Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
File:                     323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (raw, json)
Hash identifier:          hnpQxsO12T+CAAiW0E7U7lQqsxVI9GvIGNxWIPpvCVw=
Subject key identifier:   90:71:DE:3E:04:12:24:72:4E:64:C6:AC:5F:82:89:47:2E:6D:79:93
Certificate issuer:       /CN=CE6FE20D5D5311E739CEA618F354893B551B86BE
Certificate serial:       5264C1D98716CF60C39E76F40BAB32D780129637
Authority key identifier: CE:6F:E2:0D:5D:53:11:E7:39:CE:A6:18:F3:54:89:3B:55:1B:86:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6FE20D5D5311E739CEA618F354893B551B86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
Signing time:             Thu 04 Apr 2024 08:00:19 +0000
ROA not before:           Thu 04 Apr 2024 07:55:19 +0000
ROA not after:            Thu 03 Apr 2025 08:00:19 +0000
asID:                     266549
IP address blocks:        2804:3db8::/32 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:64:c1:d9:87:16:cf:60:c3:9e:76:f4:0b:ab:32:d7:80:12:96:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6FE20D5D5311E739CEA618F354893B551B86BE
        Validity
            Not Before: Apr  4 07:55:19 2024 GMT
            Not After : Apr  3 08:00:19 2025 GMT
        Subject: CN=9071DE3E041224724E64C6AC5F8289472E6D7993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:2c:cb:66:70:41:c1:71:0e:43:51:85:39:
                    19:55:28:7b:d5:3e:5a:37:9d:39:d8:f1:9b:30:8b:
                    ea:4d:c8:d5:d3:4b:c8:6d:13:e4:d6:3e:d1:7d:95:
                    2a:de:ca:64:b2:82:63:2c:d9:d2:1a:60:7f:95:e5:
                    f2:b9:d6:96:73:79:4b:42:85:0f:98:ca:8a:19:7c:
                    7a:58:7a:29:ef:98:6d:5c:93:8b:ec:0e:9f:97:65:
                    a7:82:b6:ed:e0:56:f4:87:f3:66:8f:fd:37:28:c6:
                    84:2b:cd:81:8d:0f:d9:21:60:61:7e:62:ea:38:0c:
                    8f:e0:e3:9f:60:ac:d5:73:00:2c:a5:13:8f:9d:5c:
                    79:d4:3d:82:5f:df:2b:95:e7:ea:cd:af:70:a3:3b:
                    2c:fc:3d:d6:70:6e:d3:ff:6d:22:e5:7c:66:e0:76:
                    56:76:8f:81:c6:57:7c:2f:de:9d:92:d3:c0:95:95:
                    cf:75:c4:95:67:33:8b:fb:d8:d2:6c:4d:ce:8c:51:
                    87:02:63:35:7e:96:b4:e6:4c:7b:c1:bf:70:8a:1b:
                    84:93:e8:71:6d:0e:a5:7b:9b:6a:3f:59:e1:b1:39:
                    80:be:5b:0b:de:75:4e:28:36:92:c0:e5:f9:4e:b5:
                    bb:aa:5b:8b:72:77:b9:a2:be:73:f8:80:5b:d1:e0:
                    eb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:71:DE:3E:04:12:24:72:4E:64:C6:AC:5F:82:89:47:2E:6D:79:93
            X509v3 Authority Key Identifier:
                keyid:CE:6F:E2:0D:5D:53:11:E7:39:CE:A6:18:F3:54:89:3B:55:1B:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/CE6FE20D5D5311E739CEA618F354893B551B86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE6FE20D5D5311E739CEA618F354893B551B86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/2/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db8::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:91:74:9d:aa:7c:82:88:d1:9b:3b:e0:69:0b:e4:2d:f8:6f:
         8c:3e:56:26:09:8d:f6:7e:0d:7b:27:22:2d:30:ea:88:29:90:
         4e:6d:79:7a:c2:48:00:18:23:8a:9a:7e:ad:45:16:65:6c:a2:
         54:6a:2f:a5:02:2b:e4:f2:22:75:98:1c:03:bc:1d:ef:16:22:
         82:67:22:16:9f:c0:2f:1c:a7:c1:ab:3c:e5:b0:17:72:38:fb:
         1c:38:3c:13:45:d7:eb:ec:ac:8a:fd:e6:67:ae:f9:60:9e:3d:
         30:bf:11:f0:44:65:a2:17:a3:cb:07:51:39:eb:98:69:46:60:
         ff:fe:02:9a:28:7c:0a:17:0c:b2:d6:2d:4a:8e:22:6b:95:06:
         13:74:8f:35:d4:39:41:0d:07:18:a2:51:28:6a:91:8c:47:85:
         0b:e9:3d:23:83:ef:a8:8e:3c:f0:18:13:2e:7a:d3:f4:fa:57:
         c0:59:58:ec:d4:2b:37:ca:ef:f1:17:a2:32:57:d2:ba:d6:5e:
         55:c8:dd:57:53:3c:45:57:53:98:67:63:93:a8:00:88:90:27:
         62:8d:35:45:f8:0a:f5:1e:cf:f4:d7:54:8a:25:08:bf:a8:5d:
         32:06:0b:2d:0f:e1:26:f6:a8:68:02:37:c2:e1:de:8c:52:ae:
         ed:de:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----