Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/323830343a356530383a3a2f33322d3536203d3e20323639303037.roa
File:                     323830343a356530383a3a2f33322d3536203d3e20323639303037.roa (raw, json)
Hash identifier:          cGdDwBPIxYjJo5Re5eF6qD9fMOd689pwRdrMnj4He4g=
Subject key identifier:   B8:42:95:E2:DC:76:F7:CC:C4:43:04:C4:E1:FF:85:1C:D9:90:CC:67
Certificate issuer:       /CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
Certificate serial:       592DC849AF5E0A65E6F1B6BD0CEC33EB520FDA56
Authority key identifier: 7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/323830343a356530383a3a2f33322d3536203d3e20323639303037.roa
Signing time:             Thu 04 Apr 2024 14:08:51 +0000
ROA not before:           Thu 04 Apr 2024 14:03:51 +0000
ROA not after:            Thu 03 Apr 2025 14:08:51 +0000
asID:                     269007
IP address blocks:        2804:5e08::/32 maxlen: 56

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2d:c8:49:af:5e:0a:65:e6:f1:b6:bd:0c:ec:33:eb:52:0f:da:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
        Validity
            Not Before: Apr  4 14:03:51 2024 GMT
            Not After : Apr  3 14:08:51 2025 GMT
        Subject: CN=B84295E2DC76F7CCC44304C4E1FF851CD990CC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:99:0d:e8:c5:85:11:54:a0:dc:d2:55:5b:
                    9e:22:ca:3a:56:3d:43:2b:ba:49:70:02:41:f0:42:
                    6b:b0:86:50:c0:af:7f:1c:e0:65:7d:ca:a6:58:a0:
                    33:bc:d9:26:e8:0f:d0:de:19:ee:83:58:2d:52:c7:
                    3e:e9:ae:0d:f7:5e:3e:4c:40:7b:8c:32:53:a3:eb:
                    54:ed:5b:c4:31:3c:42:e9:79:70:8a:27:c1:04:73:
                    1f:1c:67:0d:f7:87:9f:5f:8b:06:89:a3:35:09:4d:
                    00:e6:42:a3:a1:85:57:de:9b:12:4e:c2:eb:ee:0f:
                    f9:59:85:f2:dd:13:75:d1:05:3d:bc:78:5f:dc:e9:
                    b8:65:f2:6d:1a:1d:92:ee:04:15:a2:a9:1c:e2:63:
                    94:89:75:b1:ba:0e:33:ca:b1:be:17:50:48:a9:cc:
                    cb:29:86:37:5a:73:9c:cd:2c:98:b5:f0:c8:25:6c:
                    6f:32:71:31:9f:58:e2:2c:3e:a7:de:aa:93:a3:20:
                    8e:01:24:16:2a:ac:b3:30:81:52:fa:dc:e3:92:6d:
                    c1:39:5f:4a:d6:8c:60:8a:fa:87:c4:78:28:a3:23:
                    03:b6:aa:50:a0:83:69:fe:53:ff:7b:6e:a6:8e:3b:
                    b8:4a:bf:06:81:da:0b:2e:0e:f6:b7:e4:dd:58:05:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:42:95:E2:DC:76:F7:CC:C4:43:04:C4:E1:FF:85:1C:D9:90:CC:67
            X509v3 Authority Key Identifier:
                keyid:7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/323830343a356530383a3a2f33322d3536203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e08::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:40:02:d4:7f:ca:2e:41:1e:bb:89:f2:ce:0b:c9:15:41:
         86:55:7f:a3:00:83:ed:16:2e:6e:44:9e:66:77:1a:2a:45:6d:
         e2:17:7a:38:dd:c3:27:fb:69:31:e0:b7:f6:2a:bd:2b:b6:3a:
         a7:a4:8e:00:1d:c3:a6:bc:cf:7c:6a:39:07:2f:93:4c:78:cc:
         7a:c2:98:31:2a:37:28:08:2a:76:36:b0:ad:17:3e:e5:e8:d5:
         f4:6f:10:d0:6f:98:2b:a5:b8:7c:e0:5e:a4:08:78:6e:4d:d3:
         02:67:ea:05:c2:39:77:0d:f8:a4:32:49:41:84:85:58:15:b7:
         8a:2e:70:88:89:47:e9:b1:6b:4f:22:5d:03:50:63:ae:ae:b1:
         9f:06:b8:25:bd:ca:35:12:84:be:49:d1:6b:29:f7:4f:53:55:
         4a:97:17:7c:cd:4e:24:54:15:35:71:f9:46:05:1f:f9:6f:cd:
         b9:57:59:ea:d7:12:b4:82:bd:81:76:1d:d4:71:63:0f:a4:ba:
         d5:88:a6:36:ec:3a:c0:c5:84:4d:72:16:fa:38:e1:c8:e5:b3:
         6e:58:61:b0:2f:78:4a:a9:69:91:7f:04:e0:a8:6b:0e:1d:9d:
         81:8a:a8:85:c6:af:4f:f6:26:56:58:87:6b:0e:58:82:70:3a:
         a2:65:1c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----