Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/323830343a373235383a3a2f33322d3438203d3e20323730383438.roa
File:                     323830343a373235383a3a2f33322d3438203d3e20323730383438.roa (raw, json)
Hash identifier:          drkQrQ5bHvIqBrIk+l7lLVbQAyE/qWguvIYRyfp61VY=
Subject key identifier:   E8:D4:A3:8A:FC:BF:8E:3D:75:D8:28:99:9A:6A:14:28:5E:75:36:C3
Certificate issuer:       /CN=BEC984CE218702B30AEF83CAEF626A9CB903EAE8
Certificate serial:       39531FAB4CF4EDF2B184104C60B8F2BE68EFC019
Authority key identifier: BE:C9:84:CE:21:87:02:B3:0A:EF:83:CA:EF:62:6A:9C:B9:03:EA:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/323830343a373235383a3a2f33322d3438203d3e20323730383438.roa
Signing time:             Wed 03 Apr 2024 23:33:45 +0000
ROA not before:           Wed 03 Apr 2024 23:28:45 +0000
ROA not after:            Wed 02 Apr 2025 23:33:45 +0000
asID:                     270848
IP address blocks:        2804:7258::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:53:1f:ab:4c:f4:ed:f2:b1:84:10:4c:60:b8:f2:be:68:ef:c0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC984CE218702B30AEF83CAEF626A9CB903EAE8
        Validity
            Not Before: Apr  3 23:28:45 2024 GMT
            Not After : Apr  2 23:33:45 2025 GMT
        Subject: CN=E8D4A38AFCBF8E3D75D828999A6A14285E7536C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:ff:7d:56:1b:76:88:aa:0f:96:a3:eb:95:
                    d3:5b:58:03:01:82:3b:17:18:45:7c:06:f2:57:97:
                    fe:ed:01:f7:fe:a2:2a:cb:04:75:83:eb:0c:67:b6:
                    82:7a:21:bd:3f:30:68:84:ea:bc:2f:17:72:25:a2:
                    13:64:b9:20:a4:8c:f9:bf:aa:40:29:0f:1e:d3:62:
                    7a:bf:1d:23:2a:c9:91:7e:fd:72:29:6b:44:b0:b5:
                    e7:8b:44:33:87:65:fd:9f:28:15:28:7d:49:52:02:
                    62:b2:51:55:b9:01:18:13:82:3f:c7:6b:6c:e7:1d:
                    d9:1c:d5:97:7d:8d:ce:68:8f:c4:55:7d:89:91:ef:
                    1b:77:f1:2d:c6:54:9d:b7:ea:d2:c4:cf:6d:8c:de:
                    ab:cd:f7:31:f2:ae:72:01:12:bf:13:5b:b0:5d:af:
                    b8:2d:ba:26:a9:a0:c5:0f:12:11:3e:8c:94:a2:ec:
                    ad:28:2b:2b:ed:e9:99:bb:fb:ab:86:2c:61:e6:4e:
                    b7:61:a4:ce:d7:8e:23:23:ca:f3:ee:83:da:e8:10:
                    ec:53:a7:c4:18:5e:fa:f1:df:74:00:4b:ce:fa:60:
                    70:16:5f:46:6b:a9:26:5e:85:97:fa:39:7c:9c:e3:
                    ca:45:54:65:86:2f:fc:ff:4a:49:95:f2:91:53:b6:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:A3:8A:FC:BF:8E:3D:75:D8:28:99:9A:6A:14:28:5E:75:36:C3
            X509v3 Authority Key Identifier:
                keyid:BE:C9:84:CE:21:87:02:B3:0A:EF:83:CA:EF:62:6A:9C:B9:03:EA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEC984CE218702B30AEF83CAEF626A9CB903EAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/1/323830343a373235383a3a2f33322d3438203d3e20323730383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7258::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:57:1b:f5:5a:d9:a4:d8:c9:bb:87:6d:f1:1d:29:89:8f:40:
         8f:9d:71:34:3f:eb:25:9c:0f:dc:6d:dd:4d:4e:2e:82:45:ca:
         7c:f1:d0:41:9d:81:05:33:cd:3c:ae:c5:61:9e:83:66:65:cd:
         f4:48:dc:71:c0:81:c8:8a:10:94:51:61:b6:33:09:0e:3a:87:
         a3:fb:7e:1d:d3:94:5f:79:5c:cc:c6:70:9b:10:5e:a2:98:0e:
         97:22:97:18:73:6a:5b:3b:b2:73:f3:9d:31:52:7f:08:e8:8a:
         2f:99:a8:c5:db:75:a3:4c:fe:ee:76:6c:13:fd:a8:3f:e2:b0:
         0c:db:fc:54:f0:02:c7:fc:8d:26:97:0b:6a:9d:8a:71:08:e1:
         f1:8e:f9:61:0c:78:62:c9:ff:ab:85:b8:7b:0e:d7:38:c6:c0:
         3f:bd:cd:e5:16:88:03:89:c4:f8:07:e9:d3:54:0b:71:36:b3:
         11:75:dc:39:2f:1b:94:e2:11:ba:45:ed:83:99:26:01:ad:59:
         17:4a:c3:8b:fb:b4:a1:66:25:59:49:a1:9c:07:e5:de:0e:4f:
         dc:10:9c:f5:cf:bf:5f:1d:9b:01:33:be:14:01:62:32:64:4a:
         a5:18:de:d9:fd:b1:ec:8b:32:22:9b:0f:58:73:cc:8d:fe:f4:
         b4:01:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----