Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/323830343a383063383a3a2f33322d313238203d3e20323632363236.roa
File:                     323830343a383063383a3a2f33322d313238203d3e20323632363236.roa (raw, json)
Hash identifier:          PAyTkS6OONZfDCEmWkACuDxfMWg3KGFpLqCQ2TOE6s8=
Subject key identifier:   8C:D4:D3:27:7E:A6:B7:E3:83:48:A8:D3:67:C6:1B:C1:10:10:31:4C
Certificate issuer:       /CN=4450472826579B4CE6B255EA1F9A95D732359F68
Certificate serial:       36EF6BBD12CCB539FE7258BC4DFE014A86E48817
Authority key identifier: 44:50:47:28:26:57:9B:4C:E6:B2:55:EA:1F:9A:95:D7:32:35:9F:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4450472826579B4CE6B255EA1F9A95D732359F68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/323830343a383063383a3a2f33322d313238203d3e20323632363236.roa
Signing time:             Tue 23 Jul 2024 16:28:44 +0000
ROA not before:           Tue 23 Jul 2024 16:23:44 +0000
ROA not after:            Tue 22 Jul 2025 16:28:44 +0000
asID:                     262626
IP address blocks:        2804:80c8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ef:6b:bd:12:cc:b5:39:fe:72:58:bc:4d:fe:01:4a:86:e4:88:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4450472826579B4CE6B255EA1F9A95D732359F68
        Validity
            Not Before: Jul 23 16:23:44 2024 GMT
            Not After : Jul 22 16:28:44 2025 GMT
        Subject: CN=8CD4D3277EA6B7E38348A8D367C61BC11010314C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:53:fa:99:aa:de:8e:6d:7f:de:5e:3d:dc:
                    cc:e7:46:fc:ab:c7:26:f1:b3:70:9a:7b:a7:3a:e0:
                    af:3d:f3:b0:37:80:21:e0:1a:e0:70:8c:a2:29:36:
                    f9:e4:f4:e6:3d:d6:69:6b:64:c5:81:70:be:77:28:
                    c2:1e:80:8b:a3:9e:91:ef:99:65:0f:85:07:1e:90:
                    1b:aa:0b:99:0d:00:19:3d:65:85:ed:2a:e0:96:54:
                    60:a6:4a:b5:26:95:03:b9:69:a2:85:0d:2c:9c:59:
                    de:ae:9c:89:a4:00:86:14:dd:2c:11:de:ee:7b:89:
                    5f:c5:ed:58:7f:76:a4:3b:b6:49:73:a3:51:51:4f:
                    ac:d8:01:66:e2:86:c7:01:d1:fa:e9:b3:d3:75:0e:
                    e6:f0:ec:6a:2f:0f:19:c0:2f:4d:58:e6:41:43:bc:
                    ae:65:13:ef:63:d7:b2:10:9a:f3:65:16:dd:57:c8:
                    d4:ba:33:d3:81:ee:13:c8:3e:5d:6e:5b:02:2e:e8:
                    0c:a2:c2:07:7e:c9:45:7a:5d:de:16:82:4a:b5:ac:
                    65:cd:05:bf:e2:68:2f:07:13:40:fd:9a:0a:58:13:
                    1b:f8:87:83:56:ac:5b:4f:e4:a1:99:c6:b6:1f:82:
                    38:87:28:37:ed:0b:a7:39:1f:24:9d:a7:99:2c:77:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:D3:27:7E:A6:B7:E3:83:48:A8:D3:67:C6:1B:C1:10:10:31:4C
            X509v3 Authority Key Identifier:
                keyid:44:50:47:28:26:57:9B:4C:E6:B2:55:EA:1F:9A:95:D7:32:35:9F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/4450472826579B4CE6B255EA1F9A95D732359F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4450472826579B4CE6B255EA1F9A95D732359F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/wtuCqGTDm9ytxWs3j2hZJy6BTdN7oF34w1dKE1wpybh/0/323830343a383063383a3a2f33322d313238203d3e20323632363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:ab:9b:b9:25:cb:ca:6a:b8:8e:bf:3a:99:fd:96:97:24:
         b6:b1:fa:3d:6a:75:87:48:d4:40:24:63:46:bd:4f:e2:64:e9:
         ad:71:16:a8:92:ea:5c:e1:62:81:f9:52:b2:a7:9d:24:27:53:
         02:b6:6e:e5:93:92:47:40:d6:4d:5e:21:95:b6:dc:c7:e7:5b:
         b7:5f:ec:c2:2e:14:ca:91:fe:6e:3f:3e:ce:b0:ba:20:e9:a3:
         14:b3:2b:6f:29:7c:82:ed:18:b1:ca:ec:93:ab:55:a6:b3:6b:
         d0:bc:aa:b5:94:8e:b9:56:96:9b:b2:3b:bc:1f:3e:02:c3:0d:
         7a:71:08:b2:55:13:3e:d1:2f:8c:6f:12:f8:7a:be:e2:a9:03:
         64:fd:9b:f2:58:d1:fb:96:5c:e6:e3:74:11:07:5a:7c:9c:99:
         1a:b9:0f:4c:8b:35:92:9d:8c:53:b5:41:50:ab:6a:5b:b3:bd:
         3a:26:f3:c4:8e:84:8d:8e:04:11:0e:df:91:5e:c5:ca:ce:98:
         73:59:b4:95:c0:28:06:17:d6:fd:8b:fd:be:6f:60:e6:d4:a3:
         97:92:29:cf:08:75:bf:7b:a9:05:13:0a:84:2f:75:70:3f:69:
         ec:e0:7a:bd:c1:27:ad:98:78:7d:24:d6:51:ad:d7:4b:52:57:
         da:1d:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----