Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/323830343a343433383a3a2f33322d3332203d3e20323637363130.roa
File:                     323830343a343433383a3a2f33322d3332203d3e20323637363130.roa (raw, json)
Hash identifier:          IjGm55B6AGQ51kWYyEQYGfDqTNayaRntaJbGd3kchXY=
Subject key identifier:   8B:A5:0C:44:C0:DD:7F:4F:11:79:BC:E1:AF:9F:C7:03:B0:99:7C:9C
Certificate issuer:       /CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
Certificate serial:       483B990B8A16A1362DC3171E161A64DB91439816
Authority key identifier: B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/323830343a343433383a3a2f33322d3332203d3e20323637363130.roa
Signing time:             Thu 04 Apr 2024 13:54:05 +0000
ROA not before:           Thu 04 Apr 2024 13:49:05 +0000
ROA not after:            Thu 03 Apr 2025 13:54:05 +0000
asID:                     267610
IP address blocks:        2804:4438::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3b:99:0b:8a:16:a1:36:2d:c3:17:1e:16:1a:64:db:91:43:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
        Validity
            Not Before: Apr  4 13:49:05 2024 GMT
            Not After : Apr  3 13:54:05 2025 GMT
        Subject: CN=8BA50C44C0DD7F4F1179BCE1AF9FC703B0997C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:d0:80:bd:3e:0e:65:69:42:78:db:63:1f:
                    08:78:cf:d5:c2:fe:66:39:d9:86:e8:de:81:6f:e0:
                    57:d5:a3:9f:45:b0:3d:58:5c:ae:55:70:e2:7e:2d:
                    16:54:a8:92:54:e3:be:65:b3:e7:2f:29:75:8c:de:
                    02:c4:3a:dc:29:c8:91:86:e1:52:41:a1:21:57:8c:
                    0e:43:e9:3e:a7:9e:f7:25:e4:a9:48:cc:3b:91:44:
                    e6:c7:0b:ce:d8:2b:75:78:3e:a0:8d:99:69:61:e6:
                    e4:47:47:9d:5b:b0:9f:d9:0e:44:0f:9b:0c:0b:05:
                    19:e6:67:c1:7b:0e:b8:cc:95:7c:7f:d7:ca:02:36:
                    68:1c:59:31:1a:6c:ae:31:33:a4:c1:b9:e2:8b:c2:
                    c3:bb:78:f9:91:65:65:75:39:12:b6:d2:85:fd:90:
                    1c:07:f1:c2:3d:48:cb:70:a8:15:9b:52:ba:93:a8:
                    ce:c6:da:1a:eb:93:a7:5b:30:da:2b:ad:de:59:26:
                    c1:bb:11:d6:7f:c1:d0:37:0e:15:ef:f9:ca:45:a8:
                    2c:bb:3f:85:cf:53:88:6a:9f:24:d2:15:ff:6b:9b:
                    8a:60:85:bc:ee:25:3e:e5:ed:62:51:9a:06:9f:6a:
                    89:f3:87:43:9c:ef:4e:b2:08:d4:af:97:aa:7e:80:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:0C:44:C0:DD:7F:4F:11:79:BC:E1:AF:9F:C7:03:B0:99:7C:9C
            X509v3 Authority Key Identifier:
                keyid:B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/323830343a343433383a3a2f33322d3332203d3e20323637363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4438::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:d5:48:5b:ec:d8:15:ca:80:1e:79:3a:2b:7f:19:ae:0f:
         0b:40:5d:04:83:91:45:52:73:2f:e3:a8:bb:bf:3a:06:6d:7d:
         f2:19:33:ea:8f:0c:38:ae:f3:00:a6:42:2d:32:23:54:95:b9:
         fd:17:14:03:bf:26:70:9e:4d:47:58:b3:79:2a:4a:58:2a:6e:
         e4:64:e7:06:19:16:5e:68:be:d1:bc:01:a8:f9:25:55:81:97:
         65:87:81:f8:47:27:73:ae:40:6b:dd:bb:27:8c:41:8d:14:57:
         96:32:3c:eb:a3:53:1a:48:8b:85:4e:3c:01:35:9f:8e:7a:9e:
         4e:c0:58:5a:92:94:e5:cd:d0:d7:36:5f:fd:0f:62:e9:d0:34:
         30:3b:8b:4f:75:ca:8c:51:eb:0d:39:b1:69:44:23:74:25:2b:
         b5:9a:4a:b3:dd:f7:43:e7:37:35:df:bc:65:ee:59:28:eb:77:
         ff:38:51:c5:48:1a:ac:79:a7:9b:53:72:5e:17:85:17:25:36:
         2e:d2:c9:2b:8d:27:d7:26:57:b1:38:7f:cb:d6:17:4e:7a:a9:
         bc:5c:e4:a2:d5:d5:46:ae:9a:17:96:99:3e:77:5a:48:4a:4b:
         34:b9:4e:c3:9f:f4:f7:79:7c:48:87:ef:95:56:90:4f:43:8f:
         b5:00:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----