Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          dj38ZxRKVv4+rL4L2up25Ld+DTFvVrpdqbD82VnIfeU=
Subject key identifier:   77:5D:EB:9E:FC:C1:1F:61:DB:5A:66:BE:49:0C:8E:64:74:E9:11:CE
Certificate issuer:       /CN=2AA457BEF432F83463DE6AD111F6881D89605D25
Certificate serial:       357C7D830549C2FDB857086DD9C399B99CDC3F2C
Authority key identifier: 2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Wed 03 Apr 2024 19:06:33 +0000
ROA not before:           Wed 03 Apr 2024 19:01:33 +0000
ROA not after:            Wed 02 Apr 2025 19:06:33 +0000
asID:                     264409
IP address blocks:        2804:1e20:9940::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7c:7d:83:05:49:c2:fd:b8:57:08:6d:d9:c3:99:b9:9c:dc:3f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA457BEF432F83463DE6AD111F6881D89605D25
        Validity
            Not Before: Apr  3 19:01:33 2024 GMT
            Not After : Apr  2 19:06:33 2025 GMT
        Subject: CN=775DEB9EFCC11F61DB5A66BE490C8E6474E911CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:aa:50:60:6d:f8:b7:6e:ae:34:cf:29:ec:99:
                    1c:43:5e:f2:0b:c4:f0:d9:f6:2e:ee:2a:0d:65:06:
                    8f:af:ee:59:a5:12:a4:23:d1:f2:06:9c:8a:a7:06:
                    47:e1:48:99:ef:91:aa:a6:ef:73:6c:c2:2b:c4:73:
                    09:bc:35:47:ab:1d:6b:d5:41:81:b3:2f:7a:3e:25:
                    d7:07:ce:af:20:fc:3e:2d:a7:b8:8e:1f:b6:5c:72:
                    71:47:f7:c0:fa:9a:d1:06:ed:6b:62:2b:e3:e0:06:
                    f1:9a:23:73:e9:59:62:7f:e3:da:b7:75:85:12:78:
                    70:e4:a2:fc:eb:32:7f:69:1d:31:b8:a7:f6:4f:59:
                    59:9c:ff:ab:e9:73:a7:ff:15:e3:79:67:42:9c:2f:
                    f7:92:2f:58:29:46:35:9b:e7:4b:32:fd:fb:71:3c:
                    a7:57:90:5b:50:f3:ca:0c:60:21:84:55:86:7e:0f:
                    b3:4b:60:25:1a:f1:b9:e5:f0:4b:75:91:0a:98:98:
                    02:23:da:e8:3f:f7:85:63:4c:78:7f:07:c2:08:91:
                    95:2a:b8:ff:08:cd:29:ca:63:ac:01:ab:8d:ec:66:
                    c7:cb:6b:d1:ee:87:f4:fc:66:17:09:e3:ee:1b:60:
                    b4:4d:54:d9:82:1e:49:34:64:28:4a:28:68:d8:a6:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:EB:9E:FC:C1:1F:61:DB:5A:66:BE:49:0C:8E:64:74:E9:11:CE
            X509v3 Authority Key Identifier:
                keyid:2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/323830343a316532303a393934303a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:9940::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:ee:fd:09:16:23:ce:52:dc:d4:c5:9c:7d:c7:18:76:9f:
         53:15:8d:94:8a:5f:1b:d1:14:6b:da:93:c7:ad:b7:41:29:8f:
         be:e1:4f:c0:60:1e:bc:1a:69:ff:a0:87:00:b4:51:f5:8b:4d:
         2d:d4:a6:65:22:d0:5d:24:b3:e1:79:73:6f:dd:58:d6:a6:4a:
         0c:da:bc:b1:80:f2:e9:3c:cb:b8:21:ee:f3:56:0d:ed:f9:73:
         4f:dc:38:af:35:93:09:a2:5d:55:fa:f3:85:a7:7c:96:56:9b:
         97:07:5e:af:2f:81:49:b1:bd:ac:4e:a8:b4:4f:46:68:fb:2c:
         d9:6a:c5:ba:c0:01:ec:bf:1e:9d:01:fb:07:e3:c7:78:89:01:
         c9:ba:5a:9b:af:9e:5d:65:61:ef:84:2a:49:38:c7:18:8a:df:
         18:38:68:df:1d:3e:e5:c5:4a:62:17:93:19:03:b1:6b:c0:20:
         39:73:9d:7c:a5:e6:76:6c:e6:92:2b:83:e9:68:4f:a9:b9:19:
         70:f0:97:88:fb:4a:43:75:8f:10:53:69:1a:4b:37:f9:7a:5b:
         3a:35:db:71:c7:bd:7f:8e:c8:42:38:7e:0b:4a:c7:18:e6:7b:
         f3:cb:c8:dd:7c:c6:49:5f:ea:dd:95:79:aa:a2:9e:ea:b4:0b:
         e5:5f:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----