Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/323830343a6366343a3a2f33322d313238203d3e203532353739.roa
File:                     323830343a6366343a3a2f33322d313238203d3e203532353739.roa (raw, json)
Hash identifier:          USXpvzPDwWGLzY1yWv0vm7WnEBay0FhfPBAHHQAvSDU=
Subject key identifier:   A8:9A:A8:DE:66:7E:F3:83:43:E1:6F:1D:81:64:94:92:E4:71:59:F0
Certificate issuer:       /CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
Certificate serial:       478C4BC09BF073CEA2228C0700D44E316A70D757
Authority key identifier: 0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/323830343a6366343a3a2f33322d313238203d3e203532353739.roa
Signing time:             Mon 15 Apr 2024 13:15:43 +0000
ROA not before:           Mon 15 Apr 2024 13:10:43 +0000
ROA not after:            Mon 14 Apr 2025 13:15:43 +0000
asID:                     52579
IP address blocks:        2804:cf4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8c:4b:c0:9b:f0:73:ce:a2:22:8c:07:00:d4:4e:31:6a:70:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
        Validity
            Not Before: Apr 15 13:10:43 2024 GMT
            Not After : Apr 14 13:15:43 2025 GMT
        Subject: CN=A89AA8DE667EF38343E16F1D81649492E47159F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:49:86:de:00:04:d2:f5:d2:3c:53:4a:f7:
                    05:c3:d3:a5:b5:6d:df:4c:76:9c:64:2b:66:21:c5:
                    89:c9:34:98:3b:9c:be:65:d5:e5:e6:7b:a9:f2:45:
                    57:f5:75:46:8b:bd:d8:91:57:b0:5d:9c:db:d8:9f:
                    e6:97:b3:32:a0:e4:f4:30:84:94:c3:46:16:20:eb:
                    c3:d4:c3:2e:f5:de:dc:3b:5c:32:5d:30:d4:28:a8:
                    9f:c6:5e:ba:69:c0:e6:b4:ab:5c:e3:14:95:3f:9b:
                    7c:7c:38:54:49:d9:eb:da:56:2b:bb:ed:20:f4:d7:
                    44:a3:bd:0e:de:99:48:8b:ea:79:c8:63:31:d5:09:
                    f5:15:12:a3:f0:6b:9d:38:f8:1e:a6:9b:1f:d8:bc:
                    e0:0a:a0:9c:d1:63:7b:04:4a:4f:22:76:bb:f2:0d:
                    ef:5d:8d:74:f0:1a:23:e4:ea:ef:f4:a3:fa:58:c3:
                    b1:7d:a6:b0:dd:52:38:da:b4:62:dd:26:1b:a3:b5:
                    f9:4f:9b:c3:6b:57:60:a7:30:f1:9d:54:6d:52:4d:
                    21:6b:5b:14:0e:f2:37:c4:1c:0c:96:ba:e1:9c:ea:
                    ab:03:d0:f2:6f:7a:8b:c5:6b:56:df:0d:34:a1:a6:
                    b9:11:75:61:4e:6c:c7:11:b0:f2:77:e5:56:1a:fc:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9A:A8:DE:66:7E:F3:83:43:E1:6F:1D:81:64:94:92:E4:71:59:F0
            X509v3 Authority Key Identifier:
                keyid:0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/323830343a6366343a3a2f33322d313238203d3e203532353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:98:02:01:47:6a:d2:3c:2c:d3:91:7c:b5:ab:00:a7:11:
         b7:74:a6:35:1b:55:b0:28:2b:0a:d6:3d:bc:d6:58:45:e2:e3:
         f0:18:19:0f:26:8c:fc:57:6a:c9:89:4a:ec:d9:a5:33:38:6e:
         7d:e5:20:96:eb:f0:3e:65:78:e6:65:19:67:f9:df:6c:4e:f0:
         9b:b9:f8:a6:ec:68:5f:f4:22:e7:ca:0b:94:4c:a0:f8:dd:13:
         0f:ec:11:55:7e:bd:17:49:90:4d:f5:92:45:6d:00:39:4d:dc:
         48:d7:65:a8:a5:ef:2f:6d:6c:5d:67:02:c1:44:90:6b:c9:f5:
         53:80:b3:c9:70:c8:2d:16:0f:41:62:fd:7d:26:75:1a:a1:38:
         b2:14:df:0f:5f:0f:46:b4:43:d4:75:8e:92:b0:d7:76:6b:8c:
         35:49:98:0a:4d:27:68:66:c5:62:c0:35:16:ee:eb:b2:0a:a7:
         a9:6f:e0:1e:63:d7:ba:0f:b2:10:25:2d:c5:4f:4f:1d:9d:de:
         e7:3b:c1:df:4b:ca:78:df:c2:5f:fc:8c:77:40:6e:86:d2:75:
         f1:23:16:94:fa:49:b8:3d:3d:e9:37:02:23:56:59:a4:18:e8:
         bf:b9:79:f7:d7:bd:cc:84:f4:e4:38:07:a7:36:8d:24:9b:48:
         9d:98:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----