Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a3a2f33322d3332203d3e20323730393436.roa
File:                     323830343a373365633a3a2f33322d3332203d3e20323730393436.roa (raw, json)
Hash identifier:          oYouG0k4XhyItH5uQ2pQ57FQCJ9QEFLPCAkZL9T22AY=
Subject key identifier:   03:FA:C7:1B:27:16:6C:50:66:74:E4:42:0E:31:8D:DA:C4:D2:A6:A7
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       4624F0A3B3DFF37481B9C07ABC2B3CB437B9CEC2
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a3a2f33322d3332203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        2804:73ec::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:f0:a3:b3:df:f3:74:81:b9:c0:7a:bc:2b:3c:b4:37:b9:ce:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=03FAC71B27166C506674E4420E318DDAC4D2A6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:bb:08:dc:2f:a9:08:f8:3d:07:3f:2a:c2:
                    1b:5a:4d:21:94:76:b3:ee:a8:c1:bb:ae:7c:a8:68:
                    3a:03:38:52:c9:a9:f9:ca:fa:1c:5d:bb:94:06:2c:
                    3d:c4:8a:18:33:52:d4:ce:f6:95:47:0b:ae:f3:d0:
                    7c:dd:80:e7:2b:d9:ae:28:f6:15:26:7c:4e:a2:ea:
                    7d:c7:e0:7a:7f:49:07:f0:5c:fe:a2:6a:04:d3:55:
                    a7:d2:25:3d:4c:1f:51:db:0e:8a:e3:23:3e:b7:a2:
                    ef:a8:25:bb:e3:60:51:55:79:23:c3:1f:44:8d:c4:
                    7f:b4:5c:64:1d:1c:6b:f0:9a:d5:9c:38:66:dc:c5:
                    df:44:30:3f:d3:d0:7f:6b:7b:92:7e:59:3b:78:ff:
                    95:07:99:45:ea:37:7a:f4:28:0e:6a:80:0d:47:84:
                    66:7b:17:b7:a2:f2:3f:cd:25:46:a5:1b:b4:a6:20:
                    1c:fc:ed:36:1e:7d:b7:52:97:3c:fd:b6:a3:17:a0:
                    1f:21:25:2b:71:86:57:23:9d:33:b2:68:70:5f:4b:
                    d1:10:22:74:f8:3d:63:c7:d1:a1:67:56:3e:3f:88:
                    87:52:0a:1e:ff:b0:d2:46:8e:41:c2:1a:00:cf:46:
                    e7:46:75:0a:54:3f:d8:cc:6c:e4:f6:69:aa:41:df:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FA:C7:1B:27:16:6C:50:66:74:E4:42:0E:31:8D:DA:C4:D2:A6:A7
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/323830343a373365633a3a2f33322d3332203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:84:4f:31:24:e6:5a:2f:a2:7b:2d:43:95:5c:15:6b:eb:
         e4:83:cd:64:20:a4:71:a9:ab:6a:98:ca:ac:e9:c3:0e:3d:9d:
         81:df:39:ca:9a:dd:4d:35:2f:a0:eb:32:17:b7:f6:bc:64:d7:
         77:76:35:d1:a9:dc:e5:b1:6c:94:5c:f0:f6:97:f2:90:0f:4d:
         75:93:04:a3:9f:2b:0b:5a:10:8a:cb:05:f7:64:53:12:03:4b:
         fb:d4:be:63:f9:67:12:57:a3:27:ee:5c:2b:f2:93:23:f3:22:
         35:49:0a:d3:f0:44:3b:4f:eb:b9:4d:50:21:67:48:f0:a0:7c:
         d6:55:90:78:a8:93:4b:2f:bb:8b:f1:53:95:d8:ac:9e:4c:cf:
         63:dd:78:4e:93:86:40:16:fd:1f:0e:0c:03:73:6b:97:86:ef:
         fb:82:18:8c:6f:a6:10:20:30:1d:f7:e1:63:dd:88:32:7b:42:
         cb:50:a9:01:5f:49:33:65:79:73:cf:38:16:c3:a8:76:2f:40:
         a6:39:7b:a4:30:3a:94:59:0d:ad:4f:cb:60:b8:05:f2:14:22:
         81:6c:82:17:ac:2e:3a:42:8c:be:a0:32:87:d7:bc:3e:9e:a4:
         46:82:ae:f6:6b:04:e0:fd:48:35:df:9b:5f:06:7f:53:61:9e:
         2e:20:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----