Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa
File:                     323830343a343162383a3a2f33322d3438203d3e20323637343532.roa (raw, json)
Hash identifier:          yUbyYdGbJCxXpzi5p5MAkcLj5GVxd/kMBx2h94P8Ndc=
Subject key identifier:   31:8E:F4:A1:B4:A8:70:B2:DF:2E:5A:23:B8:CD:2C:03:E6:C4:B8:05
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       1A2DD6E0E766BE36DA85543B0D6A4F80D9F839F3
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     267452
IP address blocks:        2804:41b8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2d:d6:e0:e7:66:be:36:da:85:54:3b:0d:6a:4f:80:d9:f8:39:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=318EF4A1B4A870B2DF2E5A23B8CD2C03E6C4B805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:21:34:7b:e0:7e:b2:92:51:44:fd:68:83:
                    55:61:53:b0:84:8e:8c:82:16:0e:39:f7:83:34:1c:
                    e8:37:cf:7a:b6:65:b7:16:af:2c:1b:ef:ee:22:7b:
                    df:6d:2f:c3:9a:d4:91:c2:04:63:08:ba:47:bc:20:
                    0c:32:dd:75:27:d4:84:cd:fd:b1:84:88:43:e0:3e:
                    88:06:99:88:aa:f3:45:56:40:91:eb:12:d5:3a:24:
                    f3:60:88:b4:b1:f8:3d:ae:3e:ac:14:d0:0d:fe:fd:
                    ed:3c:13:02:65:4b:d8:82:8a:a9:6c:bb:9e:b2:87:
                    f3:19:4e:f0:aa:ea:26:07:53:e4:bc:fa:d1:1f:cf:
                    b7:e6:42:40:72:94:2e:3c:7d:b5:5c:19:08:e5:2b:
                    8c:63:7b:ab:9c:6c:59:9d:46:c0:f8:74:d1:c9:d4:
                    bb:47:c4:4c:aa:c1:f5:e5:8f:e6:ae:30:b8:00:d9:
                    8d:ad:0d:05:e7:71:af:17:ab:bb:ca:d1:9a:f7:3e:
                    05:51:ff:6c:44:5c:ab:cc:a5:87:86:03:13:f9:b8:
                    00:8c:4e:c2:81:4e:84:2c:8e:c5:ff:02:d4:98:b7:
                    74:ab:d3:6e:4e:2e:8d:65:a4:da:a6:ab:30:fe:93:
                    5a:82:f4:a6:fc:f5:7b:7f:d6:55:bc:13:89:69:f2:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:F4:A1:B4:A8:70:B2:DF:2E:5A:23:B8:CD:2C:03:E6:C4:B8:05
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:7e:b4:ad:2a:fc:a9:01:c2:0e:71:b5:6d:87:56:13:07:
         b0:79:d8:10:80:f8:e8:bc:29:ea:7e:07:0d:bd:a5:6c:4d:ab:
         11:45:4f:49:1f:83:4f:09:37:dc:cf:79:2e:0f:8f:01:2a:75:
         e5:3e:a4:fd:31:52:46:da:c7:3c:44:a9:8f:10:3c:4a:2d:1c:
         67:3c:22:0f:9f:60:c9:db:25:39:1d:88:05:67:86:a7:bd:ae:
         ca:b9:65:a0:1f:19:89:27:de:0b:5b:0e:78:be:01:dd:2b:aa:
         68:fb:bc:c6:e8:e5:62:ed:97:5d:e9:da:c0:69:db:33:b1:d1:
         0f:3e:62:2d:ea:d7:61:95:5f:8c:67:b4:08:f1:4a:af:b6:90:
         64:d0:6f:a6:ae:ba:1f:53:bd:ed:8a:e6:17:a3:16:cd:5b:13:
         e2:99:54:9d:bd:bb:31:f2:77:32:4e:62:ad:a5:bb:14:57:9c:
         ca:4a:b4:35:43:54:ae:45:b2:0c:69:b8:af:09:5a:7e:c6:f1:
         9a:b5:aa:e9:f9:c2:bd:49:13:6a:4d:dc:18:bb:0d:d2:83:0c:
         34:71:ef:6a:56:31:92:c7:96:46:25:52:71:a7:35:19:d6:11:
         a8:50:4c:69:3f:85:da:d2:d7:9c:34:cb:c7:a6:0d:a2:b6:2c:
         34:ac:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----