f:1f:d4:66:6d:8f:
                    78:1d:a3:b4:39:33:c3:f2:59:09:51:8d:07:c8:67:
                    40:7e:a2:48:5c:85:c7:84:bb:60:76:98:d0:63:77:
                    f5:b4:a5:6e:03:8a:dc:00:ba:ab:81:bc:75:d6:f0:
                    f7:3e:81:0d:63:4c:ea:78:2f:2f:92:dc:16:22:f5:
                    a4:7a:2f:e7:61:fa:0a:4c:89:01:7c:f4:42:0b:66:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:7C:9A:77:34:14:92:B2:4F:E0:72:52:5F:58:60:0C:8D:DB:51
            X509v3 Authority Key Identifier:
                keyid:4F:6B:BD:87:75:13:95:11:4C:91:0A:DB:BD:BA:9F:81:D8:93:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/4F6BBD87751395114C910ADBBDBA9F81D89340F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6BBD87751395114C910ADBBDBA9F81D89340F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/323830343a333835343a3a2f33322d313238203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3854::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:6b:6a:57:c1:7e:78:dd:73:fd:f9:7c:38:90:06:72:4d:
         0d:ae:de:f8:e8:9c:0c:71:cc:ff:ad:d0:46:b7:31:05:6c:e3:
         e6:a4:0a:66:34:e2:d8:8a:05:b7:6c:fe:ae:21:71:67:8a:4c:
         58:a6:21:bf:98:92:7b:a6:6f:48:6d:b3:f5:81:7e:02:b6:16:
         92:ba:2e:f4:4a:86:48:31:b2:18:c0:52:79:58:0a:f4:76:2f:
         8f:2c:83:05:66:24:32:f6:9f:35:8a:e3:e8:8c:ab:29:d8:f5:
         6e:f8:a0:c1:ce:95:3c:bd:ac:c6:1b:78:35:70:c3:4b:35:9a:
         42:a0:69:5c:4c:7f:cc:39:08:8d:8d:4e:ef:64:4d:9c:7f:1a:
         68:3b:46:e2:1d:3d:bd:c7:84:19:54:1b:78:14:dc:88:31:93:
         63:66:07:8c:32:ff:49:8a:a3:7c:95:ec:20:6e:cd:99:93:aa:
         cd:7c:10:00:be:49:a2:62:48:fa:9b:97:42:26:8f:40:44:59:
         91:89:8b:34:e0:21:10:f8:ce:36:64:6d:f1:05:3c:1e:5b:72:
         bb:d2:8f:b1:c8:49:13:84:8e:f8:6f:3d:59:d9:46:ec:00:8c:
         07:bf:c5:68:55:cc:61:b8:01:cb:71:e4:f5:2a:d3:66:f5:9b:
         f5:ce:35:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----