Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/323830343a343532343a3a2f33322d3332203d3e20323637363735.roa
File:                     323830343a343532343a3a2f33322d3332203d3e20323637363735.roa (raw, json)
Hash identifier:          CmqZoyn/AjivdMNXOOqWnepv7FO1KXc2sdD81JhplUM=
Subject key identifier:   95:13:31:1F:5C:D4:9D:CD:9A:1E:84:E2:CE:56:C9:8C:27:85:6B:68
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       4ABC0737B060D6BBDEF600CF3DC07B9D9E36418C
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/323830343a343532343a3a2f33322d3332203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:22 +0000
ROA not before:           Thu 04 Apr 2024 18:11:22 +0000
ROA not after:            Thu 03 Apr 2025 18:16:22 +0000
asID:                     267675
IP address blocks:        2804:4524::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bc:07:37:b0:60:d6:bb:de:f6:00:cf:3d:c0:7b:9d:9e:36:41:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:22 2024 GMT
            Not After : Apr  3 18:16:22 2025 GMT
        Subject: CN=9513311F5CD49DCD9A1E84E2CE56C98C27856B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:e9:dc:50:d5:64:9e:e2:b6:be:10:75:fa:
                    d4:bf:f4:af:1d:36:bc:d7:d6:2e:f3:0c:5d:d8:b4:
                    60:a1:66:a6:1f:50:6e:a4:9c:f1:04:2a:c3:dd:6d:
                    9f:e4:b2:9b:15:2f:0e:dd:ce:c8:b2:41:16:f7:8f:
                    b9:fb:04:6c:2a:f3:7e:36:ce:6e:e9:34:ef:32:be:
                    07:cb:aa:a2:0f:9a:3c:fc:91:49:de:61:86:ed:0b:
                    ce:b8:23:a3:fa:f0:49:7a:97:74:48:bd:e2:99:64:
                    06:e0:53:1f:64:8a:e5:eb:41:de:1d:5f:58:7b:c0:
                    7d:04:17:82:72:9c:f3:ab:b2:f5:7f:28:71:d2:83:
                    c2:76:aa:c0:a1:f5:9a:45:fa:31:c8:cd:0f:f7:26:
                    8f:80:c3:86:63:bd:13:7e:a0:ed:ca:9e:4f:ff:2a:
                    54:8f:f9:da:eb:74:ec:c9:92:0f:a4:15:3b:39:bd:
                    b6:d5:cf:aa:53:61:19:c6:23:e3:71:8e:f5:3a:4f:
                    5a:2c:e5:c8:e4:c8:70:ef:7d:c9:0b:73:b3:10:c9:
                    76:13:b8:81:17:25:3d:e9:89:09:b1:84:bd:bd:bc:
                    f5:c5:2f:14:98:9a:20:0b:2a:e3:d5:b8:76:b2:4d:
                    bd:2a:88:ce:2d:4b:b6:47:92:93:09:c0:45:6e:6f:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:13:31:1F:5C:D4:9D:CD:9A:1E:84:E2:CE:56:C9:8C:27:85:6B:68
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/323830343a343532343a3a2f33322d3332203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4524::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:bf:5b:cb:19:42:b6:00:48:7f:c9:c3:05:eb:77:76:97:a0:
         24:89:67:0c:b4:60:ad:60:23:8f:af:6a:5d:37:53:b2:e1:16:
         56:90:31:b5:6c:98:1f:4d:57:2c:32:75:1b:39:8c:42:e1:e1:
         7c:08:38:58:4e:6d:ca:a3:21:25:d4:b2:be:fc:5d:f3:a2:a4:
         a8:88:3b:d3:a6:fc:83:04:af:22:26:8d:9e:c3:a6:dd:b6:56:
         4f:7b:45:35:cf:e1:48:ee:1c:16:cb:ef:7b:ee:1b:47:a9:99:
         89:13:e7:99:03:d3:b6:1f:53:54:c8:39:f0:32:65:5f:40:19:
         11:0c:23:9e:2a:7c:01:c3:96:98:d6:3d:d4:74:aa:1f:d0:f9:
         91:71:be:74:30:b9:dc:6f:a0:a6:32:52:13:bf:9f:3a:24:df:
         97:4f:3d:29:78:99:5c:73:6a:8b:12:cf:b5:a3:ad:4a:db:6c:
         43:59:6e:35:43:ec:2f:7c:23:0a:85:74:28:20:1b:1d:ee:32:
         2e:61:14:e5:f6:5c:be:3e:65:db:6f:b8:96:13:c0:5f:45:e4:
         07:9b:f0:9c:b5:8a:48:0e:c9:e1:c8:e7:94:ef:ab:ac:c7:cc:
         31:9f:f5:57:b0:eb:0e:63:3a:51:13:87:55:e5:48:1e:e7:f3:
         df:38:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----