Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/323830343a363830633a3a2f33322d3335203d3e20323639363637.roa
File:                     323830343a363830633a3a2f33322d3335203d3e20323639363637.roa (raw, json)
Hash identifier:          KhWGTZBu35nUIzEE4cen3J1ekYyEDK/3CbMCyIHVkqg=
Subject key identifier:   77:C6:81:8E:C4:2B:03:D1:4E:AF:1E:02:83:7E:5A:3E:45:49:0B:60
Certificate issuer:       /CN=7466743A2AFAAB31A89F859D730CD1411289F7EA
Certificate serial:       1CE4A8552D20BFB214F58740D79BE27A81ACBC76
Authority key identifier: 74:66:74:3A:2A:FA:AB:31:A8:9F:85:9D:73:0C:D1:41:12:89:F7:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7466743A2AFAAB31A89F859D730CD1411289F7EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/323830343a363830633a3a2f33322d3335203d3e20323639363637.roa
Signing time:             Thu 04 Apr 2024 06:05:13 +0000
ROA not before:           Thu 04 Apr 2024 06:00:13 +0000
ROA not after:            Thu 03 Apr 2025 06:05:13 +0000
asID:                     269667
IP address blocks:        2804:680c::/32 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e4:a8:55:2d:20:bf:b2:14:f5:87:40:d7:9b:e2:7a:81:ac:bc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7466743A2AFAAB31A89F859D730CD1411289F7EA
        Validity
            Not Before: Apr  4 06:00:13 2024 GMT
            Not After : Apr  3 06:05:13 2025 GMT
        Subject: CN=77C6818EC42B03D14EAF1E02837E5A3E45490B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:9a:38:d4:fb:e1:d9:85:02:e9:b4:6b:d2:
                    5e:83:3c:5c:2a:34:f8:d6:e0:40:ac:fc:e2:8b:68:
                    9b:15:65:c0:b5:cf:f0:c4:c0:0a:38:a7:a7:56:8b:
                    74:6a:cc:de:72:bf:c7:9e:63:91:0c:f5:12:58:ff:
                    7d:4f:80:41:76:f2:1a:57:9c:d6:c7:41:cb:0f:20:
                    ed:7b:c6:79:42:b5:44:56:5d:9e:de:12:4a:f9:7b:
                    ab:f4:42:27:ec:8e:7b:6e:f5:25:19:91:6d:0b:5c:
                    f3:5a:79:31:14:71:d5:1f:e8:6b:6b:6c:41:c8:f7:
                    36:ea:65:9e:fe:66:5a:15:e5:21:8a:01:13:07:68:
                    cb:df:3b:37:cf:53:09:d3:f5:6b:60:d8:2a:8a:59:
                    32:59:fc:9c:b3:68:90:91:ca:6b:86:f1:9a:ae:8b:
                    34:56:1a:f2:ad:3d:79:79:d6:bc:5e:15:c1:88:41:
                    92:cd:6c:c4:b2:aa:60:99:19:b6:2d:be:5e:8e:81:
                    17:66:f1:98:9f:0d:ea:43:17:a3:78:12:39:6b:00:
                    da:68:52:8c:4b:55:f0:d2:d5:7a:ea:39:18:0b:bc:
                    e9:85:88:56:b5:14:36:7a:28:2b:d7:04:b2:34:04:
                    0e:44:47:2b:15:d6:31:ca:9f:7a:24:c3:46:f7:61:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C6:81:8E:C4:2B:03:D1:4E:AF:1E:02:83:7E:5A:3E:45:49:0B:60
            X509v3 Authority Key Identifier:
                keyid:74:66:74:3A:2A:FA:AB:31:A8:9F:85:9D:73:0C:D1:41:12:89:F7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/7466743A2AFAAB31A89F859D730CD1411289F7EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7466743A2AFAAB31A89F859D730CD1411289F7EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/323830343a363830633a3a2f33322d3335203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:19:fa:1c:d9:1d:dd:d6:69:88:57:f1:04:7f:27:50:a7:19:
         a9:b8:71:ff:02:5e:64:f8:d0:96:36:5b:40:5b:8d:cc:37:59:
         cb:aa:84:af:11:49:82:af:23:d7:13:ce:21:53:75:a5:5d:33:
         eb:3c:a3:90:d5:f9:35:90:7c:af:df:38:56:28:4c:aa:b2:b0:
         af:65:8c:85:81:e6:88:67:99:bc:79:27:d1:36:a2:0f:2e:d4:
         d4:ed:d9:9f:ea:c0:c7:b8:86:26:5c:7e:f3:73:b1:7b:7c:3e:
         42:57:08:ba:7d:eb:75:28:65:57:bb:4e:2d:f8:01:36:52:86:
         4b:4f:b9:7f:a0:04:72:fe:02:7a:c5:1c:63:e4:a6:96:db:c0:
         f3:d7:2b:d8:e1:e7:22:d8:90:3d:a2:3a:61:f0:a7:4f:3e:eb:
         68:df:dc:8c:a3:d1:fe:21:9b:47:52:15:7d:fc:b2:20:ef:7e:
         14:5e:c0:91:64:97:a2:d9:24:2c:50:a8:44:f6:36:47:a7:d1:
         d6:6a:88:e6:32:c8:f9:0c:c0:3a:44:fc:52:48:48:f7:56:6f:
         71:5d:2d:ce:86:c6:34:f6:32:a2:ad:ac:72:4a:44:95:d8:47:
         10:12:37:35:14:dc:77:d7:59:b9:c4:61:dc:de:50:72:f3:4f:
         00:93:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----