Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a633030303a3a2f33392d3339203d3e20323633343231.roa
File:                     323830343a313630303a633030303a3a2f33392d3339203d3e20323633343231.roa (raw, json)
Hash identifier:          mAOIHBJ2Gbv2ol1XoRqgE4y3qROAIFCRxGxWljA8wc8=
Subject key identifier:   D4:14:C2:5F:DE:97:E5:1D:B2:8B:9C:37:6D:88:A8:87:11:E2:28:D7
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       7E26618BD6F6FFC27C9CA054FDEB31495DC3F138
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a633030303a3a2f33392d3339203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        2804:1600:c000::/39 maxlen: 39

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:26:61:8b:d6:f6:ff:c2:7c:9c:a0:54:fd:eb:31:49:5d:c3:f1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=D414C25FDE97E51DB28B9C376D88A88711E228D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:e7:9e:db:11:0e:a1:03:07:c2:40:0e:fd:
                    e1:ed:10:50:2e:5b:9b:85:f4:b0:e2:ce:4b:60:db:
                    4d:71:c2:bd:e0:7c:7a:a4:b9:fb:3f:aa:49:4b:28:
                    73:9b:dc:42:be:1d:42:da:7c:b7:94:f4:a0:44:73:
                    0f:b8:be:ac:34:14:17:ea:fe:03:3e:49:91:9a:55:
                    b5:fc:58:1a:2e:34:b3:18:60:2a:4d:ed:31:5a:d4:
                    a7:bc:c3:61:3e:07:47:f0:7d:a7:e1:e3:0f:75:2b:
                    82:5f:50:d2:d5:eb:cd:11:a2:a4:8c:90:82:63:dd:
                    ea:ab:86:94:03:68:6f:90:d4:e9:32:78:2c:ec:ed:
                    78:72:33:ac:f5:1b:3a:1b:e5:b8:2b:11:cf:fa:a4:
                    17:b0:f3:a9:05:4f:0b:91:2e:0b:77:76:c3:0f:7a:
                    77:1c:53:fa:13:84:b6:40:07:ae:a7:74:49:65:98:
                    d8:10:d0:86:6d:35:cd:78:40:1e:47:e2:31:e9:4a:
                    80:ec:75:67:ab:01:0c:4d:17:cd:46:38:2c:e9:2d:
                    6e:1d:75:6d:54:da:f8:ed:fc:76:c1:ec:ef:ff:59:
                    c4:02:5a:9f:79:7d:b7:e4:ca:62:3c:d0:a2:9d:12:
                    6b:1a:20:9a:51:1b:6e:77:f8:e0:51:78:62:09:24:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:14:C2:5F:DE:97:E5:1D:B2:8B:9C:37:6D:88:A8:87:11:E2:28:D7
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a633030303a3a2f33392d3339203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:c000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b4:a5:90:1a:71:a2:c0:ae:7b:9f:90:ee:f9:dd:c5:63:62:0f:
         f9:17:69:a8:4c:09:56:6f:d6:45:20:e6:b1:77:95:8d:90:79:
         b2:c7:ee:a4:10:94:89:b0:cd:8a:4c:47:f0:25:af:55:cf:b1:
         6d:3a:87:74:0b:c6:45:9e:09:1f:ab:b5:04:41:ff:76:7d:f5:
         63:4c:02:8b:96:18:22:a5:cc:0a:6f:58:e0:93:96:bf:ea:f9:
         3a:18:30:cd:5a:d8:7e:6c:0b:dc:41:eb:b7:12:09:3f:59:41:
         06:2a:9f:71:78:9d:2e:53:9e:6a:71:d4:94:2f:07:62:fe:c9:
         07:86:ca:cb:f1:0d:38:31:95:b9:1c:fc:27:ee:41:c3:57:70:
         a0:f1:75:38:3f:6a:c8:a2:1d:65:20:71:29:9b:1a:a0:6b:83:
         b9:9e:d8:b1:1a:96:9b:a3:42:b5:40:b6:97:40:4a:03:46:e3:
         6e:5f:62:c5:92:91:7c:cb:41:b3:98:7d:bf:27:4e:42:cf:c5:
         5f:54:f8:c0:69:2d:da:06:15:de:4a:76:d7:9f:99:96:85:02:
         ae:eb:55:a2:c1:9c:88:f3:d4:64:88:65:a2:b4:63:df:33:a9:
         df:70:e6:e2:cd:cf:b5:6f:8e:15:ac:94:1e:57:d6:d2:03:cb:
         df:b7:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----