Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
File:                     323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (raw, json)
Hash identifier:          yUteTQqreAkJnpXcYPwij6GTapSzoMJtjRJs4MgYyzw=
Subject key identifier:   D3:FC:0A:D1:FC:74:87:F9:AE:68:5C:F9:78:2F:F7:F4:5B:95:39:2A
Certificate issuer:       /CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
Certificate serial:       0B9B25BEF6A6B758A2536D0D12821950A92E873B
Authority key identifier: 0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa
Signing time:             Fri 12 Apr 2024 13:27:05 +0000
ROA not before:           Fri 12 Apr 2024 13:22:05 +0000
ROA not after:            Sat 12 Apr 2025 13:27:05 +0000
asID:                     263080
IP address blocks:        2804:964::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:25:be:f6:a6:b7:58:a2:53:6d:0d:12:82:19:50:a9:2e:87:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
        Validity
            Not Before: Apr 12 13:22:05 2024 GMT
            Not After : Apr 12 13:27:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:86:ed:e5:2e:d0:bc:4c:20:6d:cb:e7:1e:
                    62:f4:ab:e0:ca:8c:30:cb:9b:4d:26:44:73:ee:05:
                    85:fd:fd:00:20:6d:65:56:b9:07:a5:2e:7a:0c:79:
                    e7:f7:f9:01:1c:80:93:b6:5f:cb:a0:44:2d:0b:ad:
                    f5:fe:a5:d2:5c:9c:64:67:79:21:40:8b:1f:b2:10:
                    a6:90:d7:4d:ee:69:25:52:ed:59:b7:d1:18:c6:31:
                    ee:78:7a:94:6f:05:71:44:70:c9:cc:21:50:c2:c4:
                    b9:b8:6e:27:a6:62:a7:6d:be:c6:ac:46:d1:de:59:
                    4d:ee:8e:6f:7c:80:40:c0:0b:38:97:af:9e:4b:27:
                    bd:53:01:fd:58:bb:8e:b8:23:ad:97:fc:38:97:26:
                    c5:2c:c7:da:fc:3a:7b:53:76:bd:d6:a2:88:d6:07:
                    90:f6:53:d1:d1:dd:0f:91:62:50:50:cc:bb:1c:31:
                    45:ff:d3:31:f0:ec:00:95:68:9e:f4:73:7b:9a:ae:
                    6d:6c:74:1d:d2:56:b3:11:c2:b1:01:bd:0c:19:55:
                    a0:4c:29:e1:43:95:99:52:86:6b:1c:fe:29:b1:51:
                    fb:d9:63:29:16:23:64:5c:3e:e4:1d:ca:24:09:05:
                    fb:77:67:20:06:4c:55:d7:d2:d9:97:1d:a6:b9:53:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:0A:D1:FC:74:87:F9:AE:68:5C:F9:78:2F:F7:F4:5B:95:39:2A
            X509v3 Authority Key Identifier:
                keyid:0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/323830343a3936343a3a2f33322d3634203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:964::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:90:58:e6:f3:d1:1a:b7:d6:bb:83:3e:fc:51:96:8f:d4:9e:
         54:ae:2d:0f:b5:ea:65:cb:3e:d9:65:2d:0c:a1:e0:1d:db:e3:
         3e:de:22:61:30:93:16:17:26:25:4d:e6:c4:9a:0f:ec:f8:46:
         71:47:e3:8b:af:d8:a6:b2:a5:64:96:f6:65:d2:ee:2b:55:89:
         1c:23:82:28:65:87:b6:a7:c6:f9:23:82:c5:89:d2:93:86:16:
         50:fa:c9:7a:ae:d7:4b:c9:bd:dc:9b:3a:59:97:46:11:08:31:
         33:12:cb:8d:8d:3c:85:92:26:e0:e1:17:0c:e8:4e:82:88:91:
         ae:b6:1c:03:12:bf:df:f3:bf:c3:2e:d5:95:e4:d2:03:8e:2b:
         70:7f:aa:a6:07:cf:48:8c:4a:d4:5a:13:58:25:63:7d:4b:cd:
         03:0d:3c:a1:63:10:6e:8c:4a:ed:09:c6:cf:f2:47:ec:66:bb:
         f1:d0:83:bc:7f:f1:46:5b:4d:5d:46:6a:64:04:a0:89:cf:54:
         db:5e:a8:f3:a4:d5:78:15:22:6e:ad:40:03:b4:68:d3:2c:e3:
         7b:62:0a:55:af:3e:19:88:7d:f6:55:f9:92:c2:1e:c9:5c:b9:
         b6:b1:08:90:74:94:f8:d6:29:37:fc:85:f9:e7:87:b4:b1:8e:
         1f:22:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----