Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/323830343a386135633a3a2f33322d3332203d3e20323733363634.roa
File:                     323830343a386135633a3a2f33322d3332203d3e20323733363634.roa (raw, json)
Hash identifier:          tYSMEZczuXoduiIV5JZ8q/YwOdlyf0CjKIjQvL3NQvs=
Subject key identifier:   4E:E2:2F:BD:CB:7A:31:B2:73:76:6F:B6:21:65:D9:76:34:1B:28:65
Certificate issuer:       /CN=0828022EEE25F9CBEBDFA747163E4895F108A427
Certificate serial:       6BAF3D83034DDB4377C271E50723F8DE4CB84FB4
Authority key identifier: 08:28:02:2E:EE:25:F9:CB:EB:DF:A7:47:16:3E:48:95:F1:08:A4:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/323830343a386135633a3a2f33322d3332203d3e20323733363634.roa
Signing time:             Thu 04 Apr 2024 16:43:20 +0000
ROA not before:           Thu 04 Apr 2024 16:38:20 +0000
ROA not after:            Thu 03 Apr 2025 16:43:20 +0000
asID:                     273664
IP address blocks:        2804:8a5c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:3d:83:03:4d:db:43:77:c2:71:e5:07:23:f8:de:4c:b8:4f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0828022EEE25F9CBEBDFA747163E4895F108A427
        Validity
            Not Before: Apr  4 16:38:20 2024 GMT
            Not After : Apr  3 16:43:20 2025 GMT
        Subject: CN=4EE22FBDCB7A31B273766FB62165D976341B2865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:2f:fb:e5:f6:2e:1b:76:26:8f:c9:f0:70:
                    29:ec:79:59:86:d8:ec:f1:68:24:56:1f:d6:c1:b9:
                    68:bf:ae:1c:79:84:e6:10:98:87:36:db:16:53:39:
                    64:76:31:c3:ad:19:47:4f:ca:d5:a8:f5:27:e8:8a:
                    24:10:d6:69:bb:86:03:fc:63:28:87:48:11:2b:2e:
                    bc:73:88:bb:1f:d5:f1:6e:dc:0d:08:4d:fb:c8:36:
                    93:67:9e:ff:77:e8:0b:27:c5:95:61:28:9d:f4:fd:
                    63:31:91:09:2a:b5:42:cd:c9:f6:ed:47:66:1f:05:
                    e0:bc:ec:1a:b6:8c:63:9d:dd:5c:e0:4f:e7:c5:74:
                    60:6f:08:e9:87:53:fe:67:4f:11:d5:75:fd:d8:27:
                    71:69:b9:4d:77:11:38:40:f5:03:ef:41:0c:1d:b3:
                    a6:f4:33:3d:e5:a9:ad:46:db:4b:c3:04:28:1a:fe:
                    69:a5:26:a3:1e:8d:d5:bb:c3:b8:39:77:45:26:55:
                    49:ee:d5:0c:c0:c3:dd:7f:f1:8d:1e:fb:c6:ba:e4:
                    d7:79:f0:11:c2:f0:48:2c:d0:ef:d9:e5:b8:18:dc:
                    45:a5:fb:3a:b6:ac:1a:5e:c9:89:5f:16:f8:27:12:
                    56:60:97:b6:3d:29:37:75:8b:57:f9:fb:1e:72:5d:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:2F:BD:CB:7A:31:B2:73:76:6F:B6:21:65:D9:76:34:1B:28:65
            X509v3 Authority Key Identifier:
                keyid:08:28:02:2E:EE:25:F9:CB:EB:DF:A7:47:16:3E:48:95:F1:08:A4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/0828022EEE25F9CBEBDFA747163E4895F108A427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0828022EEE25F9CBEBDFA747163E4895F108A427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/1/323830343a386135633a3a2f33322d3332203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:05:fe:ae:5e:4b:1d:64:f5:ca:fa:7e:68:f5:8f:82:b2:c6:
         b4:e3:ff:1b:8a:79:a6:73:61:e6:cf:e0:09:ec:4a:fc:d5:6c:
         26:85:d7:7e:c4:77:cb:f9:89:cb:49:fb:4a:0e:24:64:38:d9:
         f1:3a:f1:97:8e:c1:ca:82:28:9b:41:c4:de:9d:f9:0e:85:f7:
         97:ed:dc:cf:1d:a6:79:c0:8f:f2:e0:ee:bb:7d:fa:0d:5c:08:
         23:a6:e3:8b:f6:6f:47:5f:8a:a9:9f:40:c5:8e:29:df:9c:88:
         c7:e4:9f:cb:45:20:18:d4:79:5e:38:4a:71:32:bb:98:35:6f:
         47:3f:a2:86:eb:49:24:25:28:43:da:2f:68:27:6e:1b:d7:fe:
         c7:71:51:2a:d1:cc:5a:30:99:94:09:f0:a7:09:e2:97:25:92:
         b2:e1:3d:1b:62:96:9d:ed:93:4d:fd:95:c9:fc:4a:7a:73:9c:
         7d:1d:c9:bb:a1:48:4b:9d:b3:1e:e4:c4:97:b6:1a:c0:97:62:
         83:a8:ae:c5:29:24:62:c4:f5:99:05:4f:87:bd:d9:03:36:2b:
         f5:18:92:ba:fc:30:ee:55:f8:c3:ef:ea:94:f0:39:7a:a2:99:
         51:9a:40:28:01:bd:09:2a:64:3a:9f:f3:0f:ec:a4:95:ca:76:
         28:03:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----