Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/323830343a363534343a3a2f33322d313238203d3e20323639343739.roa
File:                     323830343a363534343a3a2f33322d313238203d3e20323639343739.roa (raw, json)
Hash identifier:          YdYkUY6M0HdaNIPMO5406eEle21kOqJI+0VeuViVuW0=
Subject key identifier:   4A:9B:C6:F9:9F:23:75:7C:E7:E3:59:38:54:B3:1B:24:08:A5:B8:ED
Certificate issuer:       /CN=FA0108DD07DD39D8C1167D27C0357FCA73B61C0A
Certificate serial:       4CDB69FB9BA0AEA7CFADA0B8F15BB6BCFCA1AA0B
Authority key identifier: FA:01:08:DD:07:DD:39:D8:C1:16:7D:27:C0:35:7F:CA:73:B6:1C:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/323830343a363534343a3a2f33322d313238203d3e20323639343739.roa
Signing time:             Thu 04 Apr 2024 00:56:02 +0000
ROA not before:           Thu 04 Apr 2024 00:51:02 +0000
ROA not after:            Thu 03 Apr 2025 00:56:02 +0000
asID:                     269479
IP address blocks:        2804:6544::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:db:69:fb:9b:a0:ae:a7:cf:ad:a0:b8:f1:5b:b6:bc:fc:a1:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA0108DD07DD39D8C1167D27C0357FCA73B61C0A
        Validity
            Not Before: Apr  4 00:51:02 2024 GMT
            Not After : Apr  3 00:56:02 2025 GMT
        Subject: CN=4A9BC6F99F23757CE7E3593854B31B2408A5B8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:d1:38:94:40:95:5d:95:d9:7e:a0:64:8b:
                    ea:e0:1a:de:dc:0b:bc:ca:40:f5:48:2f:16:76:fe:
                    f4:10:fb:3c:a7:01:8c:09:47:03:ec:04:c8:5f:ab:
                    23:6b:a5:31:98:e8:0a:b6:01:12:e4:13:34:da:96:
                    36:b8:67:a0:2a:54:3c:69:f3:1c:c0:15:bd:9e:fc:
                    40:7a:67:d4:66:e0:64:89:63:48:8f:53:98:f5:ed:
                    45:59:e3:fa:6b:62:10:03:4b:c8:d7:45:b1:e0:d4:
                    ee:de:e6:ea:d9:41:b6:da:88:93:31:85:bb:e2:0e:
                    4e:1f:4a:eb:21:86:a7:7d:bb:3e:98:81:d1:72:d7:
                    f5:6e:59:29:a7:12:dc:b1:dc:2c:38:43:66:08:3c:
                    40:6f:bd:89:ff:c0:77:81:90:d6:eb:94:cf:1a:3d:
                    89:4f:c5:01:63:0f:f4:56:7a:e8:09:71:70:6b:1f:
                    e6:af:df:35:c8:ec:0c:fc:f9:8a:ac:b8:88:1e:7e:
                    c1:cf:ac:e7:2a:c0:dd:27:47:4c:28:80:64:b0:d6:
                    2b:94:f8:fc:09:42:ae:de:6d:4e:c7:af:c8:de:3f:
                    99:20:dd:98:0e:a8:e6:e9:4d:19:b6:70:24:4d:b4:
                    17:b0:7b:49:49:17:47:8a:8d:0d:02:e6:df:0d:bb:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9B:C6:F9:9F:23:75:7C:E7:E3:59:38:54:B3:1B:24:08:A5:B8:ED
            X509v3 Authority Key Identifier:
                keyid:FA:01:08:DD:07:DD:39:D8:C1:16:7D:27:C0:35:7F:CA:73:B6:1C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0108DD07DD39D8C1167D27C0357FCA73B61C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DcUg5mQ9MSinmMTHhUMfqpBmiGwxLJesWsEnPYeXoYs/1/323830343a363534343a3a2f33322d313238203d3e20323639343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6544::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:64:ee:c8:ef:60:89:82:8b:e3:eb:ca:e2:c3:e5:c8:68:
         42:c2:b4:5c:9c:da:40:0c:07:cd:a8:92:94:9f:23:1f:b4:37:
         61:6b:fb:82:e9:d4:2a:8a:41:76:12:c5:97:aa:7a:2d:b0:38:
         01:2e:77:43:55:99:6d:a3:3c:97:cf:cb:35:93:fb:cb:b9:4f:
         a3:d7:6e:0a:a4:34:72:38:ce:99:73:cd:30:5b:38:d7:02:9b:
         b5:3b:20:fa:da:7f:af:b7:6a:f1:f3:b0:3b:b1:09:28:e8:3a:
         9e:2b:29:7d:ad:d7:52:39:8c:bd:66:50:0b:9e:1c:6a:ae:c5:
         66:91:b8:ce:54:6a:77:3c:bd:8d:66:a1:68:7b:6b:cb:09:99:
         75:f0:4a:f1:41:b9:c3:47:81:8a:d4:63:11:3d:16:4e:a9:ba:
         27:02:b7:09:4f:e5:ad:5d:e9:2c:86:1d:64:88:43:e1:98:6e:
         7e:a7:df:f8:6b:5d:db:12:cb:56:5e:e6:6c:d3:22:ff:3f:b5:
         14:69:fd:99:ef:60:80:e0:11:eb:cf:79:a1:d1:d7:77:dd:89:
         6d:da:51:b2:c7:80:9b:d4:c1:51:5f:e7:07:8f:f0:81:e1:3a:
         0d:e2:3f:8f:84:cc:28:3b:5b:cb:4c:88:b1:47:92:7e:d8:32:
         7f:7e:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----