Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa
File:                     323830343a323162343a3a2f33322d3438203d3e20323634353638.roa (raw, json)
Hash identifier:          Bo0iS4aGX86eRiC4nfihm+8rqCz0NUnCJUtKvzoPK84=
Subject key identifier:   DF:CE:7D:81:46:0C:F9:1A:9E:98:36:21:27:9A:B1:0F:7D:89:7F:EA
Certificate issuer:       /CN=0EE453A3507C247D4D2FA3B18D9661870AA5160A
Certificate serial:       0ADE098EBBBEA9943BB8C104332EDE84467B9EEA
Authority key identifier: 0E:E4:53:A3:50:7C:24:7D:4D:2F:A3:B1:8D:96:61:87:0A:A5:16:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa
Signing time:             Wed 03 Apr 2024 19:46:40 +0000
ROA not before:           Wed 03 Apr 2024 19:41:40 +0000
ROA not after:            Wed 02 Apr 2025 19:46:40 +0000
asID:                     264568
IP address blocks:        2804:21b4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:de:09:8e:bb:be:a9:94:3b:b8:c1:04:33:2e:de:84:46:7b:9e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE453A3507C247D4D2FA3B18D9661870AA5160A
        Validity
            Not Before: Apr  3 19:41:40 2024 GMT
            Not After : Apr  2 19:46:40 2025 GMT
        Subject: CN=DFCE7D81460CF91A9E983621279AB10F7D897FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:e9:a8:17:23:5f:40:52:02:67:48:7f:74:
                    5a:01:c9:c1:0b:a6:54:70:cc:7c:6d:07:fe:31:a9:
                    b2:de:7e:a3:a3:f7:c6:6d:b8:9f:7c:be:4e:18:01:
                    f9:cb:38:07:09:b9:86:cb:6e:64:cf:69:8d:2b:e3:
                    fb:a6:cd:2e:0e:1c:30:6a:63:8d:d3:a9:a9:d0:3b:
                    0b:bd:07:b2:35:f9:12:d1:b4:97:c8:ae:13:88:20:
                    cc:b3:80:f2:c5:4f:5f:19:35:9a:98:67:56:c5:9c:
                    89:63:86:b8:15:48:eb:0e:cf:eb:37:51:7c:93:f6:
                    0b:1a:9d:be:74:30:8b:64:07:07:a1:c3:92:34:9a:
                    04:7e:d9:e8:89:fa:86:1e:19:16:68:cf:e2:f3:29:
                    b2:a6:84:68:cc:ed:98:95:32:e8:10:70:15:fb:de:
                    a9:48:a0:b8:87:a3:ce:38:4d:fd:4b:05:77:ff:17:
                    39:45:c5:9a:b8:51:a9:db:63:39:9e:18:1c:c1:70:
                    e8:9e:b7:42:cb:ea:d0:b8:a0:7f:36:5c:dd:cf:5a:
                    c1:dc:93:eb:58:8b:9c:bd:43:79:aa:ba:4b:7f:68:
                    66:e3:71:e9:71:0a:73:d7:49:6e:d2:79:76:a7:c3:
                    25:2e:1d:03:61:27:99:fb:59:51:7e:e1:d9:68:84:
                    db:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:7D:81:46:0C:F9:1A:9E:98:36:21:27:9A:B1:0F:7D:89:7F:EA
            X509v3 Authority Key Identifier:
                keyid:0E:E4:53:A3:50:7C:24:7D:4D:2F:A3:B1:8D:96:61:87:0A:A5:16:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EE453A3507C247D4D2FA3B18D9661870AA5160A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/1/323830343a323162343a3a2f33322d3438203d3e20323634353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:ea:d0:d2:fd:09:f9:00:ad:2f:48:15:d4:9f:f4:44:a8:39:
         79:a7:d4:ae:f1:bd:53:c5:f5:20:1c:08:7d:99:df:35:81:8d:
         f2:ee:53:7e:52:9f:0d:23:a9:b2:99:ca:92:86:28:61:2c:d6:
         eb:54:46:39:a9:e3:cb:28:b0:fa:e9:73:e6:68:2b:8e:2e:59:
         17:2b:4f:2b:c0:38:c0:1b:84:a9:58:a8:84:b8:73:47:d3:78:
         86:b7:f6:82:4c:9f:20:e1:a3:74:51:7c:14:40:88:a5:88:06:
         30:43:6e:ca:36:6b:cd:00:fc:87:1d:9a:e0:d7:e4:0a:e4:3e:
         61:67:7b:a5:be:60:d4:b1:1d:e0:58:52:94:b0:66:4e:52:db:
         5f:2b:06:52:14:a5:4d:e5:e7:3a:4b:54:68:43:23:29:29:e6:
         f6:ef:34:26:d3:d5:d3:28:67:7d:f2:27:95:69:62:c3:1d:62:
         57:e0:8a:a3:26:a7:8f:fe:4e:b2:10:fc:b8:84:f4:c8:47:e6:
         62:65:86:e2:ac:23:4c:f1:f2:2b:ee:0c:51:f8:a7:29:d4:6e:
         b7:a3:27:13:1c:8e:6c:75:8b:da:eb:24:ce:02:7e:1f:fb:97:
         ad:4c:d1:93:83:4e:ff:7b:62:82:0c:42:bf:28:71:3e:95:b7:
         90:bd:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----