Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa
File:                     323830343a343334383a3a2f33322d3332203d3e20323637353630.roa (raw, json)
Hash identifier:          G2a4dtnTvYywl+tpsWv3JmK7126PRSyxS7elMekyYik=
Subject key identifier:   C8:9E:4C:C0:BB:FE:33:77:9B:07:C1:5E:C1:4E:18:36:F6:CE:7D:96
Certificate issuer:       /CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
Certificate serial:       0892C73D563EAF32FB27062964B6E3D4C78A8916
Authority key identifier: B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa
Signing time:             Wed 11 Dec 2024 11:59:41 +0000
ROA not before:           Wed 11 Dec 2024 11:54:41 +0000
ROA not after:            Wed 10 Dec 2025 11:59:41 +0000
asID:                     267560
IP address blocks:        2804:4348::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:c7:3d:56:3e:af:32:fb:27:06:29:64:b6:e3:d4:c7:8a:89:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B803BC9703804FF887278F7D7670E2C3CDEB88F2
        Validity
            Not Before: Dec 11 11:54:41 2024 GMT
            Not After : Dec 10 11:59:41 2025 GMT
        Subject: CN=C89E4CC0BBFE33779B07C15EC14E1836F6CE7D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:72:81:a9:e7:fa:ad:01:f0:af:ca:41:d6:ab:
                    3b:82:f9:b2:1c:2e:fe:c4:e1:97:1d:dd:38:b1:5c:
                    91:1f:e5:35:21:b9:65:54:8d:05:8b:9b:9f:a0:0c:
                    f3:ff:e4:dd:be:db:06:a0:75:e8:54:7c:60:90:ad:
                    17:7b:7b:19:f9:00:92:53:db:b7:30:ef:cb:e6:ad:
                    ba:a2:db:69:10:ba:42:72:c3:ca:b2:1d:a8:b9:f3:
                    55:8b:a9:7a:ff:3e:e9:6d:5d:79:4a:08:4f:7d:89:
                    d4:10:70:f9:b6:7a:de:bf:a2:b6:fc:c3:27:60:1c:
                    e6:98:2a:bd:61:31:49:fe:8f:fa:4b:1e:28:ab:69:
                    47:74:09:33:15:72:cc:db:18:93:b0:0a:ff:21:8d:
                    f0:8c:5a:e0:27:32:fd:1e:6e:95:af:fc:d8:55:c2:
                    11:80:35:9f:67:19:91:07:cf:9e:e0:0f:c5:98:c3:
                    3b:c7:1d:2f:84:b9:6e:e4:ea:7b:d9:93:96:03:45:
                    1d:01:41:a1:fc:a3:b3:34:69:dc:a3:11:49:88:ab:
                    02:54:68:40:5f:99:e7:00:3e:d1:68:5b:eb:6a:52:
                    9a:df:f8:e1:55:ca:9a:13:11:72:cd:45:25:f0:e0:
                    0c:57:9c:e2:18:10:41:54:9b:db:87:cd:bf:40:a0:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9E:4C:C0:BB:FE:33:77:9B:07:C1:5E:C1:4E:18:36:F6:CE:7D:96
            X509v3 Authority Key Identifier:
                keyid:B8:03:BC:97:03:80:4F:F8:87:27:8F:7D:76:70:E2:C3:CD:EB:88:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/B803BC9703804FF887278F7D7670E2C3CDEB88F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B803BC9703804FF887278F7D7670E2C3CDEB88F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3a2f33322d3332203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:a4:88:79:6e:36:7f:44:e7:e9:ee:4d:f8:2e:d2:5e:02:
         15:a7:65:72:90:51:01:7e:85:0c:a1:bd:72:a0:03:cf:62:52:
         39:42:d0:64:59:ef:55:b5:52:5f:7e:32:48:60:19:b7:fc:94:
         6c:a4:8d:93:5f:a4:c0:c6:15:d2:4e:b7:b9:ae:d9:76:6d:42:
         7b:a7:09:76:5d:db:e7:3a:7b:fd:11:fa:9b:88:64:7c:2f:9d:
         ce:54:2d:85:9c:a4:59:e3:c0:20:29:15:8c:68:a9:2f:51:81:
         fa:85:83:d8:39:08:e9:43:59:5d:5e:98:54:46:50:ad:36:af:
         5a:f8:07:17:bc:f7:2c:26:3f:3f:c2:b7:4b:7e:c3:7b:6d:ae:
         e0:21:4a:da:16:29:c0:89:2a:73:cf:89:f5:f4:ac:7c:db:eb:
         01:c7:a5:f8:2f:ba:40:f9:bb:e1:bf:58:26:fc:63:b5:75:4c:
         fe:31:e1:c4:f9:b4:26:c6:23:d7:66:a3:99:91:79:d1:73:b3:
         90:e0:45:7e:64:86:1f:21:2e:ea:bb:72:94:56:42:23:9a:e8:
         10:84:12:15:46:60:8e:f3:83:ba:6b:d3:55:8c:33:9e:cb:d8:
         f1:3f:a6:81:49:51:ad:fc:44:2d:72:5c:37:17:7a:67:fb:b5:
         f6:b4:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----