Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33322d3332203d3e20323733373238.roa (raw, json)
Hash identifier:          pBwhaisQn0FW/9th18myUBDQQI30MeV9nbfDE7t3IeM=
Subject key identifier:   7B:FF:74:91:E4:9E:F1:A8:4C:41:01:EC:3A:28:75:95:19:CF:8A:B2
Certificate issuer:       /CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
Certificate serial:       1FC90080F78240F49EDA5A1D6155F5F70D2B545F
Authority key identifier: 5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa
Signing time:             Thu 10 Oct 2024 00:35:51 +0000
ROA not before:           Thu 10 Oct 2024 00:30:51 +0000
ROA not after:            Thu 09 Oct 2025 00:35:51 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c9:00:80:f7:82:40:f4:9e:da:5a:1d:61:55:f5:f7:0d:2b:54:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F50A6A460D5319BEA5DD872C05A27993FA41793
        Validity
            Not Before: Oct 10 00:30:51 2024 GMT
            Not After : Oct  9 00:35:51 2025 GMT
        Subject: CN=7BFF7491E49EF1A84C4101EC3A28759519CF8AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:45:db:91:dc:65:97:a2:cb:7a:48:c7:5c:
                    b5:7a:2d:d4:e9:3b:04:4c:1d:d2:53:ca:5b:93:dd:
                    54:84:cd:c0:2f:2c:4d:ec:07:a3:ff:be:e5:66:53:
                    1f:b4:9b:16:5f:d4:d6:25:e8:e4:f2:96:2b:2e:69:
                    f9:d6:bf:4d:17:e2:36:db:d4:cf:55:bc:9a:38:05:
                    0f:93:98:88:bc:1e:28:06:a7:2d:be:45:ac:e7:84:
                    3e:c7:01:84:4b:6b:0f:e7:21:e3:35:d2:5d:22:7a:
                    93:1e:72:83:14:68:14:6e:ed:98:25:67:07:a7:66:
                    03:0f:f1:10:c4:f8:c9:43:17:19:ee:50:74:3d:b6:
                    aa:ba:8f:e4:fa:90:c8:1c:e2:eb:ff:9d:a6:5f:37:
                    90:e3:fc:c1:d7:3a:3e:4a:ef:dd:87:06:32:a0:3d:
                    86:7e:37:f2:cc:33:ba:17:d2:95:4d:f9:d8:3c:cf:
                    a2:ba:a1:22:ea:d6:b4:56:61:63:10:d4:cc:91:1f:
                    1e:de:e4:f3:c1:73:9d:89:1f:8f:fb:8e:a7:1f:3e:
                    f8:d7:3b:b2:58:94:ff:74:2f:f7:d3:2d:f9:b1:fd:
                    6c:e6:eb:24:40:7d:ff:90:26:5c:4f:a6:c3:d6:7f:
                    bd:2c:21:ee:24:29:20:80:09:b5:d0:81:29:eb:da:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:74:91:E4:9E:F1:A8:4C:41:01:EC:3A:28:75:95:19:CF:8A:B2
            X509v3 Authority Key Identifier:
                keyid:5F:50:A6:A4:60:D5:31:9B:EA:5D:D8:72:C0:5A:27:99:3F:A4:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F50A6A460D5319BEA5DD872C05A27993FA41793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/1/323830343a386235633a3a2f33322d3332203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:43:84:74:8f:d5:a2:0e:8b:e7:23:f1:a4:f5:3e:94:1c:59:
         8d:16:0d:bc:27:5f:8c:cc:cb:8c:9d:10:3b:b8:ff:2a:5d:e1:
         15:7e:cd:a0:ff:3f:50:d8:cf:92:2c:bc:05:07:3e:1f:d4:5c:
         b2:25:90:98:8d:4d:7c:41:fe:59:99:52:87:e7:a6:ee:0b:e8:
         bc:a7:78:f8:c7:73:12:91:4f:68:d9:9d:a1:bb:27:6b:98:65:
         38:db:20:e6:bb:ac:48:a2:85:c7:e6:4b:fd:42:8d:c2:37:83:
         2a:6c:93:5e:8f:f4:55:e7:16:25:df:77:09:48:f6:44:20:0c:
         6e:9a:6e:b0:2b:99:35:fd:7f:05:2b:62:d1:30:40:75:de:63:
         10:a3:14:6d:56:fa:f0:46:04:65:6f:94:17:ca:97:ad:4e:a1:
         f7:a0:21:55:fe:d4:1d:ea:e0:fd:bb:c3:ad:80:82:d8:57:a5:
         53:be:7f:e2:d9:97:6f:20:e9:89:85:c2:bc:a0:4b:29:99:d8:
         a4:04:3d:0b:ee:f1:df:5e:f3:49:93:92:41:33:7f:81:f9:38:
         1f:31:36:ad:91:69:2c:d9:b0:8a:0d:5a:bf:90:04:aa:91:b7:
         85:3d:e3:56:6d:82:87:7f:db:4a:5d:e6:05:b1:54:0f:e6:22:
         f7:34:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----