Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
File:                     323830343a326231633a3a2f33322d3438203d3e20323635313335.roa (raw, json)
Hash identifier:          ZhBj1Nnc7qr7pOhc5PDMtfJWUbij4hwZ5zqBo6h8d+0=
Subject key identifier:   32:38:CF:3B:AE:5E:FF:FF:60:E9:97:CE:C3:C7:0A:8F:97:3E:D6:59
Certificate issuer:       /CN=2195BBF27E6B720D37933312843530B890D00E56
Certificate serial:       624A9D3F21CA107AB2B836E8F9632090A6446F54
Authority key identifier: 21:95:BB:F2:7E:6B:72:0D:37:93:33:12:84:35:30:B8:90:D0:0E:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2195BBF27E6B720D37933312843530B890D00E56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
Signing time:             Wed 03 Apr 2024 20:01:10 +0000
ROA not before:           Wed 03 Apr 2024 19:56:10 +0000
ROA not after:            Wed 02 Apr 2025 20:01:10 +0000
asID:                     265135
IP address blocks:        2804:2b1c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:9d:3f:21:ca:10:7a:b2:b8:36:e8:f9:63:20:90:a6:44:6f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2195BBF27E6B720D37933312843530B890D00E56
        Validity
            Not Before: Apr  3 19:56:10 2024 GMT
            Not After : Apr  2 20:01:10 2025 GMT
        Subject: CN=3238CF3BAE5EFFFF60E997CEC3C70A8F973ED659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:ce:1d:d9:93:fb:2e:6f:fb:85:59:e6:33:
                    6f:ee:61:92:bc:31:3f:32:38:8b:fc:e0:94:35:2e:
                    76:29:c8:7a:18:aa:7b:64:9f:0f:06:40:9e:c7:e6:
                    54:a8:c5:28:59:6b:b4:ea:6d:a4:35:67:85:63:40:
                    a1:b8:75:bb:9a:58:f6:94:91:0b:9b:18:2b:9e:51:
                    db:eb:83:df:02:e6:e4:59:50:fa:57:a6:74:e8:99:
                    46:d9:be:cf:00:34:93:63:e2:72:a5:7d:d9:a8:17:
                    9d:9f:e5:7d:34:42:b4:cc:9d:0f:2e:f9:26:d1:98:
                    f2:96:ed:53:d5:59:c5:4b:48:a5:40:6f:86:f3:3c:
                    c4:a4:19:50:0b:5e:59:d6:64:25:2f:19:c5:5d:28:
                    47:31:ea:69:f6:93:c2:66:20:db:6b:11:b6:16:fc:
                    00:68:6e:da:c2:e0:ea:6a:4a:e5:0c:db:1c:de:3e:
                    ff:b0:84:56:f3:33:c2:b3:be:11:24:4c:58:94:f4:
                    0b:bc:11:c9:be:c9:18:f1:3e:85:72:f9:3c:62:1f:
                    58:ac:84:3c:36:4e:f1:87:0b:d7:8f:cf:b2:b4:19:
                    4e:14:65:c9:b7:4f:62:7b:2b:da:cb:cd:e3:24:46:
                    3e:5a:38:96:18:ab:dd:38:9a:e0:ff:e9:54:9e:23:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:CF:3B:AE:5E:FF:FF:60:E9:97:CE:C3:C7:0A:8F:97:3E:D6:59
            X509v3 Authority Key Identifier:
                keyid:21:95:BB:F2:7E:6B:72:0D:37:93:33:12:84:35:30:B8:90:D0:0E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/2195BBF27E6B720D37933312843530B890D00E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2195BBF27E6B720D37933312843530B890D00E56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/1/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:32:4e:ea:8f:b4:e1:c9:d7:82:29:7c:bd:bd:3b:0a:e8:8d:
         76:40:d7:23:04:55:7f:0a:95:7c:a3:4d:2a:2c:62:cf:b4:83:
         b3:c8:e1:70:bb:90:3f:4e:98:55:9b:04:86:5c:c4:0a:12:85:
         7c:3f:36:55:07:17:19:f7:49:58:53:e4:2f:45:e5:6a:30:28:
         ca:c5:99:c3:b9:98:79:e7:a2:4d:90:e6:36:2e:67:df:53:39:
         67:b8:df:75:64:e1:0b:85:58:f1:bf:55:15:d3:a0:c2:e6:c8:
         51:03:6f:6f:3a:b9:e2:c0:73:7c:90:8d:46:a2:37:8a:8c:01:
         94:31:eb:4c:a7:9b:43:32:c0:1f:ac:18:db:ff:cd:a0:c0:67:
         43:7c:ba:39:d0:13:58:ba:9f:e2:a1:ad:b8:cc:89:a3:0b:7d:
         96:94:9b:ec:76:d4:ed:1d:16:fb:ec:80:2c:00:77:23:cb:b5:
         f3:7b:82:59:23:0c:30:84:8b:10:cd:16:e4:2b:33:b3:c5:9a:
         44:4a:0b:1a:d5:13:a7:49:8b:69:db:cb:58:de:01:99:5a:38:
         fc:8a:d7:b8:f6:41:fd:90:e9:2f:a8:c0:9d:b4:8a:24:21:53:
         e0:c4:d1:f0:b1:46:14:a9:86:ba:68:e4:ea:2d:66:2b:71:e6:
         dd:79:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----