Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/1/323830343a376333383a3a2f33322d3334203d3e20323731343832.roa
File:                     323830343a376333383a3a2f33322d3334203d3e20323731343832.roa (raw, json)
Hash identifier:          9nkn97HrSPyNUTaFa+CVr5uFWpHRAtCFxmfFnai6E48=
Subject key identifier:   96:1A:77:9E:86:04:5B:F5:E1:EE:6C:45:6C:B0:F8:76:4C:A2:68:0B
Certificate issuer:       /CN=0C790C456BF27339CE80F3E9B5F9E72D5EB8519C
Certificate serial:       5421ADB996BE053CD9465232646A5ED54DB4EB6B
Authority key identifier: 0C:79:0C:45:6B:F2:73:39:CE:80:F3:E9:B5:F9:E7:2D:5E:B8:51:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C790C456BF27339CE80F3E9B5F9E72D5EB8519C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/1/323830343a376333383a3a2f33322d3334203d3e20323731343832.roa
Signing time:             Wed 03 Apr 2024 19:36:41 +0000
ROA not before:           Wed 03 Apr 2024 19:31:41 +0000
ROA not after:            Wed 02 Apr 2025 19:36:41 +0000
asID:                     271482
IP address blocks:        2804:7c38::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:21:ad:b9:96:be:05:3c:d9:46:52:32:64:6a:5e:d5:4d:b4:eb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C790C456BF27339CE80F3E9B5F9E72D5EB8519C
        Validity
            Not Before: Apr  3 19:31:41 2024 GMT
            Not After : Apr  2 19:36:41 2025 GMT
        Subject: CN=961A779E86045BF5E1EE6C456CB0F8764CA2680B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:63:75:bf:b2:05:81:6a:c4:96:86:36:7f:
                    a9:8b:05:a3:e9:d3:29:d6:fd:af:0e:41:82:fd:5b:
                    ff:ae:45:24:39:e4:dc:0e:b0:fb:33:95:f2:fe:af:
                    06:63:6a:86:2f:59:6f:69:bb:b4:94:cc:80:e5:03:
                    29:c9:52:f9:b1:3b:3c:b1:cf:8f:a0:1e:99:30:93:
                    89:a2:41:2b:94:a4:16:78:8f:c1:d0:5f:fd:44:cb:
                    3a:69:1e:c3:ca:c1:97:d9:09:4e:78:7f:77:b7:70:
                    6b:0a:c0:b1:15:16:5a:b1:0e:f9:44:a9:5e:74:d7:
                    e6:06:3e:67:e8:7a:15:c3:d8:9e:18:5a:2e:25:9d:
                    7c:d5:04:4b:60:21:20:b4:a5:1f:e6:b6:60:2e:f8:
                    7c:05:a1:63:ad:dc:59:99:45:a9:9e:d9:a6:35:0c:
                    57:72:50:46:e2:47:96:54:c2:56:61:3a:d7:a1:57:
                    c3:2c:51:33:8b:e6:f9:2c:90:31:37:90:58:03:da:
                    fe:c6:b0:98:6c:c8:f9:53:9b:ed:05:53:25:2d:00:
                    27:99:23:d8:1f:b4:67:4d:37:96:b2:38:28:e3:d3:
                    5b:f9:6a:76:4a:36:0a:df:40:74:c1:11:27:2d:e6:
                    19:7a:b0:99:81:21:7e:0e:c4:04:68:3a:34:ca:c1:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:77:9E:86:04:5B:F5:E1:EE:6C:45:6C:B0:F8:76:4C:A2:68:0B
            X509v3 Authority Key Identifier:
                keyid:0C:79:0C:45:6B:F2:73:39:CE:80:F3:E9:B5:F9:E7:2D:5E:B8:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/1/0C790C456BF27339CE80F3E9B5F9E72D5EB8519C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C790C456BF27339CE80F3E9B5F9E72D5EB8519C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/1/323830343a376333383a3a2f33322d3334203d3e20323731343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:4a:c3:9d:b1:56:13:39:03:78:77:dc:9a:da:56:33:c4:73:
         ff:6c:c0:64:0d:95:4a:e4:e4:0d:7f:68:83:2f:31:85:c1:fa:
         ed:4a:9f:c3:12:07:69:35:f4:83:81:e9:6f:6c:f5:0d:1c:48:
         f7:ac:2d:54:63:19:4c:61:bd:95:e8:4e:8d:62:47:e2:55:43:
         8f:d9:d7:70:34:b8:f0:5a:16:5e:84:d6:42:9a:75:e4:79:bd:
         49:35:94:8b:e3:5c:88:7c:b8:b2:a5:70:6f:80:68:a2:c7:7a:
         0d:9e:d3:98:1c:d3:5d:22:8f:1a:a0:e2:44:8e:9a:8e:2d:6a:
         6d:9a:fa:61:21:4e:ac:e7:28:8d:44:8d:f1:4f:af:57:06:da:
         3a:f8:ef:73:e6:d3:4f:a6:bb:93:b6:91:e4:94:8a:97:3a:20:
         b4:fc:3a:85:d1:2a:9a:01:20:20:b2:e8:4c:d8:5e:6c:59:66:
         04:ef:7e:75:2e:b4:d4:fc:4f:ef:ac:5b:3d:a1:08:13:2e:83:
         05:94:95:14:6c:c2:3c:d0:5c:a7:bc:5c:9f:d4:fd:e3:c5:4d:
         50:3a:c9:37:cc:45:75:8b:7c:95:63:c9:bb:c3:30:6b:3d:9f:
         55:f0:b6:d3:aa:d2:7f:c8:f2:16:ef:6e:41:50:9a:f4:fb:17:
         6f:3d:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----