Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
File:                     323830343a336430303a3a2f33322d3438203d3e20323636323437.roa (raw, json)
Hash identifier:          kaOlUcTspfG+uYhh11jUrw9gmdK8l4OgI9sGnRhZgfQ=
Subject key identifier:   89:CB:94:2F:B6:15:BE:03:E1:67:B5:7B:9A:93:14:C8:9E:5E:2C:11
Certificate issuer:       /CN=52BE29BC0096E62456D6790E66D2973E9E0C1018
Certificate serial:       58B51653C3BD048358A7ED4DBE59BE46CE91CC02
Authority key identifier: 52:BE:29:BC:00:96:E6:24:56:D6:79:0E:66:D2:97:3E:9E:0C:10:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52BE29BC0096E62456D6790E66D2973E9E0C1018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa
Signing time:             Thu 06 Mar 2025 09:09:49 +0000
ROA not before:           Thu 06 Mar 2025 09:04:49 +0000
ROA not after:            Thu 05 Mar 2026 09:09:49 +0000
asID:                     266247
IP address blocks:        2804:3d00::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b5:16:53:c3:bd:04:83:58:a7:ed:4d:be:59:be:46:ce:91:cc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52BE29BC0096E62456D6790E66D2973E9E0C1018
        Validity
            Not Before: Mar  6 09:04:49 2025 GMT
            Not After : Mar  5 09:09:49 2026 GMT
        Subject: CN=89CB942FB615BE03E167B57B9A9314C89E5E2C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:a3:fa:3c:e0:a3:30:d8:ac:5d:e0:fb:c7:
                    e5:21:77:fb:77:71:b1:29:4f:d2:22:bb:91:34:03:
                    92:7d:5a:ae:23:18:97:45:81:80:36:42:bb:f0:21:
                    b3:26:44:bb:ae:2a:e0:26:e8:d7:bd:2b:a8:62:33:
                    45:f2:e8:a8:d6:15:bb:9c:b1:f1:e5:41:3c:6f:5d:
                    20:88:fe:36:10:c1:e5:3d:b5:e8:b7:24:11:42:74:
                    25:b3:2a:e9:36:71:c7:06:1b:d7:d4:8f:fe:0b:ae:
                    13:18:00:4a:de:84:f9:fc:73:11:91:96:e6:9a:fd:
                    a2:41:5c:44:10:56:1c:04:e5:df:27:94:76:28:12:
                    f1:91:f5:69:f1:ba:f5:d6:16:36:3d:61:9b:77:a1:
                    24:f9:5b:1b:0e:d3:b7:6a:36:14:2a:51:9d:06:24:
                    5f:8b:e6:05:dd:d8:db:66:e9:66:8e:38:5a:7f:f4:
                    8a:15:63:63:38:b4:4e:4b:92:f7:26:91:a7:f9:2d:
                    b1:e5:a8:03:f7:fc:18:96:dd:99:f6:79:dc:8c:60:
                    4b:cc:4e:0f:24:06:d6:54:36:02:a3:49:2c:2e:ef:
                    4a:5d:07:60:af:fa:bc:cd:46:9f:cc:dc:53:31:04:
                    3d:ef:30:87:ec:4b:aa:a0:be:89:89:18:94:4c:2d:
                    89:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:94:2F:B6:15:BE:03:E1:67:B5:7B:9A:93:14:C8:9E:5E:2C:11
            X509v3 Authority Key Identifier:
                keyid:52:BE:29:BC:00:96:E6:24:56:D6:79:0E:66:D2:97:3E:9E:0C:10:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/52BE29BC0096E62456D6790E66D2973E9E0C1018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52BE29BC0096E62456D6790E66D2973E9E0C1018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/1/323830343a336430303a3a2f33322d3438203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:40:a4:56:1d:21:b6:51:15:ae:5b:1b:90:7f:64:d2:3d:
         bd:54:a4:c9:ea:e1:ef:a1:49:3e:0d:5d:c5:a3:16:b0:55:69:
         c9:03:95:9a:e7:1d:86:f8:41:c2:f5:a6:86:c2:48:84:de:35:
         60:56:ff:c9:0d:ef:08:1b:6c:9c:fb:a4:18:5d:33:07:97:de:
         61:29:f5:1f:70:62:85:ba:30:75:44:90:93:cc:b9:01:b5:7e:
         38:16:cd:ce:f2:46:3d:25:eb:92:99:92:4d:16:33:d4:1b:df:
         0e:f6:39:09:b5:b5:15:ea:b5:f9:e5:f2:11:73:f6:33:d1:37:
         b9:e8:eb:e0:b5:25:c9:fd:2a:b4:f1:bb:8c:73:9c:23:84:fd:
         60:e7:ed:38:4a:b9:d7:45:c6:a7:7b:05:c1:e3:e6:12:29:24:
         2c:42:23:c4:64:f5:d3:94:2c:dc:90:88:5a:73:6d:2d:81:ed:
         0f:1b:f0:16:36:4d:52:b0:81:e6:f4:2d:42:cc:2d:ac:32:3a:
         dd:ba:cc:0f:5f:bf:e2:a2:26:e8:a3:65:24:64:78:2e:01:0b:
         18:82:06:48:f0:63:54:64:c8:19:8d:5d:13:e0:10:ab:d4:50:
         5c:64:52:f3:9c:7b:95:b3:0f:72:e1:c9:72:7a:3e:13:f6:94:
         8e:a1:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----