Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a3a2f33332d3333203d3e20323730393839.roa
File:                     323830343a373439303a3a2f33332d3333203d3e20323730393839.roa (raw, json)
Hash identifier:          SwM2mLy6jBlxsr5omI/VMPOyQePxGlm+gf8idpdwwrw=
Subject key identifier:   71:5A:B0:62:7F:65:CD:5F:7B:C0:D4:8C:4C:54:CD:3B:DD:DF:E8:1E
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       48992271C6C4EE8AB1E18E0E1F18B78987B04814
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a3a2f33332d3333203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:43 +0000
ROA not before:           Fri 05 Apr 2024 03:41:43 +0000
ROA not after:            Fri 04 Apr 2025 03:46:43 +0000
asID:                     270989
IP address blocks:        2804:7490::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:99:22:71:c6:c4:ee:8a:b1:e1:8e:0e:1f:18:b7:89:87:b0:48:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:43 2024 GMT
            Not After : Apr  4 03:46:43 2025 GMT
        Subject: CN=715AB0627F65CD5F7BC0D48C4C54CD3BDDDFE81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:df:08:2d:d7:de:1f:34:25:bd:c6:94:6d:
                    80:89:9f:fe:c3:af:24:55:db:a1:53:c2:cd:38:f7:
                    31:7b:c6:28:cc:4a:cc:ef:43:86:d3:54:64:c1:8e:
                    87:50:c0:a8:bb:ee:2d:8b:6d:3e:24:1e:bf:c8:1c:
                    d2:6d:8f:9b:72:07:17:0a:f9:72:32:8e:f9:6e:7b:
                    af:94:e9:09:1c:4f:7d:67:89:e0:b4:e2:40:64:d4:
                    b1:4c:23:58:c2:55:a3:d0:28:c9:49:7a:36:d9:36:
                    06:96:f1:69:ee:25:76:53:a6:7f:b8:20:d0:31:07:
                    cb:0c:a4:5b:78:42:d8:73:b9:53:95:97:32:09:b9:
                    9c:c3:f5:87:67:6b:c2:9c:e3:7b:4e:1d:46:b4:08:
                    2b:d5:28:87:00:01:09:d7:35:df:f4:11:9d:b2:41:
                    cb:f8:90:6b:ab:9a:5c:35:f5:49:25:85:78:85:33:
                    18:b6:20:30:a0:25:8c:c6:95:86:da:e7:e0:1f:02:
                    d0:49:88:d8:d0:b4:aa:a3:c9:58:2d:22:b9:cf:a6:
                    3d:93:86:a8:8f:35:d7:7e:c6:bb:c1:27:18:6a:21:
                    73:c7:86:eb:18:28:9c:a7:b7:c6:3a:ca:4a:5c:be:
                    db:a3:db:bd:8d:53:e4:eb:81:ff:35:b6:64:97:73:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5A:B0:62:7F:65:CD:5F:7B:C0:D4:8C:4C:54:CD:3B:DD:DF:E8:1E
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/323830343a373439303a3a2f33332d3333203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7490::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:32:69:f4:29:a0:07:76:7e:e3:8c:f8:10:21:78:e5:31:6b:
         82:9c:0f:7f:5a:2d:5e:3f:24:d5:15:d7:f3:69:d4:40:e9:da:
         ae:a9:3f:4c:a0:84:86:0d:85:a2:34:63:96:75:ff:38:71:f2:
         e7:5c:96:1a:48:75:37:ec:82:d1:be:8d:0d:c1:76:2b:61:a7:
         47:11:32:5b:93:15:9d:38:5d:cf:f2:51:2d:fe:ac:8b:8a:62:
         24:64:10:93:3b:6e:95:82:aa:3c:b4:b3:02:95:36:7c:35:2e:
         be:97:eb:ad:fd:0a:38:78:89:88:58:af:c3:73:f3:c2:7e:3e:
         02:5a:ca:d6:ce:80:b3:fb:fe:87:b7:0d:64:05:a2:1f:80:19:
         30:0e:47:6a:9e:32:e9:9f:3d:ef:04:e8:2d:7c:f3:38:da:3e:
         a4:d1:13:fd:1f:ba:eb:28:50:a3:9b:e8:21:cf:b4:63:46:53:
         5d:68:71:87:4d:89:4c:9c:0e:93:b0:a8:7e:35:59:95:5c:5b:
         36:ed:07:0d:77:75:75:a4:ee:fa:9d:ce:dd:b1:4a:96:a3:47:
         49:24:c0:cb:4d:63:1c:91:8a:23:96:3c:f6:9b:46:5f:28:96:
         46:45:e2:00:da:3c:bd:b8:ec:5f:da:70:fb:1a:bb:ea:8e:81:
         4e:30:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----