Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa
File:                     323830343a313564343a3a2f33322d3332203d3e20323633343133.roa (raw, json)
Hash identifier:          EHPIeKsxWFZZs3WsvI6wmPwFc/HbAvCwUaZ5bafQp1A=
Subject key identifier:   4C:92:92:E2:41:E6:C7:4A:35:E1:E4:46:C2:50:28:B3:77:0E:BC:C1
Certificate issuer:       /CN=E1989BB07C22369442D0A08B2212D584A657A415
Certificate serial:       69C4B714723059A65671A638EA50C6590BEA39EF
Authority key identifier: E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa
Signing time:             Thu 04 Apr 2024 10:21:41 +0000
ROA not before:           Thu 04 Apr 2024 10:16:41 +0000
ROA not after:            Thu 03 Apr 2025 10:21:41 +0000
asID:                     263413
IP address blocks:        2804:15d4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c4:b7:14:72:30:59:a6:56:71:a6:38:ea:50:c6:59:0b:ea:39:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1989BB07C22369442D0A08B2212D584A657A415
        Validity
            Not Before: Apr  4 10:16:41 2024 GMT
            Not After : Apr  3 10:21:41 2025 GMT
        Subject: CN=4C9292E241E6C74A35E1E446C25028B3770EBCC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:ed:ac:01:22:8e:a3:b9:17:e0:ac:83:65:
                    08:d7:dd:13:29:62:85:d0:3e:ed:55:5e:be:1c:77:
                    21:f7:42:41:8a:7b:61:2a:de:20:f2:a4:72:61:ae:
                    8e:0b:9f:c1:53:3f:c9:68:84:bd:fe:1d:10:97:48:
                    d1:7e:36:ac:ca:56:b9:f3:30:c7:e9:4b:b0:2c:77:
                    4b:27:b2:71:fa:90:77:b8:b9:74:3a:48:8a:61:45:
                    6f:46:e1:75:2e:b4:f2:a6:c7:1c:db:56:03:43:b8:
                    60:68:35:cf:e9:27:d0:cc:ef:78:c4:e2:8f:9c:47:
                    00:33:79:ff:5a:b7:c7:b5:25:12:c2:2b:64:b7:39:
                    0c:a9:8c:2a:43:ba:28:62:69:66:b2:b5:65:a9:90:
                    96:b4:6b:f9:e5:d6:f8:d6:6d:a8:77:62:e0:96:39:
                    4b:d8:c3:72:0a:2f:3f:b3:29:50:07:e6:6c:3a:9f:
                    51:a2:28:53:78:67:5b:b6:5c:1a:eb:ef:c3:86:94:
                    46:15:65:c4:bc:d9:e7:31:f7:3f:6c:4e:9d:69:4d:
                    00:1d:f2:e3:49:10:70:f8:23:b3:57:4b:54:af:55:
                    09:4a:7c:b4:df:06:fe:e3:10:38:d0:86:67:d0:ee:
                    05:ea:24:94:6a:f8:b2:41:91:8b:74:65:b5:36:94:
                    7d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:92:92:E2:41:E6:C7:4A:35:E1:E4:46:C2:50:28:B3:77:0E:BC:C1
            X509v3 Authority Key Identifier:
                keyid:E1:98:9B:B0:7C:22:36:94:42:D0:A0:8B:22:12:D5:84:A6:57:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/E1989BB07C22369442D0A08B2212D584A657A415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1989BB07C22369442D0A08B2212D584A657A415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/1/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:0f:c2:02:d5:02:22:3d:cd:14:0a:52:0d:bc:f4:71:44:43:
         39:a3:e4:38:64:9f:9f:a8:6e:73:da:6d:56:ab:60:d4:13:70:
         c6:4a:c9:c9:db:bd:19:e4:de:7a:be:be:4d:a9:b5:f0:35:ce:
         74:ef:bf:5d:d5:0b:67:a1:aa:39:3f:db:59:7c:0e:2a:82:d7:
         70:13:94:8d:12:ce:69:ec:ff:df:43:e8:2d:ac:72:8a:2b:00:
         f1:21:2e:b8:d4:7a:5b:9a:e3:7a:a6:b0:7b:80:7f:c4:7f:0c:
         81:c3:fe:c7:1f:2f:6f:fc:aa:6f:52:89:62:55:c7:c0:dc:b1:
         f5:23:4c:d8:01:d2:ab:2b:72:b1:15:9e:ce:4b:61:74:8a:73:
         6f:eb:de:dc:9e:d9:42:31:a9:93:be:6d:36:f8:8f:fe:7d:30:
         40:03:d8:53:0d:26:ab:24:d7:a0:b7:94:a3:ae:51:3b:55:51:
         7f:c3:e2:7c:1c:b9:76:16:97:d3:4e:a9:0d:96:e9:3a:6e:3d:
         06:95:a2:2f:84:45:d8:38:59:58:93:5f:1b:f8:2d:26:78:e5:
         c8:03:6b:68:58:98:cb:e7:f5:39:24:7f:92:0b:9a:69:92:ad:
         99:be:83:85:81:5c:a9:87:83:ce:b0:f7:d4:fa:1e:3e:ea:57:
         26:4a:57:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----