Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/323830343a353130633a3a2f33332d3334203d3e203631353934.roa
File:                     323830343a353130633a3a2f33332d3334203d3e203631353934.roa (raw, json)
Hash identifier:          BzlDDOBNyMlzZt6Kwbb+k87iMc7kpO33zKQcTg/sqKg=
Subject key identifier:   2C:4E:DE:1E:94:4A:57:A7:1C:3E:BB:FA:B2:7C:7A:BF:AE:9F:C1:9A
Certificate issuer:       /CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
Certificate serial:       3E7E4754FA216ECBFCE5371BA24AF117745E3E9E
Authority key identifier: 8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/323830343a353130633a3a2f33332d3334203d3e203631353934.roa
Signing time:             Thu 04 Apr 2024 01:48:25 +0000
ROA not before:           Thu 04 Apr 2024 01:43:25 +0000
ROA not after:            Thu 03 Apr 2025 01:48:25 +0000
asID:                     61594
IP address blocks:        2804:510c::/33 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7e:47:54:fa:21:6e:cb:fc:e5:37:1b:a2:4a:f1:17:74:5e:3e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F22D0F09007A0AB362AFC115EFAF686F131E2E3
        Validity
            Not Before: Apr  4 01:43:25 2024 GMT
            Not After : Apr  3 01:48:25 2025 GMT
        Subject: CN=2C4EDE1E944A57A71C3EBBFAB27C7ABFAE9FC19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:96:42:fe:8e:c8:5e:39:21:91:43:0e:79:
                    7b:37:d4:53:16:36:fb:dc:c3:cb:b5:b8:4e:a9:3c:
                    27:f2:ba:2a:d1:92:f7:11:ee:78:e3:78:60:1a:e5:
                    68:5c:0e:87:13:00:29:a5:1b:3d:4a:97:8c:8b:3c:
                    0b:ea:d9:cf:74:21:66:13:75:a3:2b:ee:e9:63:37:
                    f5:95:89:45:49:17:b1:1b:ac:05:49:0e:5d:94:a5:
                    e0:35:9b:28:f7:cb:62:d3:63:f8:b1:a7:a9:1d:c7:
                    f7:f8:43:ee:77:43:d6:3d:f6:85:17:fb:f1:21:2e:
                    54:00:bc:62:2e:5a:86:a7:91:58:ba:47:06:b8:8b:
                    8b:52:f8:20:b8:b4:6d:0c:c1:95:c1:22:c1:f1:4c:
                    fe:14:04:39:14:25:c6:b7:8a:cf:74:6e:b2:1d:56:
                    02:b0:f7:ff:80:5e:dc:e8:bb:5d:25:5f:38:46:a3:
                    84:1d:0b:18:cb:e1:70:29:45:d2:5f:44:64:25:73:
                    7e:ef:c0:01:d9:ab:48:f1:b3:4d:18:d5:0b:68:f3:
                    f6:f0:34:65:4a:f6:90:74:37:bd:56:46:fc:50:4f:
                    07:ce:87:50:4c:1b:44:cf:6e:f8:10:ea:70:09:79:
                    b9:c2:7d:b6:f9:53:ed:ba:88:6f:47:c0:c7:d6:a0:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:DE:1E:94:4A:57:A7:1C:3E:BB:FA:B2:7C:7A:BF:AE:9F:C1:9A
            X509v3 Authority Key Identifier:
                keyid:8F:22:D0:F0:90:07:A0:AB:36:2A:FC:11:5E:FA:F6:86:F1:31:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F22D0F09007A0AB362AFC115EFAF686F131E2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/1/323830343a353130633a3a2f33332d3334203d3e203631353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:510c::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:d3:13:fc:b0:ce:97:f5:ac:6a:96:ca:1c:4d:95:39:d7:
         e5:69:16:28:70:c8:1b:f5:53:83:e4:95:c0:34:01:5a:53:13:
         21:99:ad:2f:81:62:44:be:1b:ab:46:ae:86:35:69:85:66:5b:
         9b:73:fb:79:d4:28:09:ed:95:0d:07:ac:0b:ed:5a:c4:56:98:
         89:40:84:35:68:56:2e:04:c2:fb:78:b0:39:05:96:31:a6:a2:
         e7:a1:5f:ab:37:fe:fb:6b:e7:5b:5e:c3:88:d5:f6:f5:0b:a5:
         41:13:e3:17:74:44:68:ec:4d:81:09:29:47:a0:87:5d:69:bd:
         58:81:dd:37:6e:2c:e5:11:97:0b:96:77:e4:45:f6:e8:cc:d6:
         2b:1e:1a:fe:1f:7b:c2:c5:1e:f9:06:7b:54:59:9a:4b:13:dd:
         1e:f0:ab:40:55:fd:f3:02:54:37:9b:db:3c:7e:d7:37:09:51:
         5d:21:b9:05:1e:34:36:1c:f2:7d:e1:33:de:c9:5f:a6:10:e0:
         30:96:d5:b5:1b:96:df:06:da:a9:c2:e0:35:b4:29:2b:bc:46:
         d9:62:31:d1:6f:bf:28:5b:75:41:17:85:e9:ff:fa:83:c4:65:
         a4:16:7f:a8:73:07:d4:a3:50:68:84:c3:71:4c:1a:47:5f:c0:
         89:40:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----