Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/323830343a363939633a3a2f33322d3438203d3e20323730323830.roa
File:                     323830343a363939633a3a2f33322d3438203d3e20323730323830.roa (raw, json)
Hash identifier:          uDXmQSEBF4V4QOpmZEQ9WwJ4HVld1HwGXWZanoYX+hA=
Subject key identifier:   FD:09:FC:C7:54:39:12:8C:CD:87:F9:56:C2:15:7A:96:C3:F1:A7:EE
Certificate issuer:       /CN=EA79FBAB9C686CB61DC9B11E8881DF9992262F61
Certificate serial:       4B0682B2F7B9B8FF0FD8A772817D97A00D36926E
Authority key identifier: EA:79:FB:AB:9C:68:6C:B6:1D:C9:B1:1E:88:81:DF:99:92:26:2F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/323830343a363939633a3a2f33322d3438203d3e20323730323830.roa
Signing time:             Thu 04 Apr 2024 00:04:56 +0000
ROA not before:           Wed 03 Apr 2024 23:59:56 +0000
ROA not after:            Thu 03 Apr 2025 00:04:56 +0000
asID:                     270280
IP address blocks:        2804:699c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:06:82:b2:f7:b9:b8:ff:0f:d8:a7:72:81:7d:97:a0:0d:36:92:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA79FBAB9C686CB61DC9B11E8881DF9992262F61
        Validity
            Not Before: Apr  3 23:59:56 2024 GMT
            Not After : Apr  3 00:04:56 2025 GMT
        Subject: CN=FD09FCC75439128CCD87F956C2157A96C3F1A7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:a8:e3:a5:cd:d5:65:bb:50:89:2d:d5:3f:
                    83:fd:04:90:af:96:20:12:65:c3:28:d9:bc:bd:8f:
                    8e:b7:2e:23:96:25:ee:dd:b1:80:13:f1:aa:d5:2a:
                    71:3f:6a:4f:78:6f:a8:8b:76:c2:5a:83:2d:e4:44:
                    b3:3f:cd:f8:e5:7a:ec:3a:4a:e5:c6:06:32:d7:1d:
                    63:ff:5b:9b:4f:7f:88:33:06:4c:05:c2:df:d9:4d:
                    9e:6c:7e:0c:29:07:aa:cd:ce:9d:de:64:84:40:57:
                    25:65:6a:ed:b0:34:17:04:3d:5c:24:63:27:e3:d3:
                    50:20:d3:c1:e9:45:c0:e5:9f:76:77:3b:1f:04:88:
                    f1:db:7c:c6:a1:cc:df:86:3d:d5:0b:f5:2c:94:1f:
                    fb:ef:69:57:1d:97:b2:83:82:c7:2d:21:a9:e8:12:
                    01:a1:3e:64:66:d1:5f:40:48:7b:c7:ab:4b:84:53:
                    8b:d3:b8:ae:0c:1e:6b:8c:6b:10:d1:45:8b:1d:c7:
                    f9:61:14:04:1c:22:1e:d0:c5:15:ad:d3:d3:fe:32:
                    93:8f:63:47:f9:44:ec:8e:68:d4:b8:1c:57:8f:2c:
                    5d:a7:8e:c8:77:c9:ff:d7:3b:f4:4f:10:eb:f4:2e:
                    fe:df:ae:54:36:17:d0:d3:59:e4:e5:0c:f4:6d:24:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:09:FC:C7:54:39:12:8C:CD:87:F9:56:C2:15:7A:96:C3:F1:A7:EE
            X509v3 Authority Key Identifier:
                keyid:EA:79:FB:AB:9C:68:6C:B6:1D:C9:B1:1E:88:81:DF:99:92:26:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/323830343a363939633a3a2f33322d3438203d3e20323730323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:699c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:4c:ef:22:a7:3f:23:95:e7:c1:2c:f7:97:58:29:12:05:57:
         45:54:7d:65:23:25:4e:11:c1:be:dd:66:a0:b9:ec:06:b7:3f:
         34:a0:57:bf:38:9e:40:21:55:8d:19:3b:03:dd:e9:a1:b1:46:
         68:b7:1f:80:29:73:bb:cf:d7:87:9c:bb:f5:11:35:f0:d2:98:
         5e:b2:4e:8a:8c:e0:6c:da:14:a2:b5:50:b4:8a:1e:df:d8:b0:
         9b:0f:14:5c:ec:2a:6f:d6:b0:9f:57:39:72:71:fc:32:d4:21:
         f5:fd:ae:62:87:16:47:d3:9f:54:d2:d7:a0:bf:bb:87:6c:a6:
         99:7b:55:a5:11:55:1d:88:9a:a5:c0:ad:8a:e0:f8:fa:e3:d5:
         df:b1:da:9d:44:e0:3f:04:94:0d:db:a6:1b:74:a1:04:f5:f8:
         9c:ab:d3:56:29:c8:ad:40:c8:e6:bd:aa:0c:eb:ca:31:ed:bd:
         63:a8:12:db:7c:c3:eb:81:37:e7:ee:c0:49:70:06:97:ce:7d:
         e2:ad:0f:0f:8f:f2:27:e2:87:b7:30:26:45:ef:3a:53:1b:bd:
         44:60:ef:a2:5c:3a:c7:c6:1f:71:55:fa:e9:79:e7:38:cf:31:
         04:c3:c5:78:6a:82:09:6d:34:d4:af:1d:00:ad:d8:08:7b:77:
         78:c3:e9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----