Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3438203d3e20323730383134.roa
File:                     323830343a6637303a3a2f33322d3438203d3e20323730383134.roa (raw, json)
Hash identifier:          hD3Zi6UcrVv8mBGcyIM0Zy3S2/GWqzFPwpxcQxXsXsA=
Subject key identifier:   DB:8F:88:87:0B:72:92:BA:25:59:E9:42:72:8B:15:C9:C3:CB:93:14
Certificate issuer:       /CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
Certificate serial:       5D84F4CECBE70B50FD79F121B0BF83A757B55F02
Authority key identifier: BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3438203d3e20323730383134.roa
Signing time:             Tue 30 Apr 2024 20:09:31 +0000
ROA not before:           Tue 30 Apr 2024 20:04:31 +0000
ROA not after:            Tue 29 Apr 2025 20:09:31 +0000
asID:                     270814
IP address blocks:        2804:f70::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:84:f4:ce:cb:e7:0b:50:fd:79:f1:21:b0:bf:83:a7:57:b5:5f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
        Validity
            Not Before: Apr 30 20:04:31 2024 GMT
            Not After : Apr 29 20:09:31 2025 GMT
        Subject: CN=DB8F88870B7292BA2559E942728B15C9C3CB9314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:e2:1f:33:d3:d3:33:bf:9b:fb:7f:ef:e1:
                    23:33:21:1b:18:05:d9:2d:95:5a:5a:11:aa:f8:32:
                    c1:48:64:f5:7a:fc:09:37:06:25:0c:81:0d:54:7c:
                    c2:64:4b:78:c9:40:c4:d3:d7:d4:a6:2e:a7:7f:bb:
                    ea:88:76:8d:c4:8e:76:30:46:f3:0a:28:a7:93:be:
                    bf:b3:23:be:91:67:6a:a2:0f:5f:ee:e1:5e:64:56:
                    92:ef:b0:94:cd:fd:22:c2:f2:b4:aa:68:5b:6e:5d:
                    70:d9:50:a7:ae:98:4b:99:8a:c0:27:2e:90:99:15:
                    84:95:22:44:c6:a9:bb:b0:04:00:af:9e:59:ef:c2:
                    f4:c5:ba:42:ca:c9:c3:81:16:9e:12:ca:71:51:d0:
                    a4:d4:23:19:12:12:00:2d:03:7d:d4:f1:4d:59:91:
                    10:c2:2a:8c:ad:50:7e:00:e0:4b:68:55:dd:05:58:
                    67:a7:a3:74:13:73:ba:27:4d:68:47:24:fb:c4:5c:
                    56:da:e5:43:bb:e1:03:52:a5:31:2f:84:67:4a:92:
                    41:5a:e0:6c:f6:84:f6:a4:a3:bd:de:b1:56:43:57:
                    6f:12:ed:2a:b7:cb:e1:1b:bb:05:b3:fb:d3:b0:57:
                    34:93:c5:53:cf:2e:97:88:38:c4:45:2a:e7:9a:6d:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:88:87:0B:72:92:BA:25:59:E9:42:72:8B:15:C9:C3:CB:93:14
            X509v3 Authority Key Identifier:
                keyid:BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6637303a3a2f33322d3438203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f70::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:60:c5:8d:d8:5a:8d:ee:27:2d:87:83:33:9b:f0:1b:06:12:
         96:31:d0:17:56:59:07:7e:1c:ce:89:59:9c:3f:d7:08:31:1c:
         a8:9b:4d:04:2f:90:5d:68:9e:94:0c:2b:c2:db:b2:22:88:64:
         64:6c:96:6a:af:8f:dd:f9:57:c3:f0:1e:20:39:81:a9:f2:f6:
         22:ca:52:41:bc:73:19:ee:d7:88:13:25:94:68:86:56:b4:d5:
         06:da:7b:2a:9b:9e:8b:4d:55:2e:65:d1:02:6b:44:15:0c:6e:
         52:ab:b2:82:e6:75:34:fc:6e:f6:a2:44:bc:22:ec:43:89:0f:
         2e:cf:14:52:9d:3a:7f:e9:5b:b2:33:55:6e:9e:8c:67:a5:ec:
         90:be:55:ae:fa:8d:06:8b:6d:51:92:4d:4f:87:52:9c:ca:f3:
         f3:78:f6:d5:61:c0:f1:41:c1:4f:09:a8:bd:03:4f:34:24:d5:
         0e:dd:bb:a6:20:3c:2e:f7:df:31:6c:82:e4:30:90:b9:ed:fa:
         0d:78:09:10:55:83:62:23:4d:ea:4c:3d:9f:90:96:9b:f4:3c:
         3e:09:33:63:5d:fc:c2:67:81:28:09:b6:32:34:a9:6e:e9:10:
         0d:ee:72:01:95:37:36:d2:c8:40:4e:ca:ce:d3:af:2b:ba:98:
         ef:e9:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----