Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/323830343a373362303a3a2f33322d3438203d3e20323730393331.roa
File:                     323830343a373362303a3a2f33322d3438203d3e20323730393331.roa (raw, json)
Hash identifier:          Eg37bb82cc8uSDV5Ji5EiYukxQaGLDs+PdPVxt0fWj8=
Subject key identifier:   4D:92:48:DD:2A:BF:B6:4C:39:A2:D5:E2:7B:2F:69:81:98:0D:FD:B8
Certificate issuer:       /CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
Certificate serial:       7CAEDD437C60F09285F4499166A7719B3CE69921
Authority key identifier: B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/323830343a373362303a3a2f33322d3438203d3e20323730393331.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270931
IP address blocks:        2804:73b0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ae:dd:43:7c:60:f0:92:85:f4:49:91:66:a7:71:9b:3c:e6:99:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:ce:e7:eb:78:fb:01:c0:19:e3:15:77:4e:
                    80:ae:72:63:cd:de:80:87:88:b5:a5:d9:7d:41:d1:
                    6b:f3:ce:b2:57:0d:dd:8a:f0:31:fa:c9:95:af:48:
                    84:9b:6c:47:53:b9:b1:fe:75:c7:13:33:e2:d1:a6:
                    cf:00:4d:63:c3:3e:fe:bb:ec:97:a0:63:59:07:69:
                    2e:f3:7a:9f:4f:ba:e6:6d:32:c5:75:cd:a0:e4:c5:
                    2d:e0:d1:25:ba:84:a2:a2:88:b9:bf:e2:de:10:3b:
                    56:07:59:4a:b7:2d:cd:df:11:fc:3a:ac:25:83:bb:
                    f4:42:ec:e2:86:9c:be:61:99:03:47:78:e4:9b:4a:
                    b5:b8:44:2c:03:7b:2a:93:f1:e5:89:f8:6b:56:da:
                    c5:2e:6c:19:04:10:3f:69:1f:2d:f6:3c:07:43:34:
                    96:65:1a:82:e2:4f:7a:d6:8c:1f:02:6f:d2:bb:17:
                    7c:61:c3:52:07:4c:0e:9c:04:29:2f:bf:70:53:bf:
                    35:0c:c6:69:ea:eb:6d:bb:30:6a:d8:17:46:59:74:
                    d3:97:67:c1:3d:84:22:c5:9c:30:14:a8:a5:50:78:
                    df:ec:4b:ae:ed:e1:74:7c:01:9b:80:a8:82:da:33:
                    b1:54:34:a1:db:e6:8a:fe:4f:0e:da:2c:c2:4c:6c:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:92:48:DD:2A:BF:B6:4C:39:A2:D5:E2:7B:2F:69:81:98:0D:FD:B8
            X509v3 Authority Key Identifier:
                keyid:B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/323830343a373362303a3a2f33322d3438203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:00:20:c6:f2:c3:cc:6f:96:46:8c:9f:2e:4e:b6:84:f2:8c:
         f6:9a:e7:de:82:c0:dd:30:9e:ee:fc:ad:3e:af:1f:f7:d9:60:
         ec:a7:2d:70:4f:44:18:5e:82:ef:f2:ae:ea:45:9b:bf:9e:14:
         ca:3e:c5:7d:fe:6e:e0:af:a9:d0:95:37:43:75:a1:85:59:af:
         95:32:86:a5:71:d0:4d:c6:e2:f1:ef:99:20:5a:bb:66:ed:74:
         60:be:1a:44:af:8f:ce:0f:bb:03:09:29:f8:12:a7:6f:f6:74:
         4f:7e:0d:3d:a7:da:34:b1:ee:ae:8a:f2:5b:d5:5a:e4:13:83:
         65:af:e1:3d:57:53:22:46:f2:20:9f:98:44:3c:fe:24:a8:49:
         28:e6:8b:3d:27:f8:85:e3:45:ce:fc:af:2c:4b:9f:2a:3a:93:
         08:8e:e3:40:52:66:46:7f:ca:03:e1:41:0f:ec:12:f7:c0:e1:
         7e:69:32:ab:f0:3a:33:25:6b:fb:92:87:e7:22:cf:d9:41:b8:
         24:d1:8d:d0:f9:73:43:00:ed:51:ae:a5:b0:c9:43:2b:50:4d:
         28:88:89:35:de:1d:c3:71:c4:11:aa:e2:52:36:c7:5e:6a:3d:
         85:d7:8c:63:53:d2:fb:44:48:12:3b:19:af:a0:09:54:77:56:
         6c:ce:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----