Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/323830343a316430343a3a2f33322d3438203d3e203631363839.roa
File:                     323830343a316430343a3a2f33322d3438203d3e203631363839.roa (raw, json)
Hash identifier:          KchcJOWbckoOjwJwNiWmTaHBbeSF1iu503vNwodQ/bo=
Subject key identifier:   9C:4B:AF:A6:70:78:F9:C9:A6:4A:65:24:1C:AD:3B:83:BC:1F:28:08
Certificate issuer:       /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial:       41E8BFC6AEE09F011AE874C9C645ACA94F652CD6
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/323830343a316430343a3a2f33322d3438203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:35:25 +0000
ROA not before:           Wed 10 Apr 2024 13:30:25 +0000
ROA not after:            Wed 09 Apr 2025 13:35:25 +0000
asID:                     61689
IP address blocks:        2804:1d04::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e8:bf:c6:ae:e0:9f:01:1a:e8:74:c9:c6:45:ac:a9:4f:65:2c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
        Validity
            Not Before: Apr 10 13:30:25 2024 GMT
            Not After : Apr  9 13:35:25 2025 GMT
        Subject: CN=9C4BAFA67078F9C9A64A65241CAD3B83BC1F2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:c2:54:e2:a0:34:f6:21:3a:bb:d4:c2:fa:
                    64:4f:3a:ea:7e:24:a7:34:0c:0c:ca:a0:19:88:c5:
                    cc:28:73:c0:b5:d9:af:7a:5c:ee:f5:88:ea:d2:02:
                    8e:03:c2:5b:c0:da:29:f4:36:91:dd:0b:d0:30:f9:
                    8f:78:84:b7:90:59:9a:71:f1:65:e9:80:d9:3e:66:
                    64:5c:9a:88:fe:26:9f:7c:27:c7:e7:37:04:57:e9:
                    9e:bd:55:0f:a4:bf:f8:fa:98:f6:e6:77:1d:d0:c0:
                    a4:a9:50:fc:a8:a7:96:a3:75:a6:3e:f3:f7:a5:fb:
                    f0:21:86:73:2e:ef:4b:6f:15:05:7e:67:c1:d4:1f:
                    8f:29:28:7e:29:64:11:99:72:95:9a:b5:9d:79:d2:
                    c8:e5:85:d1:35:4c:eb:71:f0:45:54:c6:11:16:24:
                    41:72:72:c7:5f:c9:e3:96:dc:f4:b1:b2:8c:7a:bf:
                    8f:4f:70:a1:1b:14:e4:b4:58:ab:e4:d4:4d:da:38:
                    1c:06:a9:e5:f6:b0:5e:57:64:e3:c0:01:21:19:29:
                    09:c4:07:e7:4c:de:bd:9f:f4:2d:9b:14:81:c8:4b:
                    4d:91:19:d2:26:d4:3b:ba:1f:e4:7f:66:b0:7d:30:
                    52:37:78:d0:80:b8:ae:4d:cf:c4:21:05:e9:28:99:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4B:AF:A6:70:78:F9:C9:A6:4A:65:24:1C:AD:3B:83:BC:1F:28:08
            X509v3 Authority Key Identifier:
                keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/323830343a316430343a3a2f33322d3438203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:09:17:c5:3a:d9:c9:01:e1:e5:b1:30:fb:ca:62:99:0f:ca:
         3b:06:8f:69:2a:6d:3e:5f:29:12:f7:2e:3d:13:6d:13:f0:d2:
         89:27:b8:8f:d0:d9:f7:32:6d:75:73:56:3a:3f:68:8d:7a:19:
         46:07:73:91:d0:c2:69:14:6b:d2:41:2f:33:01:40:16:56:76:
         14:d7:73:eb:25:21:9a:a8:33:db:87:fc:9a:bd:d5:e7:b9:1a:
         9b:66:00:bc:b1:98:1c:10:4b:b4:63:08:36:0e:39:c9:71:fe:
         a7:33:a7:76:ec:22:f6:bc:a1:e3:00:e4:a4:32:d1:4e:f1:39:
         c7:36:cb:5e:1c:5b:fb:79:8e:d8:24:3f:f2:0b:42:44:70:9d:
         3f:8e:39:9c:50:ec:44:d6:6b:06:dc:2b:1f:9c:ee:00:11:e3:
         24:ea:ab:21:05:92:a3:08:80:78:f9:02:8e:cc:3b:a5:16:a2:
         93:cc:0a:7e:03:4e:a5:19:b8:a5:8c:02:a4:41:dd:f3:de:38:
         64:5f:1f:1d:c0:17:56:c7:91:53:ca:89:94:7b:36:6e:e9:bf:
         fb:cd:ab:f3:db:6a:d5:f5:72:bd:7b:a5:12:c7:2a:7d:b3:2b:
         95:8d:4a:ab:f9:54:b0:f2:a2:65:da:0f:bf:f3:70:cb:f7:fa:
         d3:49:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----