Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d3332203d3e20323635333238.roa
File:                     323830343a326532383a3a2f33322d3332203d3e20323635333238.roa (raw, json)
Hash identifier:          aKk+hZrx7SANHr/33vRUjsg0HkGVFt6NiXJl7ZBkK0w=
Subject key identifier:   D4:68:A0:D2:57:DF:5A:32:4F:B5:48:F1:9F:B7:37:F2:DC:E3:85:EC
Certificate issuer:       /CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Certificate serial:       2F65C9B4B6583470A10D1A8E466160B445ACDA82
Authority key identifier: A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d3332203d3e20323635333238.roa
Signing time:             Thu 28 Nov 2024 12:43:23 +0000
ROA not before:           Thu 28 Nov 2024 12:38:23 +0000
ROA not after:            Thu 27 Nov 2025 12:43:23 +0000
asID:                     265328
IP address blocks:        2804:2e28::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:65:c9:b4:b6:58:34:70:a1:0d:1a:8e:46:61:60:b4:45:ac:da:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
        Validity
            Not Before: Nov 28 12:38:23 2024 GMT
            Not After : Nov 27 12:43:23 2025 GMT
        Subject: CN=D468A0D257DF5A324FB548F19FB737F2DCE385EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:a9:f1:81:4c:40:db:95:24:23:65:4e:1e:
                    38:ce:4f:ae:c8:08:21:a7:bb:5c:f1:3c:d2:7b:88:
                    6a:8a:0a:51:c2:13:fd:fe:5c:c4:27:ee:91:8e:8d:
                    a5:4f:50:ef:02:ca:a2:6b:df:4c:48:87:ef:77:4f:
                    95:96:8a:f6:4e:e1:e9:7c:25:b3:6d:c0:0f:06:c4:
                    4f:a4:e1:7f:31:ad:52:08:ae:f7:b7:ff:4f:fb:84:
                    98:6b:35:dd:64:ef:c3:46:a1:b1:69:74:2f:06:a5:
                    80:b5:d8:7b:eb:60:5f:69:0b:b6:5c:20:63:8f:6a:
                    b7:fb:30:b3:5b:f8:2f:78:04:09:27:27:5c:b5:ae:
                    4c:35:45:07:56:df:f4:46:53:09:b5:4b:84:e6:c3:
                    93:6f:8d:42:48:64:fe:b5:85:84:f2:2f:2d:df:ab:
                    a2:3a:a8:1d:0f:aa:69:3b:6f:5b:6f:55:f4:04:20:
                    99:6d:09:7f:eb:bd:58:bb:56:4b:92:80:a2:0d:bf:
                    a2:f6:57:da:af:5b:42:1e:2e:d5:49:3b:4b:86:99:
                    c7:0e:41:ee:ca:ce:0e:aa:1a:06:14:0b:6e:6e:52:
                    47:c8:0d:bb:91:81:b7:2f:d8:96:b2:03:66:f3:b5:
                    bb:fa:56:19:c1:48:b1:4d:15:cc:9a:3f:59:9f:1f:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:A0:D2:57:DF:5A:32:4F:B5:48:F1:9F:B7:37:F2:DC:E3:85:EC
            X509v3 Authority Key Identifier:
                keyid:A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33322d3332203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:ff:41:14:3a:92:88:93:aa:35:fb:24:98:7f:e1:66:bc:93:
         60:03:c3:21:7f:aa:5e:af:1c:9d:d3:5c:65:18:f4:3f:16:bb:
         24:e9:be:86:5e:4d:34:46:78:c5:f9:98:cb:ee:e0:ae:40:ac:
         a6:1d:5e:a4:d7:6f:6b:43:54:b1:c3:fb:ae:28:97:0c:d8:29:
         af:b2:62:3d:6a:92:b4:5e:35:a4:b2:e5:0a:90:1c:25:38:c7:
         22:59:9a:49:ad:8b:29:56:6d:4a:4b:da:b0:f5:e8:20:a0:18:
         74:7b:ca:2c:67:af:1a:f5:50:e7:f2:36:a8:1d:f4:e3:af:f5:
         04:2e:3d:34:8e:0a:05:d5:69:8b:0e:8b:98:17:de:10:d7:4f:
         d8:9e:64:03:fc:cc:6a:95:cd:3e:47:4b:22:14:37:84:ae:b6:
         45:a5:f2:69:e0:b0:c7:a2:54:27:4d:8f:36:ab:60:23:26:d5:
         f6:ec:71:b5:5b:67:08:98:23:7d:28:3c:3f:d3:bc:05:53:4c:
         1a:3d:0a:b6:58:df:ee:70:4b:5e:99:83:68:e7:35:5a:8d:16:
         52:f4:89:09:38:58:14:d1:f1:05:22:9d:6f:96:65:78:fe:34:
         22:12:27:be:ad:72:5c:7c:82:06:f4:8a:fe:c9:81:4a:2e:b9:
         60:b1:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----