Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
File:                     323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (raw, json)
Hash identifier:          jiHBkAEBW7Yc0OvuoeXjZfnBhTPar4w5lCU6OgEbjU4=
Subject key identifier:   CD:1D:B8:10:30:C8:96:B9:28:57:E4:5C:66:AC:9D:E5:D2:4A:5C:8A
Certificate issuer:       /CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Certificate serial:       522B6183B8FBC8B167BECA4E9FF6FE245079A972
Authority key identifier: 94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
Signing time:             Thu 04 Apr 2024 09:54:42 +0000
ROA not before:           Thu 04 Apr 2024 09:49:42 +0000
ROA not after:            Thu 03 Apr 2025 09:54:42 +0000
asID:                     262403
IP address blocks:        2804:3e0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2b:61:83:b8:fb:c8:b1:67:be:ca:4e:9f:f6:fe:24:50:79:a9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
        Validity
            Not Before: Apr  4 09:49:42 2024 GMT
            Not After : Apr  3 09:54:42 2025 GMT
        Subject: CN=CD1DB81030C896B92857E45C66AC9DE5D24A5C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:94:8e:38:8e:f2:7a:e8:ba:bf:03:08:c6:
                    e5:a6:e3:2d:94:0a:5e:8e:f5:a1:65:aa:51:ea:12:
                    27:6b:a7:b7:38:cc:c8:1f:27:5f:7a:df:7a:da:94:
                    53:bb:b2:b8:d5:23:f5:8b:c4:b0:85:85:36:34:13:
                    ec:68:0b:97:c9:3e:ac:12:93:b2:e2:80:5e:e5:eb:
                    3b:5e:20:aa:78:ca:62:64:95:a6:ca:8a:33:55:b9:
                    a1:43:d4:e4:c7:0a:2d:86:d6:8b:18:32:58:45:b0:
                    93:09:c1:be:e5:ca:0e:d0:ee:3f:69:25:b4:fc:c3:
                    ab:8f:d2:06:b4:8c:1b:83:28:9f:be:9a:32:36:51:
                    46:aa:95:e7:e1:10:bd:f3:72:73:17:11:92:ce:79:
                    3a:1c:74:75:47:f2:8a:45:ff:3f:92:25:dc:88:4e:
                    61:73:19:9b:b1:eb:f0:23:8d:b6:01:70:89:a3:1c:
                    ed:eb:34:89:32:d9:54:96:f5:0e:cf:a8:4c:6c:92:
                    9c:df:65:cf:8d:e8:0c:a0:c4:36:61:d1:04:56:89:
                    84:a7:72:e1:be:a8:5e:49:d8:c9:61:3c:3d:29:ee:
                    9c:88:7d:8b:31:63:c5:dc:12:0a:65:1a:7b:21:19:
                    ce:fd:dc:ad:e5:f2:91:f4:8b:e9:07:db:d7:74:1c:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1D:B8:10:30:C8:96:B9:28:57:E4:5C:66:AC:9D:E5:D2:4A:5C:8A
            X509v3 Authority Key Identifier:
                keyid:94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:5c:9e:58:85:69:19:40:22:5a:9a:20:9c:8c:13:f4:3e:
         59:d8:96:ef:e8:4e:66:a7:b3:a5:de:69:45:a4:75:fa:b4:5c:
         1a:e0:6b:82:3f:0d:79:81:83:a2:65:30:dd:49:8e:b3:75:1e:
         be:13:ba:a2:d4:2a:a4:2b:75:b9:b4:43:2e:6f:13:ba:5e:64:
         50:8f:c7:93:12:93:c5:12:d0:9e:a8:e1:d2:fd:ea:2c:a0:31:
         d7:d8:9a:5c:17:87:51:5f:30:9d:35:29:c8:fd:5f:5c:5c:ac:
         0d:24:9f:7a:d2:f3:17:3f:a0:bb:ab:89:07:7c:ff:94:fe:c7:
         e4:22:c2:60:27:33:84:d6:f1:6b:79:17:9b:04:0b:c5:b1:41:
         da:d6:9a:1a:5e:e1:9c:4d:b0:ac:b3:18:51:87:b0:e8:65:88:
         e1:f2:79:19:f3:eb:1c:23:3a:00:0f:96:ca:9d:61:d9:bc:00:
         76:4d:df:4a:fd:64:7a:7d:25:0f:d4:3d:dd:d2:6f:11:16:5e:
         0f:74:2d:98:f8:19:eb:ac:d6:5a:39:2d:a7:a7:63:aa:36:89:
         da:7c:c2:3b:fe:76:38:b1:d4:c1:9d:94:81:32:43:ae:d5:03:
         3d:16:b3:58:07:97:55:fa:f5:45:6f:13:98:c9:56:28:97:ef:
         cc:5c:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----