Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33322d3332203d3e20323638333038.roa (raw, json)
Hash identifier:          9gTmmfVH5j1gZnVf3E3tWR3sNPk875mQkPhY8SdYVI8=
Subject key identifier:   D0:A0:6A:87:DE:DD:49:B3:A6:8B:69:0B:C9:52:44:D1:1E:BA:BD:66
Certificate issuer:       /CN=832B06F1B7DDB99E413147B2D786DA7B38425995
Certificate serial:       06C2B5A454B34848D62FC7F78FCA06E4E90D54A9
Authority key identifier: 83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa
Signing time:             Tue 22 Apr 2025 14:28:09 +0000
ROA not before:           Tue 22 Apr 2025 14:23:09 +0000
ROA not after:            Tue 21 Apr 2026 14:28:09 +0000
asID:                     268308
IP address blocks:        2804:4f28::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c2:b5:a4:54:b3:48:48:d6:2f:c7:f7:8f:ca:06:e4:e9:0d:54:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832B06F1B7DDB99E413147B2D786DA7B38425995
        Validity
            Not Before: Apr 22 14:23:09 2025 GMT
            Not After : Apr 21 14:28:09 2026 GMT
        Subject: CN=D0A06A87DEDD49B3A68B690BC95244D11EBABD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:7a:f7:cf:5a:39:14:2a:aa:fb:15:1d:cb:
                    22:21:cd:d7:f1:06:0e:05:15:1f:2c:8d:88:ed:9a:
                    79:e9:63:15:c9:46:66:71:6b:08:4b:5a:dc:52:31:
                    5c:ad:41:87:98:04:3e:63:00:c9:83:65:c9:a2:d2:
                    b9:76:05:59:1f:55:71:0c:4a:57:10:37:51:82:db:
                    68:48:f3:03:dd:c0:1d:a4:2e:c2:1b:f8:2d:65:6a:
                    3e:77:d6:09:90:8d:a8:ad:ac:29:aa:25:cf:7a:07:
                    2d:65:24:6a:56:ab:7e:63:06:82:6c:ec:a4:81:a2:
                    3f:68:35:62:0d:44:75:e4:80:a6:68:04:99:fd:fe:
                    cb:34:54:de:76:4d:c0:2f:de:93:32:a5:74:84:6b:
                    72:df:bc:80:93:46:97:d2:66:17:8a:26:4a:35:40:
                    cb:32:8f:be:38:f8:d5:0a:c7:98:e1:13:c1:58:cb:
                    5e:54:15:38:1f:9f:cd:34:43:b6:55:95:ac:56:98:
                    4d:4c:bc:a2:46:45:bf:db:96:66:10:45:ab:a6:ea:
                    4e:2e:9b:68:30:47:c2:61:9f:46:b1:29:7d:a6:e8:
                    86:1c:c2:ff:d6:7f:dc:52:e7:f5:fd:04:80:f0:4e:
                    52:6d:19:ab:04:3b:6c:37:d4:98:13:11:d9:4c:a7:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A0:6A:87:DE:DD:49:B3:A6:8B:69:0B:C9:52:44:D1:1E:BA:BD:66
            X509v3 Authority Key Identifier:
                keyid:83:2B:06:F1:B7:DD:B9:9E:41:31:47:B2:D7:86:DA:7B:38:42:59:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/832B06F1B7DDB99E413147B2D786DA7B38425995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/832B06F1B7DDB99E413147B2D786DA7B38425995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33322d3332203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:69:60:69:81:b0:19:b8:5b:fe:e0:7a:87:02:ed:58:b9:70:
         5c:a3:70:c0:c9:83:9d:fd:fd:b5:db:02:ee:5e:75:46:4e:5b:
         3d:11:9e:7c:83:26:09:80:2b:56:6d:4f:41:74:4d:e6:09:9d:
         90:df:d6:21:a7:2f:aa:de:eb:a9:fe:b0:97:33:bc:fc:44:e4:
         5b:52:7a:44:5e:74:11:29:23:21:92:67:8e:cf:6a:24:38:b5:
         e7:ae:a3:5f:f0:1a:1a:69:f4:7b:a6:a3:16:eb:02:6c:15:6e:
         d4:66:28:37:e4:3c:53:df:4e:16:35:42:46:24:77:e2:35:15:
         14:68:22:15:7d:59:3e:48:64:72:e4:16:64:32:58:f6:fe:dd:
         6c:30:be:be:d3:11:37:20:f1:78:2b:14:ce:8a:64:f3:81:54:
         00:66:25:ea:16:d5:c9:3d:c9:4a:12:ec:ad:25:2e:ba:d1:44:
         9a:aa:81:cc:bc:c3:12:1f:41:5a:c1:f7:a1:e5:e6:84:2c:39:
         bf:f8:62:5d:38:e1:76:23:16:44:47:fa:99:a5:1f:5d:cc:7d:
         dc:a8:2c:5c:4b:19:af:02:ca:9d:55:56:8e:72:0c:f9:06:90:
         37:e5:ee:da:11:f9:10:74:f3:bd:49:dc:67:c1:ee:1d:31:fa:
         35:4e:96:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----