Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa
File:                     323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa (raw, json)
Hash identifier:          bM0BM3NG9Ejyorud3NnlVw1P8kGIMd6fDct18bnh7mk=
Subject key identifier:   12:96:F7:68:04:2D:CB:46:2F:ED:29:C9:C8:B3:54:74:BC:C9:F6:B6
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       24BD92A453F934595D91AD9A854857FC93BFE876
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:54 +0000
ROA not before:           Tue 24 Sep 2024 21:39:54 +0000
ROA not after:            Tue 23 Sep 2025 21:44:54 +0000
asID:                     270716
IP address blocks:        2804:7044:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bd:92:a4:53:f9:34:59:5d:91:ad:9a:85:48:57:fc:93:bf:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:54 2024 GMT
            Not After : Sep 23 21:44:54 2025 GMT
        Subject: CN=1296F768042DCB462FED29C9C8B35474BCC9F6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:7b:92:7e:49:62:b1:65:36:f8:c9:d8:ed:
                    dd:6a:1e:3a:9e:eb:28:ff:56:31:dd:13:e2:d8:49:
                    1b:b4:73:23:87:e2:b1:21:21:73:92:27:d5:0d:8b:
                    4c:d9:4c:ca:87:f0:cd:4a:53:2a:8d:3f:36:92:9e:
                    97:b6:71:22:7d:1e:93:59:f7:42:85:69:65:d1:5f:
                    13:48:3e:74:cf:be:b6:ca:9a:f1:f8:aa:20:f7:a9:
                    92:6a:76:7c:f8:a3:d3:a3:35:d8:7b:f0:fb:97:37:
                    d2:38:e3:ea:eb:08:e8:83:35:d4:08:63:eb:41:9a:
                    c5:94:df:12:34:e6:b3:a1:91:4c:e9:76:8e:53:1f:
                    dd:fc:9a:f5:65:1e:f8:51:ae:f1:c6:b8:8d:87:7f:
                    18:57:f5:0b:22:59:58:0a:ed:9a:dd:5e:1c:62:fa:
                    1a:0f:3f:d8:66:9f:c4:93:d0:a5:95:2c:45:dc:df:
                    3a:e9:d7:b8:92:7c:14:eb:30:36:74:11:a8:8f:e7:
                    88:41:50:d7:b4:c3:de:d4:d4:dc:e1:7f:76:e8:03:
                    34:37:ec:c8:e4:45:8c:6d:75:47:80:7d:39:86:14:
                    b4:44:89:d7:27:a2:f6:b9:2b:ce:f0:5e:1d:ba:72:
                    d2:fa:66:03:68:d2:c7:ef:f4:e6:b2:8d:87:cc:c0:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:F7:68:04:2D:CB:46:2F:ED:29:C9:C8:B3:54:74:BC:C9:F6:B6
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a383030303a3a2f33332d3333203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:e1:45:a0:a5:79:33:06:f1:ee:c8:4e:9f:08:0a:00:29:
         44:be:26:92:83:09:19:92:11:63:bc:6d:46:f2:7a:3c:82:92:
         dd:a4:bf:5d:b0:48:b7:09:e1:82:88:ea:ae:3b:d8:6a:1a:3b:
         fc:fa:dc:6b:3d:38:3c:44:f5:d4:ac:7f:b9:28:f0:2a:71:30:
         1f:f0:f1:91:e1:ab:16:90:99:97:3b:c2:82:71:25:33:6b:bd:
         41:d6:b0:26:10:43:ee:1d:67:69:77:5c:a6:22:c9:ff:35:5c:
         1f:0e:fb:36:31:c7:7e:39:4c:9d:7e:83:af:2c:7d:b8:2b:9c:
         84:32:99:05:f3:b1:2a:0a:91:55:02:cc:54:cb:c1:31:a2:47:
         ba:78:03:1e:5e:d6:e6:f4:28:43:6e:64:60:bf:3f:d9:9a:c9:
         79:19:16:45:e3:ea:6c:53:f1:01:11:2f:de:af:5e:e1:ba:b2:
         88:0c:7d:dc:00:3c:ce:a4:ca:e2:ef:8f:4b:d6:3b:2a:ba:d5:
         87:44:4a:6a:b4:f0:1a:0a:d4:d1:87:03:58:45:12:54:5d:33:
         49:f8:86:eb:c7:f1:d9:29:20:82:c6:8d:92:20:94:78:c6:b9:
         8e:12:16:54:ab:a0:f9:9f:02:c6:ad:67:9b:cc:2e:74:ed:72:
         81:6b:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----