Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa
File:                     323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa (raw, json)
Hash identifier:          s3JHoJgxS8nqn+ll52kXY6hj0C4brNCanzFINhwLBT0=
Subject key identifier:   B7:70:5E:9A:7B:82:C3:7E:7D:96:10:3A:56:F3:96:98:E9:0A:85:B6
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       156DEB5F6B625E091BB50AE38F9308D9988BC5FD
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:48 +0000
ROA not before:           Thu 04 Apr 2024 07:39:48 +0000
ROA not after:            Thu 03 Apr 2025 07:44:48 +0000
asID:                     263421
IP address blocks:        2804:1600:a000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6d:eb:5f:6b:62:5e:09:1b:b5:0a:e3:8f:93:08:d9:98:8b:c5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:48 2024 GMT
            Not After : Apr  3 07:44:48 2025 GMT
        Subject: CN=B7705E9A7B82C37E7D96103A56F39698E90A85B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:91:e3:7d:8a:7d:4f:53:25:68:52:3c:74:
                    e6:c0:0d:38:db:8f:63:9f:f2:03:09:8a:73:ff:4a:
                    6c:4c:84:03:c9:7d:2c:16:a3:a7:cb:26:a9:1e:f3:
                    cb:a3:ad:ca:d8:42:c0:6d:5a:b1:ce:91:a8:df:59:
                    8c:d1:30:f4:53:7f:bc:16:39:ad:d5:54:c6:d9:e3:
                    36:b4:f9:28:26:29:92:b5:89:01:e2:3c:cc:f0:fb:
                    d2:63:92:f5:58:40:a7:a6:6e:2a:55:e9:82:cf:48:
                    76:3b:c9:f9:c6:e6:2f:ba:02:d1:b8:bf:44:46:cb:
                    a6:f4:e5:83:03:db:97:d9:9a:99:4c:c8:fb:86:7e:
                    ae:da:a2:37:7e:f4:e2:ad:16:21:7e:11:18:db:e8:
                    cc:a9:94:87:97:d3:0d:2b:c7:a8:71:2f:41:cd:8c:
                    99:2f:b4:39:d0:d0:63:04:a4:9f:93:16:0b:83:c7:
                    f9:eb:21:bb:ae:6a:12:d1:27:53:46:41:32:1a:d4:
                    bf:1b:18:53:81:a0:f0:c5:45:55:af:34:7f:c4:63:
                    d2:7a:32:ab:fb:88:24:3c:b1:fd:de:62:9f:b6:c3:
                    89:4f:31:da:54:ef:d2:9f:b2:86:d5:53:2f:70:bf:
                    b0:64:3e:0e:c0:d2:5a:91:e7:04:97:c6:3f:f8:0b:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:70:5E:9A:7B:82:C3:7E:7D:96:10:3A:56:F3:96:98:E9:0A:85:B6
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a613030303a3a2f33362d3336203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:e8:4d:bd:e0:6d:57:47:38:e2:a6:fb:78:47:ae:98:4f:
         33:79:9f:e9:32:5e:b5:5e:13:7b:1a:94:a4:eb:54:ab:09:17:
         b6:e2:6d:88:ca:df:4a:8c:c9:96:98:00:90:d2:dc:14:96:32:
         b2:0e:fc:92:9c:05:d1:4d:cb:c1:c8:88:69:e4:7d:43:e5:59:
         99:80:14:ad:09:27:43:98:5a:f5:6b:2c:6b:7c:9d:ee:19:29:
         ee:d1:43:72:2d:80:67:fb:93:29:c1:9e:a0:39:62:7b:04:1e:
         ab:ec:05:a4:1d:5b:58:30:ce:b2:88:2f:1d:3a:02:c9:2d:ea:
         e7:24:3f:04:71:64:09:98:24:21:fe:d7:d5:e6:c5:f0:46:98:
         03:91:7f:79:a4:02:40:e4:1f:ea:1a:0b:99:9c:5c:c3:4a:f3:
         09:f7:3d:fb:16:2f:b9:b6:77:c1:a9:f5:e8:4c:8a:5b:80:21:
         2d:e9:74:fd:68:48:99:c5:d3:99:dd:13:7e:78:1b:3b:ce:d8:
         55:a0:60:e5:30:80:6c:c6:36:d9:0d:c0:19:dd:ba:08:8e:a3:
         02:01:2b:81:6e:c4:4b:1a:86:52:53:b5:09:54:2b:11:11:7e:
         ac:37:13:15:32:2d:bf:ba:41:0f:12:ae:3a:82:61:31:47:17:
         16:16:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----