Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/1/323830343a333763303a3a2f33322d3336203d3e20323636343334.roa
File:                     323830343a333763303a3a2f33322d3336203d3e20323636343334.roa (raw, json)
Hash identifier:          fi6mWwsDm6eQlh8pBcmDuLwk06AJHbY9fc1kGtjiHBA=
Subject key identifier:   06:CA:8E:CE:2A:74:5C:C8:7A:E0:08:78:86:6C:88:AA:F3:64:30:8C
Certificate issuer:       /CN=4D22BAF41D5F4949370E11ACB5C4B556D1080773
Certificate serial:       72752A15E2B0BC67253BEE047C26826DE54505D0
Authority key identifier: 4D:22:BA:F4:1D:5F:49:49:37:0E:11:AC:B5:C4:B5:56:D1:08:07:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D22BAF41D5F4949370E11ACB5C4B556D1080773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/1/323830343a333763303a3a2f33322d3336203d3e20323636343334.roa
Signing time:             Thu 04 Apr 2024 21:29:39 +0000
ROA not before:           Thu 04 Apr 2024 21:24:39 +0000
ROA not after:            Thu 03 Apr 2025 21:29:39 +0000
asID:                     266434
IP address blocks:        2804:37c0::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:2a:15:e2:b0:bc:67:25:3b:ee:04:7c:26:82:6d:e5:45:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D22BAF41D5F4949370E11ACB5C4B556D1080773
        Validity
            Not Before: Apr  4 21:24:39 2024 GMT
            Not After : Apr  3 21:29:39 2025 GMT
        Subject: CN=06CA8ECE2A745CC87AE00878866C88AAF364308C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:b4:2a:e1:20:8b:26:b3:e3:2a:91:28:0e:
                    41:2a:95:67:a7:d6:63:63:51:bf:75:f4:e0:ea:cc:
                    c8:03:93:3e:6f:0d:60:1e:56:0e:fd:b7:02:b6:7a:
                    4a:b9:2e:b6:e7:fc:74:a6:c1:d5:04:84:2a:8b:c3:
                    72:2b:2d:b1:cf:53:6a:c8:0a:cc:06:30:7e:29:b2:
                    65:d9:7e:43:0c:f5:18:af:43:e3:bd:96:cf:f1:e4:
                    2b:a0:24:4c:e6:2e:f8:7a:ba:72:b9:d2:2c:9a:61:
                    a7:fe:12:fe:47:f7:90:d9:57:ea:67:aa:4f:e3:04:
                    76:82:bc:34:46:0f:86:54:08:8c:e1:3f:e1:dc:61:
                    f2:e3:a6:00:c0:f8:97:f4:75:cb:80:ed:e6:04:72:
                    3f:8a:72:32:7d:74:a4:be:5f:f9:e6:ee:f9:4a:49:
                    83:29:67:2c:d0:90:bb:46:d9:2f:a0:9e:37:e1:59:
                    2e:e2:2f:73:23:ff:af:4a:28:a2:00:87:f4:66:8f:
                    a2:50:1c:e0:35:95:e0:7f:5c:b6:8b:5d:ca:b4:91:
                    ae:78:4b:1c:29:65:fc:31:04:5f:6b:d5:0e:34:e7:
                    ad:a6:4a:1e:8f:51:ab:5c:09:e2:78:ce:a1:b9:3a:
                    3f:f3:a5:f3:63:05:ad:3c:2a:55:f4:db:aa:13:14:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:8E:CE:2A:74:5C:C8:7A:E0:08:78:86:6C:88:AA:F3:64:30:8C
            X509v3 Authority Key Identifier:
                keyid:4D:22:BA:F4:1D:5F:49:49:37:0E:11:AC:B5:C4:B5:56:D1:08:07:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/1/4D22BAF41D5F4949370E11ACB5C4B556D1080773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D22BAF41D5F4949370E11ACB5C4B556D1080773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDDvo5BkhaCHkeUU72wa1nkFMAKw6ci2oEGMQEGUeDxf/1/323830343a333763303a3a2f33322d3336203d3e20323636343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:73:f3:36:f3:77:33:63:7c:c6:dd:db:7b:a0:9f:4a:ee:
         b3:6c:d7:e6:95:e5:45:6f:89:63:e3:67:64:59:8e:bc:f1:bd:
         05:2b:bd:77:9a:86:67:b8:62:c7:fa:9c:b7:aa:40:ad:de:08:
         06:0a:2e:56:e1:d5:db:e0:7a:7d:fc:9f:77:4c:75:7d:1b:c5:
         85:35:b2:19:0d:0c:5e:3f:78:e9:1b:2b:2b:01:1b:74:63:1c:
         42:3e:c2:12:63:cb:eb:eb:34:76:84:2f:2f:fc:80:dd:94:37:
         e6:3c:23:c9:6f:b0:8a:d3:35:fa:a9:2f:93:ae:7f:b3:7d:7c:
         7d:a6:bb:83:9c:f6:4c:ab:0a:95:e9:44:79:73:3a:91:33:fe:
         a3:a5:31:ea:87:b0:76:49:8f:d8:cf:2d:25:e8:43:c5:df:36:
         f7:a9:21:cd:3a:36:1a:08:ce:a7:60:48:a9:91:16:4d:0f:29:
         ce:33:2c:ef:68:0a:b4:a4:a1:2d:f5:20:7e:9d:ee:5c:f3:68:
         b7:4f:e4:d9:27:c0:b2:40:b8:8e:2c:36:19:a4:16:e9:19:a9:
         94:ca:49:e2:e5:82:51:04:d4:2a:7b:67:f8:00:fb:b5:a2:bc:
         10:7d:7c:ce:35:8c:ac:d8:2a:c2:49:19:1f:b6:30:c8:26:19:
         a9:de:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----