Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/323830343a333638343a3a2f33322d3332203d3e20323636333533.roa
File:                     323830343a333638343a3a2f33322d3332203d3e20323636333533.roa (raw, json)
Hash identifier:          YnHaIzVY47VbOonxidaiZcheZWXGKwnn/62xa5ghPbQ=
Subject key identifier:   3B:A7:C8:20:C5:7D:B8:B6:11:67:10:AE:85:41:DF:56:68:31:16:95
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       0D8BF95F13C1AD80FDAF25850C6EB5948324A0EA
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/323830343a333638343a3a2f33322d3332203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:24 +0000
ROA not before:           Wed 03 Apr 2024 18:31:24 +0000
ROA not after:            Wed 02 Apr 2025 18:36:24 +0000
asID:                     266353
IP address blocks:        2804:3684::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8b:f9:5f:13:c1:ad:80:fd:af:25:85:0c:6e:b5:94:83:24:a0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:24 2024 GMT
            Not After : Apr  2 18:36:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:24:95:03:df:d4:90:65:0e:e4:bb:61:d7:
                    b7:3b:a4:d4:d4:88:5e:0e:b9:59:ab:85:6d:cc:b0:
                    49:ef:1e:36:ec:54:7c:ce:57:2b:7a:b8:fa:91:86:
                    eb:23:94:26:6d:b9:c9:61:33:2c:80:ad:7b:4b:30:
                    a7:17:66:bd:b3:5c:91:1d:db:0e:7a:e8:f8:e9:a0:
                    19:58:9c:13:1b:ab:e5:3f:53:2d:c0:02:ea:54:ba:
                    35:29:5b:d2:89:f8:2f:9a:d5:94:da:b9:01:f1:f3:
                    32:9a:dd:34:7e:8d:c7:8f:d8:2d:8d:a4:ca:99:5d:
                    93:72:8a:4c:57:bb:dd:8a:29:03:00:bb:12:ce:8f:
                    e5:f1:2f:99:1a:66:32:e6:86:f9:02:b6:a6:57:eb:
                    24:54:92:bc:22:3c:98:72:01:b1:43:1c:5b:59:35:
                    3f:d7:f2:7d:6d:d8:4d:12:26:b7:94:6a:1e:e0:77:
                    97:63:88:5a:79:90:ac:3a:67:a2:7a:9f:86:d8:69:
                    87:65:94:3e:db:83:63:46:a7:f3:16:86:30:ba:aa:
                    cb:db:cc:c6:ba:5f:4a:19:7b:20:85:45:fe:16:9f:
                    95:3c:95:c3:4f:fc:cb:86:61:b1:eb:8b:e3:11:f0:
                    cf:5a:d5:77:dc:34:bf:06:4e:24:1e:65:08:26:d9:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:C8:20:C5:7D:B8:B6:11:67:10:AE:85:41:DF:56:68:31:16:95
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/323830343a333638343a3a2f33322d3332203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3684::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:f0:33:f5:20:27:a0:a1:7f:55:64:59:79:b4:b0:fa:9f:27:
         cc:55:bb:6f:96:fa:40:b5:3c:ca:48:71:6e:b7:d2:d2:95:bc:
         e1:ee:14:33:85:13:dc:65:bf:ee:e9:8c:2b:79:61:70:b5:67:
         0a:57:b6:07:f4:ab:5c:e9:32:77:26:3e:72:4d:64:e5:2b:c8:
         ec:78:b5:7e:85:03:32:46:25:cb:2e:fb:c5:eb:e6:88:6a:8f:
         e4:be:2f:42:6c:63:14:9b:e5:0a:f4:83:0a:c5:5d:5c:9d:58:
         db:58:ea:55:7d:12:23:30:c2:89:67:f7:98:03:e3:72:3f:41:
         96:13:e6:59:e4:81:80:d9:78:b7:32:b8:69:08:2b:f6:d5:26:
         87:c3:55:d6:93:58:e5:cc:77:35:f1:bf:3d:52:62:3a:54:6f:
         66:28:61:fc:3c:f8:e4:14:5c:87:66:ac:31:ed:2a:fb:c1:7b:
         14:44:4e:f9:2c:3b:8c:dd:d6:88:6f:0c:b6:49:d8:8d:21:37:
         4b:0f:2a:bf:49:45:64:b6:5d:d8:b4:d5:a4:5a:6e:d7:4d:36:
         58:29:93:f4:bc:57:13:70:67:3d:4c:09:ac:58:a4:e5:b9:29:
         c9:3b:f9:f9:8f:73:93:a3:7b:b3:4c:98:87:07:52:96:56:8a:
         31:2f:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----