Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
File:                     323830343a3535343a3a2f33322d3438203d3e203533313433.roa (raw, json)
Hash identifier:          Xh1wUSQbQUOHab2oOlfc8oS8nyO1GclvFJZZDYCfXn4=
Subject key identifier:   59:1B:91:40:F5:FF:3E:95:1A:6F:0A:5E:A0:DD:AB:5B:A1:98:70:DA
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       464D7194770437E40A524B2788A75D466490B89F
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a3535343a3a2f33322d3438203d3e203533313433.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     53143
IP address blocks:        2804:554::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4d:71:94:77:04:37:e4:0a:52:4b:27:88:a7:5d:46:64:90:b8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=591B9140F5FF3E951A6F0A5EA0DDAB5BA19870DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:73:bc:35:e2:26:50:b6:41:54:2c:c1:04:
                    84:02:c7:50:c0:2b:3a:88:22:c2:b8:91:85:8b:89:
                    4e:0a:cf:ec:b3:4b:7f:ae:5c:33:73:c7:5e:0a:db:
                    07:f8:c7:53:9b:d4:77:6d:85:3e:57:55:32:72:49:
                    48:65:ed:cc:bb:c3:b2:cd:12:f9:f1:77:85:88:d3:
                    72:61:62:6e:bb:b8:4b:18:8b:0b:1d:54:e7:2a:d0:
                    e8:e5:76:d3:77:50:20:f7:75:21:c3:33:5d:93:51:
                    bf:b5:76:36:46:ed:d3:fc:cb:3a:50:c8:a1:e8:f9:
                    e0:0e:c9:4a:c5:63:3f:76:a8:2d:f3:e5:0e:f9:60:
                    9e:4b:a1:59:f3:04:4b:7e:94:e5:7c:50:c2:23:b0:
                    0e:03:8d:de:f6:52:3c:90:fe:e8:2f:1b:41:c5:27:
                    25:8c:0f:e8:f4:90:e4:8e:5b:c1:fb:7d:f1:27:91:
                    89:cd:20:4a:33:79:b1:d1:99:60:7d:a8:3b:79:9a:
                    14:ae:9e:29:7a:47:6f:82:bd:0d:71:ea:cd:f5:6c:
                    19:3f:6d:85:f9:70:ed:f1:13:32:d2:8a:87:9c:72:
                    8b:9f:7c:9f:b7:00:84:86:64:0c:23:30:3f:a1:0a:
                    29:68:89:ae:dd:78:53:ae:c3:c7:cf:10:cf:03:cc:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1B:91:40:F5:FF:3E:95:1A:6F:0A:5E:A0:DD:AB:5B:A1:98:70:DA
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a3535343a3a2f33322d3438203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:5e:3f:7c:88:3c:5a:d5:43:87:fa:b3:f8:58:b7:c8:32:
         a8:49:32:4c:86:73:56:b7:35:47:d6:99:7d:c1:31:65:b2:99:
         33:33:8f:09:c8:04:15:d3:9e:c8:e4:b9:45:08:83:42:3e:42:
         72:f8:99:cd:d5:52:d2:be:f8:c7:e3:f1:6a:87:87:b5:57:9a:
         c8:86:41:9a:7a:0f:81:80:6b:0c:d2:33:8e:30:45:ee:b0:1f:
         9a:65:91:19:59:ef:54:ec:73:a2:4e:33:30:49:3e:3f:f0:39:
         d2:5b:9a:14:bb:96:96:85:24:27:a9:2a:9e:49:33:11:03:48:
         97:f4:ea:0a:2c:81:e2:ee:fd:37:25:2d:d2:8a:7f:5a:5e:e9:
         68:81:94:a7:22:26:d7:d9:ef:da:6e:c5:90:01:31:df:6e:4b:
         49:f4:a4:c0:07:b0:5e:f3:3e:95:0b:5d:94:34:75:3d:60:df:
         eb:0d:16:58:11:d6:d5:59:3b:7e:e5:f2:b5:45:e7:c7:1d:b3:
         13:98:ce:37:cf:d7:ff:f2:60:75:46:3d:78:44:54:03:7a:95:
         a9:2a:7c:1c:cc:8d:fe:50:7a:15:26:89:e8:b8:bb:cc:a5:5a:
         78:37:ab:e8:50:2a:11:fa:cc:6c:8f:4a:69:41:b6:f6:3c:5b:
         77:6a:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----