Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa
File:                     323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa (raw, json)
Hash identifier:          d0mijN/vaU2Gs0qAiPvolEA0jpGWl41Omo6hkZCzVVQ=
Subject key identifier:   B4:34:62:7E:34:EB:EB:98:74:4B:85:1D:C5:E3:F1:2C:82:04:FD:E7
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       3C1388592350ADD6A86712528CFB7AE53453D854
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        2804:1600:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:13:88:59:23:50:ad:d6:a8:67:12:52:8c:fb:7a:e5:34:53:d8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=B434627E34EBEB98744B851DC5E3F12C8204FDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:0d:66:c2:75:cc:ef:8c:77:4f:74:0f:86:
                    76:37:c7:32:15:38:84:40:04:3f:39:bf:b5:0c:5d:
                    42:75:81:0f:52:db:84:df:93:33:db:2e:61:3d:32:
                    77:dc:ad:ac:c2:53:3a:0f:5e:d1:85:91:1f:6e:28:
                    1f:62:5d:1f:06:22:03:83:04:dc:c6:fb:90:74:e8:
                    e3:6c:13:fd:b7:cf:51:b6:09:3e:09:4f:db:d6:b4:
                    d3:de:89:58:27:d9:27:04:bf:23:9e:ca:ab:c7:6d:
                    27:e0:5f:5e:5c:a5:7c:96:fa:ba:3d:64:6a:f9:64:
                    e9:b1:fc:1d:cf:f8:f3:3b:38:b6:a5:61:92:15:9b:
                    d6:2f:24:27:92:3a:d3:56:1e:f4:54:d2:96:03:55:
                    35:18:8e:09:18:5b:30:7d:06:1e:3f:b1:ed:d8:f3:
                    0e:e2:8f:dc:e2:82:76:19:17:15:77:5d:c3:01:5c:
                    f5:71:8e:2b:8f:89:5d:19:81:b1:86:98:ad:e3:b5:
                    52:f0:af:26:6a:5e:e7:79:b4:07:a3:78:39:46:f7:
                    5b:3e:85:73:b1:3c:77:f4:d7:f8:62:79:ee:74:9e:
                    b5:cc:88:c1:81:eb:2a:1b:2d:14:a2:ea:bf:48:e3:
                    5c:76:0c:f7:52:5c:47:f4:c2:86:6c:96:29:c3:37:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:34:62:7E:34:EB:EB:98:74:4B:85:1D:C5:E3:F1:2C:82:04:FD:E7
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a383030303a3a2f33342d3334203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:23:ba:76:13:63:6d:a4:f7:bc:88:23:4e:b3:ea:1e:30:
         f0:f7:6c:78:9f:90:dd:58:52:a1:ab:c9:f9:dd:0c:1a:f2:a6:
         93:26:23:99:b2:70:74:56:b9:9a:11:d5:b3:82:79:56:38:4a:
         49:2b:5f:28:17:d3:c1:c8:d7:f2:18:87:28:1d:84:11:7e:4e:
         ea:fd:b6:e5:a2:8b:d5:8d:0c:39:04:c6:c8:cc:e6:f8:c1:0c:
         d9:11:73:a8:02:65:07:25:65:1e:89:63:ae:63:ff:83:fa:25:
         d7:3b:4e:c4:13:ad:54:d1:b6:18:39:6d:e6:e0:3c:f9:ba:f8:
         9e:c9:71:30:54:88:70:da:12:d5:fc:1c:08:54:f1:7c:b3:39:
         2e:b7:de:c1:82:39:2d:22:26:d1:2d:aa:e0:45:81:e1:82:05:
         51:51:63:38:35:87:6b:a2:67:df:d1:46:ec:f3:a2:48:b7:f1:
         4d:b4:5e:50:f1:09:10:77:af:be:5b:5b:2d:75:1b:a9:45:4a:
         32:fd:1a:25:be:f8:db:33:4a:77:ce:49:4a:87:68:ac:6c:af:
         45:4e:3d:87:b9:af:44:91:f1:3e:b2:22:21:7a:9e:ed:ba:02:
         f2:aa:64:0f:f5:d2:c1:08:7d:e6:fc:c5:7d:11:16:0d:7c:3a:
         f5:88:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----