Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3332203d3e20323730373136.roa
File:                     323830343a373034343a3a2f33322d3332203d3e20323730373136.roa (raw, json)
Hash identifier:          rTgVc7RA408CXw+bzvJQsiBFQMCocvtxpwUi1ufbooc=
Subject key identifier:   5C:BD:95:2A:03:15:94:76:9A:6F:72:5C:F9:62:29:38:69:D0:50:21
Certificate issuer:       /CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
Certificate serial:       3F3C9C8736F96A5D4162B7D6EEF6C5E779901F83
Authority key identifier: 88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3332203d3e20323730373136.roa
Signing time:             Tue 24 Sep 2024 21:44:55 +0000
ROA not before:           Tue 24 Sep 2024 21:39:55 +0000
ROA not after:            Tue 23 Sep 2025 21:44:55 +0000
asID:                     270716
IP address blocks:        2804:7044::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3c:9c:87:36:f9:6a:5d:41:62:b7:d6:ee:f6:c5:e7:79:90:1f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60
        Validity
            Not Before: Sep 24 21:39:55 2024 GMT
            Not After : Sep 23 21:44:55 2025 GMT
        Subject: CN=5CBD952A031594769A6F725CF962293869D05021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:cd:25:e6:c5:f3:fc:83:cc:eb:21:f0:d9:
                    13:a6:0c:c6:a4:71:75:bb:6e:56:66:d0:ad:b2:2f:
                    08:48:05:38:e8:ca:61:6d:0e:7e:db:6b:68:62:e7:
                    69:f3:20:7e:f9:75:69:e5:22:cb:d6:ce:c0:b4:70:
                    80:a9:4a:f2:61:03:a4:c0:5c:9c:b3:28:55:c6:49:
                    69:d2:04:4c:14:24:20:42:6f:76:d3:0c:71:f4:3e:
                    b8:8b:49:ac:1c:fc:86:0c:6a:0d:00:59:15:d5:5c:
                    09:b9:a5:b3:47:3e:8c:d3:e1:46:60:22:37:9a:86:
                    93:96:0f:d6:b9:0e:aa:38:00:d6:df:55:ed:7b:4a:
                    54:0e:7c:9d:2e:c3:53:4d:cb:4d:18:07:1e:7f:5e:
                    05:f8:e2:e2:48:c5:46:66:d3:d5:95:e0:e0:c5:8d:
                    28:54:0f:88:c7:0e:ec:96:bb:92:84:b1:00:a2:35:
                    73:23:95:02:ff:5a:46:58:a6:60:06:d3:7a:a2:a8:
                    bd:50:5e:17:fe:73:16:b5:62:45:dc:59:77:79:9d:
                    33:b5:8b:94:64:47:b1:c2:b8:8c:cb:16:19:82:10:
                    3c:c8:8f:67:e1:3c:cf:21:39:f1:e4:37:17:10:ec:
                    f9:c8:29:21:02:cb:bb:06:48:88:f5:26:31:89:fc:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BD:95:2A:03:15:94:76:9A:6F:72:5C:F9:62:29:38:69:D0:50:21
            X509v3 Authority Key Identifier:
                keyid:88:C6:A8:47:E4:12:F3:89:EC:4F:9E:9C:B3:A3:F5:E3:84:AC:BA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88C6A847E412F389EC4F9E9CB3A3F5E384ACBA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XXvt41aR2BHTBdQKekBP1hhzBK47k4HWvv78U5C4ybU/0/323830343a373034343a3a2f33322d3332203d3e20323730373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7044::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:a8:8c:7c:5c:21:72:0b:0e:a5:4f:fe:04:7c:4a:91:90:2e:
         a6:9e:bd:c4:84:97:c7:72:a7:f9:43:84:3c:cd:bc:b9:b2:4f:
         bd:01:6b:bb:98:0d:93:e0:9c:8d:0b:b5:19:12:3b:fc:43:66:
         eb:02:6a:6f:64:e1:6b:d7:ca:66:31:0f:d3:a4:08:fa:0c:07:
         be:c7:00:d6:72:52:ed:0b:e4:24:5a:c0:ed:9e:d3:c6:4e:df:
         a6:7d:65:7c:27:35:8b:86:c7:99:37:8a:35:c1:c4:06:48:ae:
         98:32:57:ec:97:9b:6b:4d:f9:1a:6c:5c:bc:95:e7:b0:7a:6d:
         ab:e9:4a:53:13:2b:4f:f7:1a:3a:38:56:72:11:fa:f0:a1:aa:
         1c:21:5b:04:90:61:fd:ed:eb:dd:89:a3:87:6b:73:49:e4:a7:
         94:e7:7a:9b:24:b9:fa:24:cf:4d:04:dd:47:c6:05:fe:25:cd:
         cb:67:d0:a4:7e:12:5c:dd:3d:67:c5:41:13:99:e5:7f:33:59:
         36:ee:6f:6c:f4:0e:0c:8b:e1:16:ed:0e:2c:19:1b:81:31:59:
         8f:8b:0f:6c:9d:49:75:c8:2e:40:64:a4:18:21:44:c9:b5:f9:
         fe:28:59:ee:7c:a5:9b:74:98:4e:1d:5e:8f:25:cd:bb:42:ee:
         15:5d:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----