Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa
File:                     323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (raw, json)
Hash identifier:          VKs7+EsboDDx0nCBLpoRfTuBuPzIdAj100zXRnqlaxE=
Subject key identifier:   B9:F4:B3:1B:15:58:89:E3:D2:4D:1D:72:21:49:A2:A9:63:70:1B:D0
Certificate issuer:       /CN=A665DF6E8BF7E4004707184C93756CB086A86795
Certificate serial:       1145E00D86DDB8CA08D90FE51290EB5C4A8F3C80
Authority key identifier: A6:65:DF:6E:8B:F7:E4:00:47:07:18:4C:93:75:6C:B0:86:A8:67:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A665DF6E8BF7E4004707184C93756CB086A86795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa
Signing time:             Wed 03 Apr 2024 21:58:36 +0000
ROA not before:           Wed 03 Apr 2024 21:53:36 +0000
ROA not after:            Wed 02 Apr 2025 21:58:36 +0000
asID:                     266309
IP address blocks:        2804:35d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:45:e0:0d:86:dd:b8:ca:08:d9:0f:e5:12:90:eb:5c:4a:8f:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A665DF6E8BF7E4004707184C93756CB086A86795
        Validity
            Not Before: Apr  3 21:53:36 2024 GMT
            Not After : Apr  2 21:58:36 2025 GMT
        Subject: CN=B9F4B31B155889E3D24D1D722149A2A963701BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:ad:23:9f:3b:aa:ab:6b:b8:18:82:5b:85:
                    c6:06:77:7b:03:55:25:9c:27:20:80:72:72:41:42:
                    d8:c0:7f:59:ce:a4:07:39:aa:7c:db:be:21:51:6d:
                    9d:e8:01:2f:cf:de:7f:e6:2f:9b:23:5a:6b:fd:36:
                    51:b2:53:e2:8a:86:0a:22:48:23:9a:31:4f:b8:a4:
                    d4:88:a4:3a:ac:22:6a:fc:4f:3e:02:0b:12:dc:3b:
                    7a:cd:34:30:1b:54:b1:2d:a5:77:81:86:cb:f8:d3:
                    9d:f8:15:45:2b:5e:20:85:c9:2b:b9:d6:cd:53:d5:
                    b6:41:47:24:f2:6e:16:7c:c9:21:b6:fb:67:b1:d1:
                    f7:8d:4d:e8:50:60:44:e2:88:6a:c5:33:6c:57:98:
                    79:bf:f7:ee:2a:7c:c4:0e:bf:46:2c:98:0e:02:ab:
                    8b:17:f4:d2:2f:70:41:6e:c4:f0:4a:11:b2:08:0a:
                    f5:3a:eb:9c:a9:da:55:ad:9d:ea:be:f4:cf:79:8d:
                    b9:eb:eb:78:04:44:ae:c8:57:af:7e:53:4c:12:0c:
                    a9:aa:1f:86:6f:2b:89:22:96:67:ca:ea:c5:96:70:
                    f9:e0:7b:05:d9:ab:5d:f2:81:c1:3a:c1:f2:db:d6:
                    2f:3a:6e:94:86:c1:b1:db:f1:80:e1:13:31:4e:a5:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F4:B3:1B:15:58:89:E3:D2:4D:1D:72:21:49:A2:A9:63:70:1B:D0
            X509v3 Authority Key Identifier:
                keyid:A6:65:DF:6E:8B:F7:E4:00:47:07:18:4C:93:75:6C:B0:86:A8:67:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/A665DF6E8BF7E4004707184C93756CB086A86795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A665DF6E8BF7E4004707184C93756CB086A86795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/2/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:88:ea:c8:d0:59:ba:ef:84:00:f7:ad:a1:c5:d2:6a:11:
         51:e7:89:ac:65:56:7f:14:bb:db:90:9a:a8:bb:80:44:93:6f:
         1b:9f:2f:60:2a:bd:a7:90:0a:04:e3:78:b0:1a:94:21:91:1c:
         e5:f3:12:6e:a4:32:ac:1a:a2:ae:1f:48:d6:c8:a8:e8:85:af:
         94:13:08:0f:fd:ae:88:1c:b7:2d:a1:85:ff:59:8c:a9:36:d8:
         87:72:cf:1c:a8:87:0f:77:df:f8:57:9d:57:3e:3a:92:db:6f:
         3a:b4:f0:91:4a:43:7d:af:1a:fd:cf:3f:71:37:8b:1a:14:63:
         56:ca:75:13:26:6f:a6:b9:f9:b2:29:4a:d7:82:ed:ad:46:47:
         c5:d8:cc:db:cb:dd:52:e7:c8:16:0b:d2:a6:b3:4c:58:8b:6a:
         91:4f:bf:aa:68:98:e0:cf:04:ff:30:93:1f:2c:c5:13:79:ba:
         6e:06:ac:7f:89:e0:24:b2:2a:e7:b3:a0:45:4d:e4:64:c8:48:
         70:7e:cf:bf:6b:2f:fb:be:2b:91:9d:f8:59:c9:c8:7f:f7:d8:
         a6:5d:68:60:3c:b8:49:6f:3e:a1:3b:20:fb:dd:fd:5b:08:9c:
         93:f5:46:dc:ca:f3:7d:7a:75:ac:d9:e0:39:04:6c:63:27:4c:
         1f:8c:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----