Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/323830343a346364343a3a2f33322d3438203d3e20323637333935.roa
File:                     323830343a346364343a3a2f33322d3438203d3e20323637333935.roa (raw, json)
Hash identifier:          bHP+EusVtEKflWKidFL4WOnxQr6h0rtfwuAamqdAHQI=
Subject key identifier:   56:FA:46:0B:7A:D0:1A:76:8D:90:0B:50:E8:D3:76:CC:9C:0D:22:5C
Certificate issuer:       /CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
Certificate serial:       68A953FEA065E220172749E5EE94D71171E91A6C
Authority key identifier: BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/323830343a346364343a3a2f33322d3438203d3e20323637333935.roa
Signing time:             Wed 10 Apr 2024 13:16:36 +0000
ROA not before:           Wed 10 Apr 2024 13:11:36 +0000
ROA not after:            Wed 09 Apr 2025 13:16:36 +0000
asID:                     267395
IP address blocks:        2804:4cd4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a9:53:fe:a0:65:e2:20:17:27:49:e5:ee:94:d7:11:71:e9:1a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
        Validity
            Not Before: Apr 10 13:11:36 2024 GMT
            Not After : Apr  9 13:16:36 2025 GMT
        Subject: CN=56FA460B7AD01A768D900B50E8D376CC9C0D225C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:e1:ca:cf:f4:8c:3f:56:b4:23:85:29:52:
                    76:9e:67:35:80:31:54:fe:cc:0b:27:5f:94:72:2d:
                    0a:d4:4b:87:a7:b8:2a:82:0e:ea:a8:68:47:f8:51:
                    5b:3c:82:22:d1:ed:ad:d3:9e:85:f0:aa:f3:50:34:
                    ab:39:72:87:52:8d:7a:dc:6b:5f:ec:a6:7c:4c:16:
                    30:a1:ff:86:00:7c:2a:da:b4:2c:0c:87:b9:dd:5a:
                    ed:97:06:72:8e:f9:d8:87:b4:12:6d:33:bd:1b:af:
                    bb:63:a5:eb:f0:1d:c6:9c:b4:d2:f6:ac:9b:48:e6:
                    d9:27:32:05:61:3b:73:4a:5f:8a:96:fd:97:8c:36:
                    5e:27:cd:ae:ef:63:a8:d5:4a:90:91:ac:01:41:c5:
                    49:8b:40:8c:23:ba:05:a3:02:81:00:a7:41:6e:44:
                    4e:0a:20:4a:8e:12:63:e4:63:8e:3e:d3:72:42:8f:
                    9e:43:e6:86:7e:3d:dc:2a:27:1c:8e:9b:7c:14:d0:
                    c1:3e:55:7c:f7:fb:eb:3e:30:ad:10:96:02:bb:e8:
                    08:83:c9:c1:e9:4b:15:eb:02:bc:75:67:69:9a:bb:
                    5f:5b:d9:ee:f1:1e:78:13:a5:f1:11:43:d7:42:5e:
                    01:9e:38:92:48:f9:70:2b:57:5b:8a:25:c4:42:a7:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FA:46:0B:7A:D0:1A:76:8D:90:0B:50:E8:D3:76:CC:9C:0D:22:5C
            X509v3 Authority Key Identifier:
                keyid:BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/323830343a346364343a3a2f33322d3438203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:87:d7:e1:33:9d:59:a8:93:e1:1f:ca:0f:1b:75:bc:c0:
         09:91:ce:2e:f4:58:f1:57:d6:d5:c1:9d:fb:9f:96:19:69:e5:
         a4:bf:d2:1e:87:2c:bd:c3:bf:47:6c:fa:99:40:a4:e0:80:31:
         9e:41:55:79:31:88:8e:f9:b4:dc:a1:7d:57:06:81:89:1c:fd:
         2b:4b:6e:17:02:05:64:64:bf:7b:2f:6f:15:e5:49:1b:0a:07:
         9c:f7:ac:6e:2c:8a:74:b0:b6:49:f5:e1:7b:27:1e:b7:c9:2d:
         ad:02:f8:26:95:09:b9:10:38:97:c9:85:da:d3:9d:c6:e8:d1:
         6e:98:40:47:c5:d1:43:0e:4e:26:c1:1b:69:9b:2a:d4:94:ef:
         ee:18:8a:f7:43:28:c7:53:bc:ec:46:36:09:d7:68:c3:a4:94:
         73:ef:38:e0:cc:85:85:ec:bd:44:74:c4:26:2a:0c:50:fb:eb:
         8a:ca:76:15:1f:ca:92:13:5a:d6:8c:4d:ad:e4:0a:f6:10:0c:
         ad:8c:98:fc:fd:c5:05:80:48:bd:e5:6c:3b:a5:59:32:75:32:
         e5:4a:34:a1:f7:af:2d:12:69:c8:06:a7:a4:95:d9:88:d5:89:
         b3:22:16:e0:2c:ae:13:83:76:12:9a:05:00:68:77:8a:31:c8:
         b5:be:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----