Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33332d3333203d3e20323634333733.roa
File:                     323830343a316437633a3a2f33332d3333203d3e20323634333733.roa (raw, json)
Hash identifier:          4Ia2WVZ13+hx+MLPtf9TdFQs4k32AWAEt68jHvx+CXg=
Subject key identifier:   56:3B:81:20:FE:97:EE:F1:FC:55:EB:08:80:F6:F0:26:36:DE:F5:CD
Certificate issuer:       /CN=C0103B8E7179240C3C384BF92594051EBD742508
Certificate serial:       12FC2503533BFA72B3453C0A135084CC7F7C7B7E
Authority key identifier: C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33332d3333203d3e20323634333733.roa
Signing time:             Mon 16 Dec 2024 18:38:00 +0000
ROA not before:           Mon 16 Dec 2024 18:33:00 +0000
ROA not after:            Mon 15 Dec 2025 18:38:00 +0000
asID:                     264373
IP address blocks:        2804:1d7c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fc:25:03:53:3b:fa:72:b3:45:3c:0a:13:50:84:cc:7f:7c:7b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0103B8E7179240C3C384BF92594051EBD742508
        Validity
            Not Before: Dec 16 18:33:00 2024 GMT
            Not After : Dec 15 18:38:00 2025 GMT
        Subject: CN=563B8120FE97EEF1FC55EB0880F6F02636DEF5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:7c:45:4a:a4:7c:bc:07:02:af:07:ca:ba:
                    cf:fd:87:2d:ba:1b:fe:2b:c2:9a:21:d9:26:a8:54:
                    4f:90:b3:85:04:a1:ce:91:32:c9:3a:f5:32:b3:76:
                    6e:10:c4:cd:49:ba:b3:b2:f6:e6:72:ac:01:ec:6c:
                    a7:93:4a:64:a9:ab:ce:8b:c4:89:84:33:13:39:09:
                    c1:08:fa:77:6b:d0:3d:5a:04:4a:77:ea:0f:d4:66:
                    06:26:47:ab:81:30:3c:39:c4:97:e1:7b:d1:b6:c0:
                    6a:fc:21:3b:15:44:cb:6d:80:97:57:f9:02:3e:09:
                    f8:5d:37:6d:bb:01:da:6e:eb:0f:92:63:d3:00:52:
                    a2:9b:c2:c0:62:53:cd:3b:b6:1c:78:f7:b4:3d:19:
                    11:a0:5e:0b:ec:ea:f2:1a:ee:dc:27:3f:47:03:da:
                    0b:7d:f6:2f:05:df:22:db:af:97:8a:ec:03:94:9b:
                    21:2c:30:37:a3:8c:f3:d2:f3:e5:58:64:2c:9f:40:
                    a1:f5:59:31:c9:fb:de:39:d8:75:80:56:19:27:85:
                    ca:57:1f:4d:e1:93:2c:be:db:a9:28:2d:ea:6c:78:
                    0e:5f:40:0f:a8:b6:60:94:59:60:45:07:45:55:57:
                    d4:5a:4a:ce:7c:ac:af:da:72:a5:12:d5:5d:e8:55:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3B:81:20:FE:97:EE:F1:FC:55:EB:08:80:F6:F0:26:36:DE:F5:CD
            X509v3 Authority Key Identifier:
                keyid:C0:10:3B:8E:71:79:24:0C:3C:38:4B:F9:25:94:05:1E:BD:74:25:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/C0103B8E7179240C3C384BF92594051EBD742508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0103B8E7179240C3C384BF92594051EBD742508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33332d3333203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:43:2c:8d:49:f3:3a:a2:fe:f4:41:b2:79:6c:d8:e4:94:
         69:5e:f6:12:f7:53:5e:c0:d6:df:91:4f:ab:69:ab:6d:e1:c9:
         47:22:89:87:88:09:ff:f6:96:02:e3:92:90:17:ee:1f:f1:a3:
         50:cb:c7:e1:1a:76:f6:6e:38:77:53:37:81:64:d7:ca:7b:d3:
         7e:53:fd:3a:40:8e:2a:c5:c8:36:80:c2:ea:e3:89:b5:d5:bf:
         2b:70:57:a3:d2:a5:f9:ff:ce:f6:db:1c:8a:83:75:51:22:0d:
         67:ca:01:70:5c:19:13:95:4f:ba:d4:dd:40:23:6c:8a:23:fa:
         88:ec:ec:70:7d:2e:5e:d8:14:85:a1:b4:b8:f8:e1:fd:ce:59:
         65:4d:6f:f1:95:9e:cc:a0:3d:88:e7:5e:61:8c:1c:b1:1a:71:
         88:bc:b9:f5:86:36:04:b5:14:97:01:4c:0f:ee:c1:f3:90:e4:
         c8:a9:be:75:b4:7f:fd:11:0f:0c:f8:50:68:e2:65:ba:7a:0f:
         cc:88:c8:75:b3:ae:d0:6e:7c:d2:9d:a1:5b:92:bd:88:8d:b6:
         6b:19:14:ef:e8:e9:52:fc:60:e2:86:6e:d2:07:82:0a:61:cf:
         f6:e6:4b:e8:d8:78:fb:9e:c3:20:29:89:60:28:61:ca:4f:fb:
         40:63:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----