Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a3a2f33322d3334203d3e203532393133.roa
File:                     323830343a313038383a3a2f33322d3334203d3e203532393133.roa (raw, json)
Hash identifier:          LRrjWyTTbiYk+dtRJ739Q4TBf4IX3yAERzA/VRId85E=
Subject key identifier:   63:BF:55:7D:D9:FE:8E:54:63:CA:72:01:97:A7:70:D1:AA:E1:6B:92
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       64063E5F4C922990B1E94AFAC96E904E1D888244
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a3a2f33322d3334203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:17 +0000
ROA not before:           Thu 04 Apr 2024 09:40:17 +0000
ROA not after:            Thu 03 Apr 2025 09:45:17 +0000
asID:                     52913
IP address blocks:        2804:1088::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:06:3e:5f:4c:92:29:90:b1:e9:4a:fa:c9:6e:90:4e:1d:88:82:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:17 2024 GMT
            Not After : Apr  3 09:45:17 2025 GMT
        Subject: CN=63BF557DD9FE8E5463CA720197A770D1AAE16B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:2b:2e:27:0d:a4:d3:49:84:72:7e:7b:5f:
                    a7:46:77:73:d0:46:18:99:c8:12:69:f1:75:cc:1b:
                    f1:e7:9b:cf:5d:6f:90:c8:16:5c:62:38:44:35:41:
                    f3:12:8e:3e:04:53:66:a0:78:46:0d:81:ab:0a:8a:
                    28:e0:94:cf:be:6d:40:f5:8e:fa:22:e9:9a:00:a5:
                    9e:2f:dc:91:fb:36:a7:41:94:01:38:b4:3d:1f:a8:
                    78:6d:7d:5d:ca:7d:be:7a:fa:74:7d:d4:20:3d:91:
                    99:cf:2f:8f:9a:de:7e:00:47:7b:47:b9:7a:10:3d:
                    af:18:e4:fc:f6:d6:e4:83:33:b0:84:80:61:c1:dc:
                    ad:6d:38:c3:42:76:83:65:51:e3:2f:1e:99:11:3e:
                    93:54:0a:0a:2d:29:79:e2:76:c4:d8:68:4e:ca:5e:
                    99:5f:a7:b1:f7:42:9d:2f:8d:e7:67:dd:3e:d7:bf:
                    ac:94:3d:ac:79:83:69:51:16:05:83:0d:cb:bb:1b:
                    e7:72:c9:9d:7a:c5:e2:8d:1b:a0:03:7f:d0:a3:bd:
                    7c:85:d9:ab:13:27:2a:10:95:ae:d8:64:e4:32:97:
                    65:77:9a:02:f6:d4:a9:c9:8b:00:b6:69:35:2e:41:
                    f1:9b:7e:96:d8:4e:95:d4:72:d8:53:b3:ff:2c:f7:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:55:7D:D9:FE:8E:54:63:CA:72:01:97:A7:70:D1:AA:E1:6B:92
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a3a2f33322d3334203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:0c:f9:dd:9e:49:ae:50:29:40:6d:08:7e:0e:f5:00:67:24:
         aa:5e:7d:66:ec:43:6e:87:b8:3c:7d:03:79:aa:ad:e5:2f:64:
         08:f3:f1:89:5b:a9:ff:24:79:62:f1:21:ac:51:56:5b:b4:2a:
         b6:bd:61:43:4a:ab:08:44:a9:15:40:1a:43:b4:a3:d5:10:76:
         c6:e9:54:ae:3a:49:24:86:ff:7d:22:ff:42:2b:50:0f:26:d9:
         08:f4:8c:40:31:a4:f8:50:57:d9:b4:68:65:de:e9:bc:c8:b6:
         3c:16:a7:e3:8d:40:4d:8c:fb:71:13:05:a0:ca:1c:fd:75:89:
         4b:98:a0:e3:12:55:b7:8b:b5:b1:6c:2d:0c:ff:ee:41:e4:5d:
         02:13:c1:9b:e2:df:ef:c5:1d:33:f6:4a:ba:2e:cc:93:c0:cd:
         f9:1f:6c:dd:4f:44:fc:ec:9f:0a:e3:32:7e:57:1c:f4:9a:52:
         7a:3c:be:5d:5f:e6:70:44:4d:fb:9a:81:44:53:fd:1d:5c:21:
         8b:5d:49:de:d8:65:2d:2d:5e:37:f2:cd:3f:0d:e8:2a:da:8e:
         4e:b8:64:b7:12:0d:4d:cd:02:f2:9f:05:3e:a4:bc:26:a9:59:
         18:99:76:ad:32:40:66:3e:82:e6:32:76:a3:3e:aa:95:71:9f:
         93:3d:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----