Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3438203d3e20323731313032.roa
File:                     323830343a373634633a3a2f33322d3438203d3e20323731313032.roa (raw, json)
Hash identifier:          Pa4slnbyr2q2a/qPvO+yd2DHYSa4zUFPP4GteXdHVmw=
Subject key identifier:   5F:59:C7:EB:34:B9:E7:A1:DE:AF:A6:BE:D9:E8:39:E4:7E:53:99:0C
Certificate issuer:       /CN=AF8831AC886CB723D7218AAE5E84C889AAA45D7F
Certificate serial:       7B5D78767290A69612EEA112265608F34B46BD52
Authority key identifier: AF:88:31:AC:88:6C:B7:23:D7:21:8A:AE:5E:84:C8:89:AA:A4:5D:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8831AC886CB723D7218AAE5E84C889AAA45D7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3438203d3e20323731313032.roa
Signing time:             Thu 02 May 2024 23:41:12 +0000
ROA not before:           Thu 02 May 2024 23:36:12 +0000
ROA not after:            Thu 01 May 2025 23:41:12 +0000
asID:                     271102
IP address blocks:        2804:764c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5d:78:76:72:90:a6:96:12:ee:a1:12:26:56:08:f3:4b:46:bd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8831AC886CB723D7218AAE5E84C889AAA45D7F
        Validity
            Not Before: May  2 23:36:12 2024 GMT
            Not After : May  1 23:41:12 2025 GMT
        Subject: CN=5F59C7EB34B9E7A1DEAFA6BED9E839E47E53990C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:68:2b:d0:7f:9b:12:34:93:09:f6:d8:a9:
                    d1:59:0e:cb:7a:de:78:87:71:fd:5f:48:2b:07:0c:
                    41:1d:67:d5:92:d3:b1:3a:63:be:c0:5e:7c:64:1d:
                    4a:74:b9:f9:fa:65:65:0c:58:05:f7:a3:13:3c:7c:
                    2b:06:49:c2:6f:25:39:36:59:2a:e5:4b:b7:79:c0:
                    57:f9:7a:96:75:78:13:da:0b:36:e7:a8:1c:a5:0e:
                    a7:1b:c2:5e:8d:5c:74:3a:5d:db:18:62:44:d1:69:
                    6e:f3:bb:09:42:58:a3:5d:5c:e2:a4:03:5a:d8:97:
                    9c:e3:f0:cb:03:a0:4c:89:88:58:bc:94:9c:8d:5a:
                    18:e5:73:b9:2a:e5:2f:b7:40:32:80:19:cf:4d:b4:
                    a8:a1:b9:56:a2:f9:54:a6:1a:13:9c:c9:cb:0b:a0:
                    12:69:af:6c:8b:62:30:43:a5:dc:67:2e:5c:7e:3f:
                    b8:39:3d:60:41:6b:c7:33:e5:be:ac:3d:bd:f6:7e:
                    ac:a3:f5:d5:4d:f9:75:81:20:a1:de:06:f4:ad:c1:
                    47:35:08:0c:a1:1e:94:78:5b:3f:91:63:49:55:2d:
                    a1:a4:e0:93:85:21:48:2e:b5:0b:83:87:d6:d5:7d:
                    bf:69:c6:3f:2b:f6:8b:17:2c:3d:fd:c0:07:bb:c9:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:C7:EB:34:B9:E7:A1:DE:AF:A6:BE:D9:E8:39:E4:7E:53:99:0C
            X509v3 Authority Key Identifier:
                keyid:AF:88:31:AC:88:6C:B7:23:D7:21:8A:AE:5E:84:C8:89:AA:A4:5D:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/AF8831AC886CB723D7218AAE5E84C889AAA45D7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF8831AC886CB723D7218AAE5E84C889AAA45D7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3438203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:24:d0:e4:f2:a8:dc:98:d0:ed:97:22:32:9e:14:45:a4:58:
         00:db:f0:ae:d4:05:91:c3:6b:ec:0e:45:c2:a4:bd:08:5b:60:
         29:66:14:0e:f9:ae:84:4b:ee:fe:44:e8:13:87:e6:29:cd:38:
         5e:35:95:9b:dd:b9:1a:6a:8e:4b:a7:bb:7b:84:48:a0:b4:98:
         d3:f1:51:46:0e:c6:6c:2d:a0:e7:27:1e:26:38:62:ed:86:ba:
         9b:3c:5a:b2:42:8c:9a:66:1a:2b:58:e1:e9:a9:49:5e:b7:a9:
         bc:0b:6c:55:cb:7d:e7:31:61:ac:ce:fa:e6:70:06:54:d8:5d:
         2f:87:e2:44:12:a2:40:d3:80:3e:6c:5e:b9:f7:63:e5:0c:69:
         9a:59:c9:13:e8:c6:0c:c1:f4:36:98:fc:12:99:e0:1e:ee:fa:
         39:c7:05:5e:98:34:8b:ff:0b:4e:c0:7d:92:09:ec:ed:fd:de:
         6b:4a:3f:6a:0a:e5:9f:9c:1e:39:9d:d5:f6:18:d4:93:38:e9:
         45:4c:49:5b:39:51:6b:62:35:7f:90:de:4a:df:8e:38:4d:3d:
         61:46:a9:0e:51:89:69:b8:06:5d:59:64:98:93:43:7c:25:d0:
         87:54:66:d6:da:cf:af:e9:c3:c9:f4:ef:1f:1b:3f:54:ea:37:
         56:c2:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----