Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/323830343a313964303a3a2f33332d3333203d3e203631383230.roa
File:                     323830343a313964303a3a2f33332d3333203d3e203631383230.roa (raw, json)
Hash identifier:          jxhiPRssu37cHMkR7YIW2tUBiuLRCIyZnffX7j1q9RE=
Subject key identifier:   E5:A9:94:1F:3D:45:EE:8D:D5:2D:1A:9A:E1:C2:39:62:AE:70:7A:2D
Certificate issuer:       /CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
Certificate serial:       7C1CB2F1A705E44E413810406D5EBE4026E4BB85
Authority key identifier: 80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/323830343a313964303a3a2f33332d3333203d3e203631383230.roa
Signing time:             Thu 04 Apr 2024 16:47:21 +0000
ROA not before:           Thu 04 Apr 2024 16:42:21 +0000
ROA not after:            Thu 03 Apr 2025 16:47:21 +0000
asID:                     61820
IP address blocks:        2804:19d0::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1c:b2:f1:a7:05:e4:4e:41:38:10:40:6d:5e:be:40:26:e4:bb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Validity
            Not Before: Apr  4 16:42:21 2024 GMT
            Not After : Apr  3 16:47:21 2025 GMT
        Subject: CN=E5A9941F3D45EE8DD52D1A9AE1C23962AE707A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:1e:83:e1:da:bc:46:94:4b:e0:ee:de:2c:
                    5d:51:28:cc:db:b0:f1:b5:27:fb:12:f0:e8:14:91:
                    cb:ea:9e:12:6a:cc:2b:01:50:5f:5d:f0:b9:c1:68:
                    13:26:e9:01:50:54:63:57:8b:24:2f:04:02:0d:71:
                    6f:5d:e4:1a:a5:26:e5:4b:cc:af:d0:f5:44:a4:03:
                    b8:95:67:49:6c:21:ca:5c:71:00:f1:2e:82:bb:b4:
                    3e:cd:12:b7:1a:87:8e:9a:02:cd:52:e0:bf:62:40:
                    4b:a4:bc:aa:1a:69:e9:eb:93:d0:60:f5:eb:2b:a3:
                    b1:6a:60:bf:32:cd:0b:63:a0:86:b4:e9:f8:33:ba:
                    7f:7c:3f:60:17:aa:4d:6b:f4:ca:a4:eb:53:54:17:
                    2e:c7:5e:67:90:b8:a7:f7:f5:66:51:eb:d0:61:57:
                    09:04:73:9c:9d:aa:58:54:d9:0e:ae:28:d5:53:33:
                    9f:39:60:f7:5c:26:8f:7f:77:e1:9f:06:25:f6:24:
                    96:cc:c1:b9:a5:50:e7:21:6b:4d:6f:2f:a0:12:46:
                    a6:3a:e6:4e:4a:58:57:e2:36:b6:55:9a:da:a0:47:
                    87:45:38:d4:48:73:71:46:c2:5f:dc:5f:45:e7:bc:
                    ca:3d:ae:3d:a6:e5:96:23:a7:a2:7a:b6:44:74:75:
                    4f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A9:94:1F:3D:45:EE:8D:D5:2D:1A:9A:E1:C2:39:62:AE:70:7A:2D
            X509v3 Authority Key Identifier:
                keyid:80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/323830343a313964303a3a2f33332d3333203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:55:89:3d:df:a0:0e:9a:95:13:f6:7f:74:4d:11:35:2c:40:
         a7:c5:10:07:35:7a:01:37:65:0d:c1:09:4c:0e:81:86:d8:0d:
         d9:03:eb:65:c6:46:46:58:62:ea:9e:d9:ee:b8:f7:f9:33:66:
         12:61:d2:c9:0a:01:c4:99:d4:04:c0:1f:f9:d2:db:ad:b0:d0:
         4e:89:b6:18:b8:ce:64:55:fb:93:b0:7a:86:d7:5d:75:94:83:
         67:f9:fa:71:5f:79:39:b9:f7:dd:2c:51:68:98:98:22:ce:64:
         e1:2e:23:39:46:f7:5e:42:95:b6:47:12:56:73:bf:94:65:6e:
         47:d0:93:d4:76:39:d0:85:69:ff:f4:e1:cd:f5:dd:d2:04:e3:
         01:02:13:25:ee:f8:af:44:f6:62:17:b2:50:2f:c9:5e:4b:d4:
         0a:91:4f:bb:db:5b:47:7f:6b:e5:07:82:98:0f:c4:0c:a6:d7:
         e6:cd:f3:b3:56:88:66:1f:36:2b:6d:6d:64:39:e3:52:3a:b9:
         6b:27:6e:ce:9f:3c:85:da:51:d1:8b:e1:d9:76:48:57:07:c6:
         dd:2e:92:bc:ca:a0:37:91:61:17:38:4f:cf:58:ce:10:f0:94:
         0e:41:fa:b4:d4:f3:f8:f9:d9:a8:10:51:fc:cb:62:2b:79:ad:
         e3:36:7f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----