Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          luuJM5tBMrknN5yxBGdcVZn4/3wssMmxxGbbWLXDVLE=
Subject key identifier:   02:FC:88:13:33:13:7E:17:53:C7:FC:40:54:BA:D4:52:4F:6D:BE:EF
Certificate issuer:       /CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
Certificate serial:       1B24B69B6951005A9F3284A9430CCDF1ACA2AC7C
Authority key identifier: D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Mon 07 Apr 2025 18:06:40 +0000
ROA not before:           Mon 07 Apr 2025 18:01:40 +0000
ROA not after:            Mon 06 Apr 2026 18:06:40 +0000
asID:                     271624
IP address blocks:        2804:7e70::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:24:b6:9b:69:51:00:5a:9f:32:84:a9:43:0c:cd:f1:ac:a2:ac:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D515970A9684DA5CEE2A970D22C9F79AFA500F79
        Validity
            Not Before: Apr  7 18:01:40 2025 GMT
            Not After : Apr  6 18:06:40 2026 GMT
        Subject: CN=02FC881333137E1753C7FC4054BAD4524F6DBEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:5a:f9:9c:48:5a:38:b4:fe:dc:dc:c8:43:
                    e4:86:22:f1:d3:68:a6:ad:0b:bf:7c:8e:b2:00:87:
                    7a:04:0d:8f:5e:3f:d2:51:2f:03:28:e1:97:16:58:
                    98:e7:27:dc:76:9f:5f:ba:a1:37:77:20:d6:a8:75:
                    ba:f4:86:b9:b7:c5:a9:db:b6:9a:e3:ca:8d:bf:51:
                    1d:ae:5f:f4:73:d4:d0:56:f6:38:51:4e:e7:bd:b2:
                    ed:18:5c:45:52:c3:c6:16:a1:f7:6c:da:08:33:fe:
                    e6:28:94:46:83:ba:7e:03:e5:d3:39:93:2e:0a:ae:
                    2a:6a:fc:d4:bd:0a:0f:8f:3f:b8:17:04:2b:5a:a8:
                    2f:ac:39:49:7e:5d:a8:52:47:d8:d1:02:da:be:07:
                    82:16:80:0a:45:52:81:c2:ee:fd:b4:08:59:e5:0f:
                    c9:55:01:bf:2d:5d:1e:ea:67:a9:5e:6b:17:e2:42:
                    a0:0a:78:ec:75:fa:4d:7a:b8:ee:44:4c:e1:6a:30:
                    6f:5b:3b:07:74:0a:92:07:3d:a7:c8:6b:09:ea:99:
                    56:6f:f3:5a:c8:af:f3:27:c5:f5:0b:dc:24:1d:94:
                    1c:49:18:f0:e8:a2:b7:ab:95:b1:99:eb:a4:25:e7:
                    97:0a:ae:47:f1:36:b8:2b:bb:be:22:7a:2a:e7:18:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FC:88:13:33:13:7E:17:53:C7:FC:40:54:BA:D4:52:4F:6D:BE:EF
            X509v3 Authority Key Identifier:
                keyid:D5:15:97:0A:96:84:DA:5C:EE:2A:97:0D:22:C9:F7:9A:FA:50:0F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/D515970A9684DA5CEE2A970D22C9F79AFA500F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D515970A9684DA5CEE2A970D22C9F79AFA500F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:73:88:40:74:41:df:33:ec:1f:76:46:6b:63:f3:b3:62:0e:
         7f:67:bc:ea:60:75:9f:6b:bc:bc:90:47:12:e3:94:f8:d9:f5:
         98:b0:5d:33:13:b5:e8:a3:98:05:55:0b:4a:ce:4a:2e:f1:f3:
         ab:99:5f:84:bf:47:1e:2c:fe:81:41:a3:0b:0f:c4:ea:38:59:
         f7:d4:e7:08:b0:b0:06:12:85:4e:44:a4:4d:13:64:50:d6:a5:
         51:a5:d8:37:fb:5c:ac:a1:2f:b4:a6:01:2d:b4:16:a9:cd:3d:
         42:b8:38:bc:13:5e:76:96:2a:e4:44:62:8c:18:24:b2:b8:6b:
         bc:09:19:16:d6:91:ff:54:2c:19:55:31:b5:a8:ec:cd:ab:3c:
         8e:be:6d:f3:2e:ba:7a:02:68:35:5c:a2:c3:ef:9d:96:b7:ff:
         63:d3:52:e5:b8:b2:6e:e5:87:f5:fc:bb:9a:e1:7e:7c:25:07:
         19:96:df:cb:f2:40:5d:40:59:3c:37:78:ca:07:2c:4e:fe:81:
         a1:25:3d:6a:47:4e:92:ab:2f:36:bf:73:bc:1b:74:96:a6:db:
         9d:d1:3c:93:c7:64:88:ca:f1:80:53:02:3b:71:a1:10:16:89:
         d8:b8:dc:fa:c4:11:2a:43:fe:f5:6d:3f:c8:aa:45:c1:12:aa:
         33:dc:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----