Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/323830343a6331383a3a2f33322d3333203d3e203532363737.roa
File:                     323830343a6331383a3a2f33322d3333203d3e203532363737.roa (raw, json)
Hash identifier:          hEQIyGgHrb8i8uUFt7B4PdWzt9xu2pZXz9m5YzQgwCU=
Subject key identifier:   0F:C3:D6:65:DD:CF:85:5B:DE:F6:AF:AA:4D:8E:26:9D:51:8A:EC:36
Certificate issuer:       /CN=93AA409873588A897219AA9BBC5D2F7353819FFD
Certificate serial:       3541282E94202027AD1017A2E1ED95D105ACFF86
Authority key identifier: 93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/323830343a6331383a3a2f33322d3333203d3e203532363737.roa
Signing time:             Thu 04 Apr 2024 08:00:23 +0000
ROA not before:           Thu 04 Apr 2024 07:55:23 +0000
ROA not after:            Thu 03 Apr 2025 08:00:23 +0000
asID:                     52677
IP address blocks:        2804:c18::/32 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:41:28:2e:94:20:20:27:ad:10:17:a2:e1:ed:95:d1:05:ac:ff:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93AA409873588A897219AA9BBC5D2F7353819FFD
        Validity
            Not Before: Apr  4 07:55:23 2024 GMT
            Not After : Apr  3 08:00:23 2025 GMT
        Subject: CN=0FC3D665DDCF855BDEF6AFAA4D8E269D518AEC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:a3:5c:78:2f:0e:ad:36:09:ce:c7:a2:5c:
                    9b:4b:0d:04:61:49:f0:7c:5a:6b:f8:db:91:5f:c4:
                    b0:06:db:c1:d0:22:2d:b2:89:af:7f:bc:82:e7:a3:
                    73:55:05:c2:a4:40:ac:f0:ba:6e:be:87:75:eb:23:
                    4b:f2:c7:83:c2:70:7a:30:30:c1:42:95:44:8c:6c:
                    67:f4:29:a4:8a:f7:5d:fc:75:dd:61:f6:a1:d0:10:
                    99:38:eb:b7:01:a5:90:41:d6:4d:9c:82:5f:a4:d1:
                    4f:2a:a1:5a:f7:a4:2e:09:54:e0:e2:43:ff:9a:3b:
                    84:bc:1a:5e:0e:3f:17:e6:cc:99:3b:e6:e6:e1:f0:
                    81:c5:fa:8b:70:81:07:d1:ec:cd:9d:50:9e:3e:46:
                    8e:6c:dd:b1:a9:51:eb:f9:6f:65:29:41:fe:f9:c1:
                    88:61:df:ed:f6:92:91:dc:7f:30:c0:8a:d3:ea:4b:
                    1a:b4:c0:25:90:dd:e9:85:5b:10:f8:3d:4d:b5:54:
                    0c:cd:23:f4:aa:a7:5c:de:19:e4:34:3a:2c:d8:72:
                    a9:43:18:6a:89:91:e1:e9:5d:16:68:99:c1:51:4e:
                    1f:c7:dc:fc:9a:c9:9f:ac:b3:c8:f5:c2:60:06:e0:
                    a1:6b:57:a1:a7:ed:76:07:3a:8c:8b:8c:44:29:1f:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C3:D6:65:DD:CF:85:5B:DE:F6:AF:AA:4D:8E:26:9D:51:8A:EC:36
            X509v3 Authority Key Identifier:
                keyid:93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/323830343a6331383a3a2f33322d3333203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:f2:4f:7d:36:10:cb:bb:48:8c:a3:f1:0b:64:5d:e7:58:
         eb:b2:c1:a5:2d:9a:7b:33:01:0d:e8:cf:46:af:33:ac:45:ee:
         54:c5:20:e5:dc:20:72:2f:ec:a9:66:ef:eb:bb:ae:41:30:cf:
         59:c3:f7:b7:98:22:c3:ad:36:b7:1d:b8:31:a9:8f:bb:e7:20:
         58:c7:c2:94:fc:3d:73:4e:2c:07:ec:3a:57:9e:5b:aa:0a:96:
         dc:75:95:fe:a1:9a:c9:2f:0a:12:16:15:2a:d4:b4:6c:d2:1b:
         cb:86:4c:13:4b:0e:ad:5f:ae:ce:f4:6e:df:ea:d5:6c:90:46:
         f8:a8:a4:72:ed:98:3e:18:da:f9:41:41:eb:6c:94:a4:27:99:
         17:cd:39:0d:dd:6e:e9:4a:9c:0c:5f:d8:44:dd:52:c5:86:e4:
         c2:11:5b:63:9d:92:5f:57:fa:ed:04:00:74:19:01:a8:c9:4a:
         e8:95:f3:57:7d:4f:32:ee:9b:70:dc:d9:96:f9:c5:b3:d8:18:
         ad:1b:7d:e7:06:c3:1c:b8:aa:18:77:1d:32:91:e7:34:41:5b:
         d6:64:8a:24:ed:3c:d8:20:93:45:27:d9:7a:c6:5b:a5:f3:c6:
         14:30:aa:79:7b:37:ca:66:f1:1b:70:fd:89:b0:07:3c:e1:06:
         c5:11:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----