Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/323830343a333934343a3a2f33322d3332203d3e20323636303232.roa
File:                     323830343a333934343a3a2f33322d3332203d3e20323636303232.roa (raw, json)
Hash identifier:          Jtuq8p/V/Y5YutrbwxTSoFtaBZcBI++HegubXJupnaQ=
Subject key identifier:   41:00:CB:22:B7:BC:B2:95:32:3F:3C:02:DF:85:6D:88:CA:57:92:9E
Certificate issuer:       /CN=52F3DD15F1E61F19A918213318E706B1EA13C48B
Certificate serial:       3373ECD13C2CC0AC0B831DEFA6943A35439F7CD4
Authority key identifier: 52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/323830343a333934343a3a2f33322d3332203d3e20323636303232.roa
Signing time:             Thu 04 Apr 2024 22:54:05 +0000
ROA not before:           Thu 04 Apr 2024 22:49:05 +0000
ROA not after:            Thu 03 Apr 2025 22:54:05 +0000
asID:                     266022
IP address blocks:        2804:3944::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:73:ec:d1:3c:2c:c0:ac:0b:83:1d:ef:a6:94:3a:35:43:9f:7c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52F3DD15F1E61F19A918213318E706B1EA13C48B
        Validity
            Not Before: Apr  4 22:49:05 2024 GMT
            Not After : Apr  3 22:54:05 2025 GMT
        Subject: CN=4100CB22B7BCB295323F3C02DF856D88CA57929E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:8d:36:52:99:81:04:29:ae:e1:82:01:8d:
                    bf:f5:1c:3b:6a:79:07:74:c6:cb:95:ce:fa:bb:14:
                    f4:ee:3f:3d:00:ee:db:a7:a6:46:07:1f:19:17:c7:
                    c6:0e:11:6b:ed:ae:0d:df:ba:d9:a4:50:5c:69:e1:
                    11:6e:20:f8:ae:0a:14:fd:17:bc:b6:65:ae:b9:02:
                    04:44:52:a7:7c:e8:18:f9:9f:fb:cd:6e:f9:56:38:
                    2e:09:7a:8e:ed:61:89:d5:a2:d9:70:c8:52:ae:fd:
                    59:57:6d:0f:3c:10:e6:8a:5f:4b:10:fe:75:10:12:
                    d1:cf:55:a2:fe:f8:39:0d:d6:57:0d:eb:de:41:76:
                    6a:b0:a3:14:a8:49:db:76:02:60:84:b1:20:c3:c7:
                    39:e5:89:0b:1e:32:0f:9c:9e:c6:42:d3:4b:98:c6:
                    82:a5:94:45:45:c6:58:c3:d3:5d:44:3c:c3:d5:b8:
                    b1:a5:22:76:bf:31:bf:58:18:7e:99:cf:e9:83:0e:
                    63:90:3c:48:ff:72:9d:83:d3:fe:16:a6:00:8e:73:
                    68:80:df:1f:d0:4e:46:05:be:98:f4:1e:e5:6e:4c:
                    6a:e7:c0:97:8e:91:0d:fc:b5:4c:2c:13:2b:15:c0:
                    69:33:78:79:3d:9d:ce:0c:af:33:5f:d5:1e:08:0e:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:00:CB:22:B7:BC:B2:95:32:3F:3C:02:DF:85:6D:88:CA:57:92:9E
            X509v3 Authority Key Identifier:
                keyid:52:F3:DD:15:F1:E6:1F:19:A9:18:21:33:18:E7:06:B1:EA:13:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52F3DD15F1E61F19A918213318E706B1EA13C48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/1/323830343a333934343a3a2f33322d3332203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:41:a9:bd:91:70:64:69:71:70:ce:35:8b:f1:44:ca:d0:90:
         12:4d:71:f6:89:cb:49:76:f5:e3:81:4e:1b:97:ea:b5:82:29:
         64:a5:78:25:6d:a3:10:54:88:05:b6:b9:ac:e7:c4:24:fb:c0:
         22:1f:e2:06:af:36:8f:38:83:cf:3f:7d:df:03:4c:45:93:9a:
         82:8c:aa:67:86:75:c4:9f:dc:66:b4:de:96:21:96:4f:b9:56:
         cf:49:14:66:c7:e8:dc:c7:e6:b7:6a:34:9e:97:3d:0a:d9:a9:
         d6:80:ca:10:b1:8e:83:85:60:ce:79:21:5b:15:a0:47:26:3c:
         2e:37:91:82:39:64:0c:34:a7:c8:44:b7:a1:fc:00:f9:36:da:
         e8:5e:74:03:ec:56:46:5e:30:28:25:f3:8d:8c:3e:e3:eb:47:
         1e:bf:37:ab:de:0f:58:b2:69:80:62:41:a6:6f:65:54:65:26:
         bc:44:0e:53:93:60:be:34:14:d0:e4:1f:df:08:a0:0a:7b:9d:
         64:1e:a5:33:2b:09:92:f2:c1:b2:17:93:ba:ad:fe:c7:80:ae:
         54:cd:d0:75:a1:a0:b3:af:14:05:ad:18:22:4d:08:f2:97:ba:
         46:a3:8b:43:08:ad:65:41:eb:e6:8b:ef:f7:9b:bb:82:b8:cd:
         8e:fd:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----