Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a343030303a3a2f33342d3334203d3e20323730373136.roa
File:                     323830343a373034343a343030303a3a2f33342d3334203d3e20323730373136.roa (raw, json)
Hash identifier:          kSYbrKhN7XD/D2LrDmhbuzhEC6BlRnveRoj6T5qKxTM=
Subject key identifier:   4D:A5:AE:72:EC:51:5E:05:2E:54:D5:7B:BC:F4:C5:D9:6C:A7:67:5F
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       3B95C93FD8DD1C4D890587276DEF32D7F08977AA
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a343030303a3a2f33342d3334203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:55 +0000
ROA not before:           Tue 24 Sep 2024 21:39:55 +0000
ROA not after:            Tue 23 Sep 2025 21:44:55 +0000
asID:                     270716
IP address blocks:        2804:7044:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:95:c9:3f:d8:dd:1c:4d:89:05:87:27:6d:ef:32:d7:f0:89:77:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:55 2024 GMT
            Not After : Sep 23 21:44:55 2025 GMT
        Subject: CN=4DA5AE72EC515E052E54D57BBCF4C5D96CA7675F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:c9:9e:9c:90:ec:dd:5b:0c:5c:b9:51:1b:
                    17:bb:2b:09:14:f3:7d:b8:19:4b:64:44:70:d7:b6:
                    63:6c:c5:4f:eb:28:e4:b0:1f:37:77:57:65:c5:0d:
                    68:8e:53:54:09:6c:46:50:c7:a0:2f:e7:03:b9:20:
                    c4:fe:b0:af:18:d0:d8:57:51:6a:de:f2:7a:d6:c6:
                    5e:f5:8c:ea:e0:db:43:62:bd:6a:11:fa:b5:bf:d9:
                    9d:35:5d:b4:42:95:1f:8f:da:57:22:54:b2:0c:f7:
                    75:63:00:79:64:ba:8a:f9:b2:31:a1:63:66:6e:55:
                    10:6e:9b:ea:02:a2:31:3e:ea:ad:b6:b3:91:ce:bb:
                    65:02:6d:d9:58:f3:a0:02:84:64:6b:78:39:36:35:
                    e0:13:c2:68:4e:97:b6:5a:1a:d9:1e:f8:5c:d0:ad:
                    fd:88:0e:66:3c:d3:71:d0:5c:72:48:dc:31:d1:21:
                    b4:1f:25:ce:26:58:c1:33:25:5e:50:c0:41:ec:3f:
                    8a:a2:77:e3:e8:66:b9:ef:35:db:87:29:a7:13:da:
                    ef:cc:39:11:40:35:82:23:54:52:71:3a:48:8b:d0:
                    8a:72:0a:17:04:cb:ab:be:75:21:f4:2f:37:14:89:
                    50:6c:e9:57:7c:8d:40:47:7e:af:a2:79:f9:56:83:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:AE:72:EC:51:5E:05:2E:54:D5:7B:BC:F4:C5:D9:6C:A7:67:5F
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a343030303a3a2f33342d3334203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:8b:be:25:58:55:e8:ce:32:89:2b:0c:b8:c8:86:ed:94:
         fe:af:22:ef:2f:66:49:ae:1f:89:02:a1:59:b2:2c:c9:ae:38:
         05:64:81:d6:c5:47:e1:7d:9e:e9:f4:e7:9d:89:9e:84:2a:7d:
         f2:da:43:01:17:05:fd:b8:49:56:3c:5c:ae:03:05:9b:e1:1c:
         5f:15:60:b3:f6:f8:5d:ee:de:d3:3c:5e:cd:7b:92:aa:a5:f8:
         b4:f5:86:b4:e9:51:f4:c4:96:4b:e9:97:41:68:7f:c5:da:a0:
         67:95:4b:eb:1c:f9:6f:47:63:2f:e2:cb:20:55:97:bb:ec:f3:
         e7:75:ee:41:35:1a:42:d3:1b:2c:62:30:ff:c6:a5:6a:2f:80:
         df:db:5a:dd:21:f3:4d:1a:1d:82:4b:da:85:78:a7:b1:5a:12:
         51:94:d6:dd:b4:bb:f0:91:94:ec:98:31:9b:ff:2f:a9:ef:bb:
         ca:a9:82:4a:cf:02:bb:34:0e:b9:b2:f9:5c:a6:14:9e:39:6a:
         c6:24:3a:e5:66:d7:31:05:ad:86:06:a1:39:d1:be:23:de:86:
         97:be:1c:6a:42:e5:70:38:dd:2d:cf:3a:98:54:90:ac:ab:2a:
         e3:a2:3f:9c:ef:56:8e:de:28:c9:6b:5d:64:dd:d7:41:1d:f0:
         5b:75:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----