Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          j92xvtJARVCXXDdAPH3EflkV3mWoFZtEo3vxNOPLH7k=
Subject key identifier:   2F:69:A9:6A:33:7C:C0:58:66:C7:36:3F:CC:E0:66:AC:46:F6:82:A5
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       7936BEB1BB160FEA1BF64F3FDDE04F978EF4F603
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:26:27 +0000
ROA not before:           Sat 12 Apr 2025 00:21:27 +0000
ROA not after:            Sat 11 Apr 2026 00:26:27 +0000
asID:                     274726
IP address blocks:        2804:92a8:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:36:be:b1:bb:16:0f:ea:1b:f6:4f:3f:dd:e0:4f:97:8e:f4:f6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:21:27 2025 GMT
            Not After : Apr 11 00:26:27 2026 GMT
        Subject: CN=2F69A96A337CC05866C7363FCCE066AC46F682A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:3e:50:94:c5:94:b8:39:e4:88:eb:c7:ac:
                    9f:1c:c7:2f:73:b9:7f:52:62:1a:4b:eb:ac:f0:8b:
                    bc:e2:ab:a8:9c:5c:5d:df:3a:71:aa:12:0b:db:01:
                    39:09:20:d7:88:5c:0f:38:6c:d2:b4:8d:bf:a4:50:
                    28:bf:c9:a9:8f:64:2d:db:85:9d:2e:4d:51:f8:d4:
                    87:2d:71:71:f2:45:7f:f0:67:f2:14:b6:0f:84:11:
                    68:fd:3a:c0:33:d6:da:97:fa:e7:a7:70:1e:84:80:
                    05:47:f9:8e:0e:6f:71:f8:f3:74:32:31:01:59:6a:
                    52:14:b6:c3:59:a9:a8:77:48:79:9a:99:0a:50:b0:
                    b3:42:2b:c6:cc:bc:6b:f0:56:8c:96:67:13:20:60:
                    90:2b:99:b2:f6:9e:3e:89:99:13:e6:b9:ed:5d:08:
                    8a:79:82:68:32:67:65:98:48:23:02:8d:77:3d:52:
                    13:8e:2a:ca:57:37:8a:16:ca:9a:c1:13:f0:1d:be:
                    9e:2d:48:a2:a0:46:99:79:c0:50:51:6e:65:91:f9:
                    eb:37:b0:91:22:35:5d:af:cb:cb:c2:09:20:1f:18:
                    df:f4:ce:8c:43:78:25:4f:e1:61:7f:4f:3d:d6:38:
                    0f:a5:ca:fc:f8:87:c5:ee:08:ec:a9:86:d4:ab:ff:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:A9:6A:33:7C:C0:58:66:C7:36:3F:CC:E0:66:AC:46:F6:82:A5
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:fc:2c:26:51:29:be:f1:f0:a7:d8:be:4b:8a:5e:6b:ac:
         77:df:cc:41:ca:d2:77:ee:9b:8e:97:ba:14:32:be:cb:2e:06:
         a4:b8:7f:6d:e3:d4:8b:33:4c:b6:e1:d5:dc:30:37:d2:5d:3d:
         de:f2:6c:7b:3c:83:33:92:89:bf:93:25:b4:de:e7:c3:e9:7d:
         e0:dd:f1:ca:56:aa:bc:e4:49:3e:db:92:62:36:f1:30:67:1c:
         45:c3:ba:96:6c:d3:7a:75:44:d1:54:84:d1:0e:a1:9c:3c:0f:
         f1:e0:2b:59:41:7e:f2:e9:ff:e8:5d:96:34:9f:6f:11:68:b4:
         8d:3e:cb:8f:68:10:a2:2a:12:67:1c:83:ce:9b:1c:63:e6:ff:
         c7:03:b2:ec:ff:03:6f:4f:d8:46:34:82:16:0d:fe:a9:e0:b2:
         c5:36:9e:ee:c0:99:3c:52:eb:9f:1a:8b:af:cf:59:41:c3:5b:
         d6:a0:3b:ee:47:17:33:fb:7d:3e:6f:d5:1b:5d:b9:49:5c:9a:
         2f:3b:21:77:2d:9b:97:7b:e3:28:9e:dd:a2:99:d4:f5:4a:87:
         26:32:1f:d6:eb:6e:61:87:8f:31:b3:61:ce:5a:c2:90:8a:01:
         f4:58:50:f2:d7:bb:4c:46:1e:e7:34:f6:36:be:d0:e9:34:9c:
         c4:65:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----