Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d3334203d3e20323633393937.roa
File:                     323830343a323931383a3a2f33322d3334203d3e20323633393937.roa (raw, json)
Hash identifier:          kbqnAV47JATJPb2gA6gBgVEx4iXem0b/Jsd6r634E+Q=
Subject key identifier:   49:C1:35:A4:38:B2:0E:4F:9C:E0:49:7F:03:C5:42:84:9A:F9:2D:0D
Certificate issuer:       /CN=43D2235C9A370300FEC33EDB7AA910513ECA26FA
Certificate serial:       2FD41D9208EDFBDAE609E4633EB68AFF95DBD2E0
Authority key identifier: 43:D2:23:5C:9A:37:03:00:FE:C3:3E:DB:7A:A9:10:51:3E:CA:26:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43D2235C9A370300FEC33EDB7AA910513ECA26FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d3334203d3e20323633393937.roa
Signing time:             Wed 05 Jun 2024 19:16:08 +0000
ROA not before:           Wed 05 Jun 2024 19:11:08 +0000
ROA not after:            Wed 04 Jun 2025 19:16:08 +0000
asID:                     263997
IP address blocks:        2804:2918::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d4:1d:92:08:ed:fb:da:e6:09:e4:63:3e:b6:8a:ff:95:db:d2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D2235C9A370300FEC33EDB7AA910513ECA26FA
        Validity
            Not Before: Jun  5 19:11:08 2024 GMT
            Not After : Jun  4 19:16:08 2025 GMT
        Subject: CN=49C135A438B20E4F9CE0497F03C542849AF92D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:50:e1:35:c6:5f:20:36:f6:c8:5e:44:4e:
                    08:e9:59:ea:34:5a:e1:21:54:a7:e5:48:91:06:e1:
                    4f:f1:15:61:bd:67:90:d3:6c:41:76:2a:1a:a8:da:
                    1d:8a:e4:60:b0:cc:37:26:d1:49:5b:e6:10:3a:06:
                    1a:8a:96:3e:8d:60:2d:c5:27:65:73:e3:67:f2:fe:
                    24:7c:84:31:43:34:85:1a:f7:20:30:53:99:fd:31:
                    cb:31:48:fa:44:76:3b:28:ae:4f:ff:98:19:db:07:
                    04:00:86:b3:06:49:1d:c8:47:83:97:e7:f1:58:84:
                    83:19:86:16:e5:c6:1b:d0:dc:44:e4:6f:6c:7c:d5:
                    65:25:1c:1a:4f:59:04:88:31:5d:e6:01:bf:0d:a5:
                    3f:80:1e:19:fd:4a:80:a0:55:2a:0c:a3:95:ee:ed:
                    15:e3:c7:8f:82:df:d7:6e:ee:e2:1e:02:a0:b2:86:
                    b1:f6:d3:7a:0c:d9:b0:cf:73:63:01:3d:04:91:99:
                    10:68:cc:f2:a7:4d:8d:ca:86:fb:40:cb:71:60:7d:
                    ac:57:dc:6d:c2:38:4f:8a:46:5b:8b:e1:a6:ff:11:
                    3b:c6:34:d1:aa:6a:5c:50:33:59:b0:55:d2:de:69:
                    33:64:14:c2:7d:e4:5f:5b:04:33:3d:c6:0c:b3:4c:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:35:A4:38:B2:0E:4F:9C:E0:49:7F:03:C5:42:84:9A:F9:2D:0D
            X509v3 Authority Key Identifier:
                keyid:43:D2:23:5C:9A:37:03:00:FE:C3:3E:DB:7A:A9:10:51:3E:CA:26:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/43D2235C9A370300FEC33EDB7AA910513ECA26FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43D2235C9A370300FEC33EDB7AA910513ECA26FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/323830343a323931383a3a2f33322d3334203d3e20323633393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2918::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:8d:00:69:68:dc:e3:68:8d:c5:16:13:a6:f0:d1:39:f4:
         64:0f:39:57:c3:77:69:96:02:39:23:da:6a:bb:c1:7d:7b:84:
         b6:51:5b:46:64:a6:af:4c:a7:9b:fe:4b:35:cd:91:20:6b:ef:
         8d:f9:de:c3:06:d0:86:74:4e:cb:36:b5:a5:70:82:6e:ae:dc:
         e4:5c:e6:e0:46:f5:95:b6:96:a4:81:e9:06:36:a1:c5:40:f0:
         7a:50:cb:bc:de:4e:20:8c:f1:ac:c3:35:08:07:5e:eb:90:67:
         7f:94:2a:49:88:1b:92:19:17:c8:ec:05:e3:9f:55:2d:64:fc:
         27:9f:e2:6b:e6:f1:29:ff:b8:c2:d7:63:c7:c2:c0:59:40:95:
         52:7c:8e:d2:89:c5:2a:31:03:1a:4a:9d:30:ea:d0:07:59:0e:
         66:2f:29:30:09:36:0f:ea:af:5c:07:88:52:75:d1:9a:da:44:
         ad:e1:ef:40:10:f8:4b:a9:48:da:00:d4:1c:31:29:a3:1a:ba:
         5a:66:03:11:df:83:ae:ea:88:bc:a8:ed:bb:84:ac:7e:c9:24:
         de:a2:80:82:e2:92:37:70:b3:ec:9e:86:16:41:5f:66:26:09:
         ee:59:9c:1b:99:dd:2f:92:e1:dd:ee:50:6e:0d:31:78:79:c7:
         54:bb:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----