Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
File:                     323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (raw, json)
Hash identifier:          GvM/g66OkiHVg628UQiD+lV0nV/SnTT8+cXXOHQ/oaw=
Subject key identifier:   5D:88:51:54:88:94:95:4C:F8:42:03:D4:D8:98:96:BF:93:29:DD:0B
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       DBDD14356152B9B01C8A7BAE0E2DB9D89010E7
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
Signing time:             Thu 04 Apr 2024 06:58:02 +0000
ROA not before:           Thu 04 Apr 2024 06:53:02 +0000
ROA not after:            Thu 03 Apr 2025 06:58:02 +0000
asID:                     271484
IP address blocks:        2804:7c40::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            db:dd:14:35:61:52:b9:b0:1c:8a:7b:ae:0e:2d:b9:d8:90:10:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: Apr  4 06:53:02 2024 GMT
            Not After : Apr  3 06:58:02 2025 GMT
        Subject: CN=5D8851548894954CF84203D4D89896BF9329DD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:a6:92:2f:99:41:90:13:77:f2:b6:4e:d6:
                    6b:1e:c6:33:c1:38:01:ba:67:af:4e:d0:3b:cd:11:
                    df:4d:c6:41:49:e7:d3:95:f0:ee:02:d3:42:6d:8e:
                    d1:84:91:aa:38:7c:aa:b4:43:47:06:0f:c0:2d:02:
                    0a:84:37:3b:12:5e:26:d5:20:2c:b7:72:d3:2a:ff:
                    cb:2b:50:69:e2:98:57:d7:8e:06:81:37:c4:a7:ec:
                    e8:3a:9c:e4:47:04:45:98:ed:11:40:40:07:16:09:
                    38:1e:5c:54:05:60:fd:52:4f:30:d8:a9:78:bd:fc:
                    a3:89:43:74:41:0e:7e:56:60:42:28:c8:4e:90:50:
                    23:15:31:f9:12:ef:73:8c:7d:ab:ff:49:f4:ae:98:
                    ad:86:47:7b:ee:75:73:64:1b:68:74:2b:3a:73:b9:
                    1a:c4:5a:bb:43:8c:59:6c:15:99:5b:c3:82:3b:7d:
                    ba:ff:ff:3c:37:94:15:0a:3f:cf:65:72:2d:5c:d1:
                    7f:30:8f:a3:26:f4:f1:73:54:c2:6b:39:02:4e:b1:
                    4a:40:58:39:4f:17:95:ee:ff:e2:3d:bb:48:7f:38:
                    66:d4:15:1c:cb:e0:a7:9d:7f:cb:33:99:2c:0d:3d:
                    cb:68:0c:52:73:b7:52:99:18:2a:24:fe:ff:f0:0b:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:88:51:54:88:94:95:4C:F8:42:03:D4:D8:98:96:BF:93:29:DD:0B
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:d5:47:a5:fa:5f:e3:36:5b:c3:eb:54:e0:ac:08:2f:9c:
         89:b5:2b:74:3f:8c:75:c8:10:6f:85:ab:7f:81:a3:69:5a:7e:
         e7:d8:a3:87:2b:6f:32:73:f8:52:40:68:62:86:bc:7e:4c:ee:
         1d:8f:0d:55:2b:e5:88:aa:ce:01:0c:19:9a:86:44:9a:a8:18:
         9f:58:e9:08:2a:c5:4c:27:36:e8:28:25:3b:fd:67:cf:69:10:
         c1:d2:13:c3:68:75:bd:ed:e7:3c:97:a4:44:fd:8d:e9:1a:82:
         3d:e1:0f:aa:6d:d7:21:70:bc:28:86:ac:06:d3:b5:91:b3:89:
         d3:24:0a:f7:b4:e9:fb:2d:74:d9:1e:df:2d:18:78:09:d0:6a:
         b8:af:be:f8:ef:f0:4e:96:6e:f8:1d:55:df:37:15:bc:9c:49:
         5e:95:91:de:c3:3f:7c:17:74:46:c0:f6:35:40:84:f3:f9:80:
         c4:b8:50:e4:28:9e:b6:a8:13:fc:e7:1e:ee:d4:c0:10:b6:86:
         91:14:c2:73:3e:7c:84:44:41:42:24:1e:fc:f8:0d:f6:bc:c8:
         55:9e:db:22:37:15:f7:ea:55:58:3c:40:fc:e0:71:86:73:ee:
         bf:c7:c8:b5:9f:7f:39:6b:41:9d:59:8a:e6:0f:1a:47:27:1d:
         7d:8f:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----