Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa
File:                     323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa (raw, json)
Hash identifier:          wNML1MvDVVZZM1dK//ggOWOlvpmXu6rndCBbRTjtwYA=
Subject key identifier:   71:78:02:49:16:62:EE:7F:0F:96:7B:BE:EA:E2:65:F4:0E:90:8C:CD
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       2F9B337CA0F3862C6644557833DEB9BDDADEAFB6
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:43 +0000
ROA not before:           Fri 05 Apr 2024 03:41:43 +0000
ROA not after:            Fri 04 Apr 2025 03:46:43 +0000
asID:                     270989
IP address blocks:        2804:7490:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:33:7c:a0:f3:86:2c:66:44:55:78:33:de:b9:bd:da:de:af:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:43 2024 GMT
            Not After : Apr  4 03:46:43 2025 GMT
        Subject: CN=717802491662EE7F0F967BBEEAE265F40E908CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:63:4b:e7:61:f8:19:c8:7f:19:2d:57:2c:
                    47:2d:37:ca:87:0d:9e:ef:32:48:77:d8:c1:34:18:
                    fa:ea:55:37:33:ec:b1:3d:15:ef:bc:0a:b0:62:32:
                    1f:61:4e:81:96:49:02:8c:2c:e5:8b:f7:ac:79:8a:
                    c4:30:bd:6a:e6:53:25:54:8c:bf:81:2d:e7:0f:a5:
                    82:25:4e:ca:a2:bd:32:fa:06:8e:ff:23:a6:df:d6:
                    3f:a6:e6:44:67:86:c9:ca:a7:ec:70:b9:ab:1c:bc:
                    39:cc:41:ad:94:95:a2:82:e4:82:88:d0:4a:3f:27:
                    44:73:63:a7:5a:38:4b:ed:88:10:2c:01:be:02:bf:
                    2a:46:cd:30:fa:16:a0:96:05:79:e4:a9:53:78:c1:
                    69:6f:48:72:5e:3d:e3:32:a3:32:09:4a:c9:e2:d8:
                    f1:8c:c0:69:24:57:60:fc:0e:d1:41:46:20:bc:8f:
                    0a:39:c2:78:c5:6e:41:3e:f9:1f:cb:41:d3:ad:d3:
                    92:51:4b:31:65:ed:d0:93:e6:84:f7:25:56:a2:51:
                    aa:aa:c5:63:6d:39:15:a4:2f:4f:15:3d:b8:11:a1:
                    98:45:15:83:c3:aa:b9:e7:ae:7e:88:fd:fd:23:07:
                    e3:f7:cb:ee:29:94:91:11:25:90:c7:3e:0d:53:56:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:02:49:16:62:EE:7F:0F:96:7B:BE:EA:E2:65:F4:0E:90:8C:CD
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a383030303a3a2f33332d3333203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:b0:a3:0a:8f:af:b1:64:51:b9:8c:ee:9a:33:e7:a5:2d:
         f2:7f:a9:e8:9a:2e:e9:78:47:7d:0c:f9:b3:b8:00:da:b1:35:
         bf:6c:c5:60:a3:29:fd:c2:a1:b8:30:ae:1a:47:47:04:12:ff:
         87:78:65:89:09:b7:b3:c8:ed:b8:75:bb:96:d8:45:0e:cd:48:
         2f:fd:8b:93:23:c6:30:bc:52:7f:00:45:ac:dc:c9:21:d3:76:
         93:a6:63:66:ed:8c:91:92:98:99:3c:1e:6a:52:7a:d1:11:bd:
         38:61:4b:ff:38:0e:6e:48:a7:89:36:5a:61:2c:e5:95:18:2a:
         1f:ba:bf:9d:00:c0:d4:29:9b:38:53:d2:7b:cf:14:c4:57:32:
         d5:1d:db:5e:dc:cd:57:7a:62:f8:b2:97:dd:5a:f4:0f:92:b0:
         34:7d:c6:b1:2e:60:a7:5a:b8:1b:b4:dd:37:4b:9c:e6:56:1b:
         cf:3f:d4:af:52:ad:f7:30:68:36:e1:04:d5:c9:8d:92:f3:7d:
         95:3d:bb:c0:c7:9a:fe:56:e5:84:4d:2c:05:10:2f:d2:aa:70:
         42:fe:b1:a2:eb:3f:f5:78:ff:07:3d:60:4b:0d:24:db:ce:ff:
         25:b0:47:63:e7:d6:f4:e1:8b:d5:6c:9a:64:66:c6:02:34:8a:
         0b:b2:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----