Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/323830343a336331343a3a2f33322d313238203d3e20323636313839.roa
File:                     323830343a336331343a3a2f33322d313238203d3e20323636313839.roa (raw, json)
Hash identifier:          8KaP7cM/uSqHnBC+1N2xvz6lQxVK2vuL7VAwFcaqtpE=
Subject key identifier:   F3:78:FE:0F:25:2C:A8:69:5F:1D:D2:C1:16:84:A9:46:FC:0B:CE:B4
Certificate issuer:       /CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Certificate serial:       11043A786BE728688416F1DCB6C3E9992EF313A4
Authority key identifier: 29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/323830343a336331343a3a2f33322d313238203d3e20323636313839.roa
Signing time:             Wed 21 Aug 2024 15:01:46 +0000
ROA not before:           Wed 21 Aug 2024 14:56:46 +0000
ROA not after:            Wed 20 Aug 2025 15:01:46 +0000
asID:                     266189
IP address blocks:        2804:3c14::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:3a:78:6b:e7:28:68:84:16:f1:dc:b6:c3:e9:99:2e:f3:13:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
        Validity
            Not Before: Aug 21 14:56:46 2024 GMT
            Not After : Aug 20 15:01:46 2025 GMT
        Subject: CN=F378FE0F252CA8695F1DD2C11684A946FC0BCEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:df:a6:c8:1e:49:44:90:e6:76:a3:2f:9d:53:
                    b9:6d:1f:75:d2:c9:9f:2d:cf:58:1f:f3:5f:ed:8a:
                    e3:23:11:8f:71:b5:8c:f6:5b:3f:b6:4d:75:72:c9:
                    80:2e:8c:6f:ad:bc:24:87:fb:44:8d:cd:cc:1b:ab:
                    93:ae:5f:2b:fd:e3:4e:21:44:0e:c8:08:34:ba:a6:
                    93:de:84:7a:0f:98:ed:b4:83:61:b6:04:9d:e1:ce:
                    35:2e:bb:8d:85:43:86:e2:cd:24:f2:00:e9:86:2c:
                    99:f6:2b:8d:6f:7a:04:f4:5b:25:ce:34:61:d3:9e:
                    76:c5:40:ed:84:5f:47:6e:1f:81:3f:1c:65:42:1b:
                    16:4e:b3:26:cb:6d:c8:3c:01:39:fb:9d:c2:2a:f6:
                    ca:d6:a7:b6:eb:6a:8f:7a:f6:c9:e4:f2:00:10:4e:
                    30:e0:c3:a3:22:22:aa:fe:c2:0b:1e:77:51:b2:67:
                    54:53:af:cd:50:f0:62:83:49:d2:6c:bf:22:be:9f:
                    10:ef:71:39:ad:11:ca:77:43:16:45:0c:42:61:a1:
                    23:bd:1d:2f:14:ac:6d:5e:9b:81:0c:48:a7:9e:4c:
                    00:70:b0:fe:9c:55:2e:02:fc:9b:38:0f:42:11:e2:
                    86:48:77:73:b7:53:b6:3d:4a:d2:db:6e:a6:99:16:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:FE:0F:25:2C:A8:69:5F:1D:D2:C1:16:84:A9:46:FC:0B:CE:B4
            X509v3 Authority Key Identifier:
                keyid:29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/323830343a336331343a3a2f33322d313238203d3e20323636313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c14::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:29:63:90:3b:5c:42:28:cd:c9:ef:ff:11:46:5a:9d:9c:
         ce:76:7d:40:05:9a:23:22:d0:f4:af:cc:6d:da:0c:e4:f8:31:
         b0:c3:16:3d:32:0c:4b:e4:c9:61:f9:98:e4:e2:af:c4:4e:be:
         a7:25:83:fe:11:b3:57:13:9a:ab:97:1a:26:71:00:48:7e:2a:
         71:f1:26:ca:51:ca:d0:93:8e:84:66:6b:5f:00:b7:ea:0b:27:
         96:07:92:37:ea:f0:4b:98:ce:a2:39:3e:18:e8:52:d0:66:b7:
         80:aa:41:49:dd:80:e5:b1:58:35:8d:2d:28:74:89:85:54:35:
         4e:6b:4a:bb:0b:6a:0d:fe:7f:c4:33:f5:41:48:66:12:7a:78:
         b4:fd:c3:d8:d0:83:ec:a9:f6:5a:6e:4f:9c:6f:fb:8a:de:53:
         8e:c0:45:55:1e:fa:49:cc:9a:c2:50:5a:da:0f:eb:77:c5:5e:
         cb:2f:5f:9e:37:b9:bf:11:7e:cf:76:f4:85:9f:93:e2:c1:23:
         7e:dd:7b:db:f1:12:44:dd:01:cb:03:5d:e0:9c:ef:f5:4e:d0:
         4d:89:a2:af:6c:90:d8:64:92:8e:83:99:b8:9d:aa:6c:6a:32:
         64:55:a2:bd:45:b2:76:43:e6:4f:bf:98:ec:0b:e3:6f:a5:49:
         e6:cb:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----