Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa
File:                     323830343a323230303a3a2f33322d3332203d3e20323634353835.roa (raw, json)
Hash identifier:          nm1s/IWkO25+cX2/hc0bIXMaoDKIJxv3xwb1tqKdEaE=
Subject key identifier:   34:A9:34:80:F1:E2:86:5F:B2:D3:43:E9:03:4B:C3:E7:92:F5:1F:39
Certificate issuer:       /CN=0E5A5F5023E75AE879856236916A3D99195F7F79
Certificate serial:       48CFD4B275FD7FC82630D8CEE2FD2AD3FCFE8635
Authority key identifier: 0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa
Signing time:             Thu 04 Apr 2024 04:48:42 +0000
ROA not before:           Thu 04 Apr 2024 04:43:42 +0000
ROA not after:            Thu 03 Apr 2025 04:48:42 +0000
asID:                     264585
IP address blocks:        2804:2200::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cf:d4:b2:75:fd:7f:c8:26:30:d8:ce:e2:fd:2a:d3:fc:fe:86:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E5A5F5023E75AE879856236916A3D99195F7F79
        Validity
            Not Before: Apr  4 04:43:42 2024 GMT
            Not After : Apr  3 04:48:42 2025 GMT
        Subject: CN=34A93480F1E2865FB2D343E9034BC3E792F51F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:e6:de:47:73:2b:c7:9c:1f:7d:f9:af:d2:
                    8e:d1:21:25:7d:82:21:9c:7d:d9:df:a3:86:18:7d:
                    40:d1:a7:fc:a0:78:f5:20:4b:2e:f6:99:b7:dc:57:
                    07:a1:64:94:e2:f1:8e:7f:97:ea:45:3d:43:b0:95:
                    8b:dd:cf:aa:57:fa:ca:d6:88:e3:83:55:ea:77:c1:
                    f2:43:04:f7:b1:33:76:f7:47:61:ff:bd:44:7f:4f:
                    9a:38:da:c9:49:87:d2:f5:f9:cc:eb:22:d0:67:91:
                    89:01:8a:c4:93:5d:6f:db:f4:7a:c1:d8:0d:1e:f1:
                    c8:25:c4:95:29:b8:ec:9c:00:d5:4a:e7:90:50:6d:
                    d4:62:e1:80:07:ed:cc:5a:a6:5e:d7:7c:e3:6a:70:
                    34:9f:7e:01:2b:d3:19:f1:23:e1:18:f3:96:6b:5e:
                    63:c3:66:d9:8a:d0:d7:a8:2a:4f:19:d7:84:19:42:
                    06:bc:d3:96:dc:fe:43:6b:f5:b9:5f:44:e6:65:51:
                    bd:07:31:a4:51:9b:c0:10:96:59:57:88:33:8b:37:
                    75:a8:75:96:55:d0:69:27:3c:f6:9d:2b:e3:22:a2:
                    f7:fa:3b:a3:7a:69:b6:b9:88:65:b0:f7:d6:67:e7:
                    e5:74:24:fb:5a:03:cb:08:d4:46:c6:2c:ac:19:b9:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A9:34:80:F1:E2:86:5F:B2:D3:43:E9:03:4B:C3:E7:92:F5:1F:39
            X509v3 Authority Key Identifier:
                keyid:0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/323830343a323230303a3a2f33322d3332203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2200::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:9d:65:41:80:49:a2:fa:fc:dd:af:31:12:c5:0c:46:cf:
         de:25:66:1c:e3:0f:d0:52:20:8b:8e:03:55:47:ce:b8:15:ab:
         b7:0e:95:94:89:e2:e2:22:8d:bc:f9:1f:3c:85:53:f4:11:0d:
         97:d1:cb:eb:39:16:85:14:a5:d5:43:8b:3d:0e:19:5b:6b:e4:
         b5:29:87:77:37:5b:3a:37:70:39:69:93:3b:23:a3:89:29:87:
         4c:4b:90:ec:61:88:38:1c:28:08:20:dc:15:55:09:38:18:5a:
         e2:ca:55:07:98:0b:bf:a3:29:a5:cf:4f:a9:1a:92:75:b2:41:
         12:70:e3:5c:af:58:d2:95:58:49:e7:32:da:fe:5d:e1:0d:97:
         65:92:69:e1:aa:5d:06:4d:8b:e3:4e:b7:69:09:02:01:23:a7:
         fa:12:67:27:a0:dc:6b:d6:82:a2:53:3d:b8:47:59:69:8f:1d:
         05:71:24:27:ae:d1:41:da:35:0a:f0:f5:50:4b:4a:75:17:d7:
         25:42:83:d9:dd:08:9d:5c:6c:5e:c2:16:62:fc:14:f0:b3:15:
         bf:67:f4:a7:55:36:98:9b:78:f9:67:d9:d2:0e:89:78:66:5b:
         e7:4a:0e:9c:24:fc:26:57:25:21:05:8b:fe:16:25:57:de:f0:
         49:ac:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----