Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/323830343a316330343a3a2f33322d3438203d3e203631363333.roa
File:                     323830343a316330343a3a2f33322d3438203d3e203631363333.roa (raw, json)
Hash identifier:          atYMtyda2OIQb6Kt+9Y0dHQOyV7Ph7mN80pVZJLqARw=
Subject key identifier:   AF:E2:DB:CB:97:A7:69:4D:30:C2:02:81:B5:8C:B3:4A:8D:3E:B9:FF
Certificate issuer:       /CN=314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0
Certificate serial:       52FCF2112E63D478846848D4E86BD1E16869D933
Authority key identifier: 31:4B:0E:DD:AD:AD:CE:90:80:D6:2B:FA:8D:EA:DE:24:97:E1:D9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/323830343a316330343a3a2f33322d3438203d3e203631363333.roa
Signing time:             Wed 10 Apr 2024 13:32:04 +0000
ROA not before:           Wed 10 Apr 2024 13:27:04 +0000
ROA not after:            Wed 09 Apr 2025 13:32:04 +0000
asID:                     61633
IP address blocks:        2804:1c04::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fc:f2:11:2e:63:d4:78:84:68:48:d4:e8:6b:d1:e1:68:69:d9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0
        Validity
            Not Before: Apr 10 13:27:04 2024 GMT
            Not After : Apr  9 13:32:04 2025 GMT
        Subject: CN=AFE2DBCB97A7694D30C20281B58CB34A8D3EB9FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b4:75:44:ff:91:4d:7f:83:ae:3b:99:65:93:
                    1e:c6:b6:a4:6a:0b:ad:95:bc:bf:6c:b4:f3:4b:b4:
                    53:2f:42:33:74:67:9c:e1:04:d0:19:9a:63:20:dc:
                    e9:78:16:5f:42:6b:0b:62:3e:a5:03:95:00:1d:99:
                    fa:d0:ed:ee:33:49:56:a6:8e:5d:63:e6:07:e4:a5:
                    04:22:3d:28:73:c8:3c:c4:79:6e:c9:0c:68:97:5b:
                    65:22:c7:f3:06:63:6d:cf:75:0e:3a:6f:ed:cf:1d:
                    b2:ab:bd:a5:30:dc:aa:36:08:4a:73:83:53:83:06:
                    26:96:31:ab:ce:fd:3e:c4:2d:63:4f:e1:8f:a2:88:
                    1e:be:75:df:14:9a:8d:13:0a:f7:e8:8b:14:89:a9:
                    e8:5d:f5:6e:ec:d9:73:32:30:95:97:1f:4e:7a:23:
                    e1:82:28:73:f5:8d:a3:ca:39:b8:2a:44:ca:72:9c:
                    ae:e7:de:98:ae:d6:94:63:ba:51:7b:cb:08:b3:0c:
                    b5:99:2a:4a:13:97:ad:2d:ba:d4:df:7c:68:1e:ee:
                    11:cd:87:32:a1:91:c2:93:8d:c6:ca:6a:8c:7a:e2:
                    a6:e6:bd:67:91:e2:e6:f1:e2:7e:b9:1a:41:01:ea:
                    55:35:8e:f0:06:d7:88:d8:e5:4f:49:72:c3:19:71:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:DB:CB:97:A7:69:4D:30:C2:02:81:B5:8C:B3:4A:8D:3E:B9:FF
            X509v3 Authority Key Identifier:
                keyid:31:4B:0E:DD:AD:AD:CE:90:80:D6:2B:FA:8D:EA:DE:24:97:E1:D9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314B0EDDADADCE9080D62BFA8DEADE2497E1D9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/1/323830343a316330343a3a2f33322d3438203d3e203631363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:10:c3:d1:c3:25:36:55:e2:a1:fb:88:10:53:fd:73:ec:1a:
         6d:5d:ef:f9:50:10:47:df:9c:72:91:dd:bf:0f:1e:13:71:b0:
         3c:99:67:cf:3b:9a:9e:cc:59:5b:73:51:55:ed:42:16:3e:13:
         60:0a:b7:d4:b2:01:c6:b0:a7:87:92:34:27:03:b6:c0:06:2a:
         d7:15:88:60:d5:7c:f8:98:da:26:15:56:5e:7c:9b:ea:1d:04:
         fb:d2:88:54:c5:bf:3d:3a:dc:05:9f:0d:dd:29:f8:b0:cf:28:
         28:63:82:6b:6d:c6:f4:33:c0:a8:95:7c:c3:2c:d1:bd:de:98:
         34:74:f6:02:e2:70:41:b9:94:4a:27:81:8c:c3:2b:81:6c:39:
         5a:c6:e2:6c:23:cc:54:b3:51:8e:3f:0b:20:a5:e9:0b:b9:6c:
         aa:97:06:d7:37:7e:ad:6e:ae:f9:74:b7:62:f3:fa:ab:de:93:
         b5:26:d9:11:6b:c8:16:c2:e5:7f:a4:39:96:44:26:f1:da:9b:
         7a:b3:5e:91:37:21:4c:51:c4:69:c8:5f:82:03:fd:e9:53:f9:
         f3:59:e9:68:3e:18:27:e7:d8:af:c7:5a:ea:9e:5f:a0:00:d5:
         13:33:89:34:84:7a:18:18:bd:65:ab:3b:33:2e:01:84:68:c2:
         2c:a1:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----