Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/323830343a376564343a3a2f33322d3332203d3e20323731363530.roa
File:                     323830343a376564343a3a2f33322d3332203d3e20323731363530.roa (raw, json)
Hash identifier:          raqx8GkZPLNYNrzipTpwvLnALKpMCY4hnY4//Vok7No=
Subject key identifier:   B7:63:50:48:E8:E5:A8:50:FC:06:C8:50:D0:95:02:22:59:64:45:26
Certificate issuer:       /CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
Certificate serial:       254C30FF2BB8F599452417833DBFCF8D571BBFE7
Authority key identifier: 32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/323830343a376564343a3a2f33322d3332203d3e20323731363530.roa
Signing time:             Wed 03 Apr 2024 22:53:45 +0000
ROA not before:           Wed 03 Apr 2024 22:48:45 +0000
ROA not after:            Wed 02 Apr 2025 22:53:45 +0000
asID:                     271650
IP address blocks:        2804:7ed4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4c:30:ff:2b:b8:f5:99:45:24:17:83:3d:bf:cf:8d:57:1b:bf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
        Validity
            Not Before: Apr  3 22:48:45 2024 GMT
            Not After : Apr  2 22:53:45 2025 GMT
        Subject: CN=B7635048E8E5A850FC06C850D095022259644526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:2d:fc:fb:77:38:f0:0b:e2:50:6e:84:47:
                    ca:f1:94:91:27:f7:c6:1f:02:0d:7d:e7:6d:a3:93:
                    ac:3b:6f:98:64:43:0c:42:8b:45:fb:6c:97:98:05:
                    09:e6:d9:ea:36:0c:eb:f3:1e:3c:f0:f4:39:f0:57:
                    97:00:1f:4b:c7:3f:c5:72:4f:45:66:f6:54:40:ac:
                    d5:79:c9:bb:66:d0:a2:76:d4:b4:a6:0a:03:cc:78:
                    96:c8:02:d6:59:c1:db:39:e5:d1:7c:e9:5c:d1:f6:
                    a4:9a:56:19:6c:57:fe:52:9a:2c:c1:45:4f:eb:6e:
                    32:f5:42:52:41:52:cf:91:10:b6:1c:ae:ea:d6:81:
                    4d:4c:4f:5c:9d:55:1d:bb:15:3b:f0:a0:ac:50:da:
                    db:73:1b:e1:44:01:a4:b5:dc:e3:43:a6:ad:42:59:
                    05:76:26:f2:9d:90:2f:5c:c2:10:d4:37:29:7f:03:
                    bb:b7:86:b5:fa:92:6f:ef:1c:d8:f2:ef:59:71:14:
                    6d:79:5a:5e:53:91:01:bb:9e:aa:f1:77:66:17:46:
                    70:6b:5c:b9:31:26:21:b4:64:6c:69:bb:b6:37:69:
                    c5:47:40:21:0e:1e:d3:3e:50:1b:6f:7b:d3:78:2a:
                    77:a6:f6:20:e4:9e:2e:ef:6f:01:06:18:08:ad:6c:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:50:48:E8:E5:A8:50:FC:06:C8:50:D0:95:02:22:59:64:45:26
            X509v3 Authority Key Identifier:
                keyid:32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/323830343a376564343a3a2f33322d3332203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ed4::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:c6:88:34:5a:07:bb:bb:0e:40:2d:33:29:ba:3d:f0:39:
         64:7f:5e:c3:b3:08:f0:f5:45:0e:39:6e:4e:29:d3:ce:14:51:
         af:34:67:67:f2:08:ec:76:b1:71:a5:d5:2c:56:60:4d:63:b4:
         b3:3d:f6:92:3f:6b:fd:17:3b:31:a6:55:58:0d:07:e8:9d:6a:
         74:b8:23:92:32:ba:c6:2b:c3:de:ed:2f:0b:d9:b4:fc:0f:9c:
         6e:cd:41:69:78:8a:9a:4a:e2:c1:d1:d9:dd:b7:26:28:12:3c:
         99:af:a1:f7:f0:01:b9:45:84:01:1a:6e:f7:56:f0:04:18:43:
         2c:26:c6:b3:92:3f:6b:de:3c:7e:a7:a7:bd:ea:f9:b4:8c:cb:
         68:e3:a0:84:22:69:eb:79:7c:40:6f:88:5a:18:e4:03:8f:3c:
         11:04:10:1a:e1:c0:ba:ab:49:91:25:35:ed:76:42:93:40:10:
         e2:ee:86:7f:a8:7e:f7:f7:c9:2a:7c:5c:9a:74:a4:b3:86:7f:
         b3:c6:c1:75:3a:3d:a4:eb:31:82:59:e6:b8:e5:10:e2:d1:39:
         9d:db:ed:96:c1:e5:34:a9:8b:46:ce:0e:9f:74:85:76:04:bc:
         4b:39:29:55:a4:f3:4e:82:6c:cf:e5:69:aa:1e:56:e6:cb:0c:
         3e:a1:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----