Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa
File:                     323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa (raw, json)
Hash identifier:          LLUTxcjjXdqe0vBq3ux8fPyzHbUJOPsjzvMz3aioC1c=
Subject key identifier:   E0:2E:CE:30:49:AF:05:F1:85:60:B7:9C:6E:CD:CC:F7:A8:6A:0C:B8
Certificate issuer:       /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial:       623B22B9BCE9B3645B935D4571E83CADC31AFC4E
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa
Signing time:             Thu 04 Apr 2024 18:50:02 +0000
ROA not before:           Thu 04 Apr 2024 18:45:02 +0000
ROA not after:            Thu 03 Apr 2025 18:50:02 +0000
asID:                     268444
IP address blocks:        2804:514c:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3b:22:b9:bc:e9:b3:64:5b:93:5d:45:71:e8:3c:ad:c3:1a:fc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Validity
            Not Before: Apr  4 18:45:02 2024 GMT
            Not After : Apr  3 18:50:02 2025 GMT
        Subject: CN=E02ECE3049AF05F18560B79C6ECDCCF7A86A0CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f0:41:b6:5e:42:75:c0:c8:a2:bb:be:85:c9:
                    81:e2:ff:c0:ac:11:1a:66:8c:1e:3a:01:1d:07:5d:
                    9a:be:89:db:2a:35:69:85:8f:0e:5d:71:c9:65:79:
                    d9:03:87:29:12:81:69:4f:4c:64:5f:11:7b:5a:a0:
                    b5:f5:75:36:94:48:d3:8d:fc:0d:4e:6d:75:ed:7b:
                    9c:2b:82:a2:f8:d6:63:f1:ef:33:42:6e:04:1e:bd:
                    45:21:30:f1:f5:17:b9:9e:5c:cf:d2:dd:ff:dc:be:
                    9a:54:bd:ff:b7:e9:41:85:fe:48:5a:d4:6c:b7:dd:
                    bb:6d:ac:ee:73:d9:7c:3f:74:dc:58:2c:23:01:28:
                    3b:39:d5:3f:88:18:f7:f2:f9:36:db:7a:16:b5:5c:
                    99:cd:65:e9:cf:50:d2:31:b4:3c:2a:c1:6d:50:27:
                    06:63:02:33:26:a3:5c:24:39:ff:72:90:01:2b:18:
                    91:f7:7a:f0:3e:4e:42:7a:5d:93:e7:39:36:9f:62:
                    01:e6:b7:fc:4a:55:73:65:86:9f:d0:d7:c3:f4:03:
                    7a:6a:93:ac:03:53:e7:fd:7f:cf:60:62:a0:3b:c4:
                    9f:0b:30:1a:d2:89:e6:90:b7:47:07:72:89:d9:ce:
                    24:a4:84:c9:f8:df:a2:98:f7:86:94:cc:ee:aa:a6:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:CE:30:49:AF:05:F1:85:60:B7:9C:6E:CD:CC:F7:A8:6A:0C:B8
            X509v3 Authority Key Identifier:
                keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:514c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:97:2b:b6:72:d8:11:83:bd:aa:d1:48:0f:b6:51:88:2d:55:
         10:d1:2b:b5:b9:60:ce:92:72:95:ac:f7:fd:e3:d1:af:3e:ae:
         11:3c:7d:24:a7:32:ca:a2:75:c0:f0:e2:bf:67:d8:3b:9b:a3:
         ad:bb:73:d1:2f:9e:24:4b:4d:36:fe:19:7b:34:ed:85:fe:a8:
         71:83:35:8d:2c:2c:56:8b:dd:ae:5c:50:a2:44:54:36:6b:6c:
         64:72:b8:8b:32:9a:35:2c:27:96:e8:48:92:cc:62:fc:df:98:
         a9:b5:db:e2:1f:be:06:52:39:df:b1:25:53:6d:54:31:d9:7c:
         02:4c:2c:ec:f5:48:43:03:9f:a7:02:13:f0:fa:8a:0a:54:80:
         3a:bb:3f:a6:f9:cc:ee:97:aa:87:f4:12:fc:53:6d:8a:c7:dc:
         db:96:4c:48:02:74:80:f0:15:60:a9:03:3e:a1:ff:54:f0:df:
         c8:b7:f3:85:ad:74:5b:63:71:63:0e:41:ad:77:a8:8c:eb:e2:
         5a:a8:24:a7:a0:83:c2:5b:97:49:fe:11:14:cf:50:c3:d2:1b:
         e0:30:ea:dd:8a:7f:1d:c5:e0:e8:3e:bc:b9:90:eb:ca:0f:7c:
         f9:f7:ab:3f:7e:79:4f:d4:cb:ca:53:7a:eb:a3:d6:e7:08:90:
         b5:4e:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----