Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/323830343a373862343a3a2f33322d3332203d3e20323731323630.roa
File:                     323830343a373862343a3a2f33322d3332203d3e20323731323630.roa (raw, json)
Hash identifier:          tEg5Jdxxr4MhIMNF/XUQPGSTjREK3YpxyF7dXq3FVHI=
Subject key identifier:   B0:3B:EB:19:AE:D8:5B:C8:CD:7E:A4:42:21:7C:6E:E1:88:66:D8:0D
Certificate issuer:       /CN=3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB
Certificate serial:       664186D4B3D6CA81FF51BCF09C797AD9978E8DB6
Authority key identifier: 31:57:DF:FC:50:D5:E3:CB:2A:92:5A:F3:5D:7F:ED:AC:4A:55:95:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/323830343a373862343a3a2f33322d3332203d3e20323731323630.roa
Signing time:             Wed 03 Apr 2024 21:28:06 +0000
ROA not before:           Wed 03 Apr 2024 21:23:06 +0000
ROA not after:            Wed 02 Apr 2025 21:28:06 +0000
asID:                     271260
IP address blocks:        2804:78b4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:41:86:d4:b3:d6:ca:81:ff:51:bc:f0:9c:79:7a:d9:97:8e:8d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB
        Validity
            Not Before: Apr  3 21:23:06 2024 GMT
            Not After : Apr  2 21:28:06 2025 GMT
        Subject: CN=B03BEB19AED85BC8CD7EA442217C6EE18866D80D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:09:c9:d6:66:cb:71:6b:b1:a9:40:6c:41:
                    98:8b:1d:2d:44:0b:4b:a0:fc:61:4d:aa:2b:0c:0d:
                    ad:69:42:c7:b6:32:47:58:ed:a1:2c:17:70:b9:ef:
                    2d:77:f0:be:fb:96:ba:69:d3:a2:55:8b:62:73:d6:
                    ee:b9:09:05:f8:0c:a0:38:ab:f2:25:19:57:7e:77:
                    31:95:18:45:71:f9:8b:11:5a:92:f0:11:4b:da:15:
                    a2:36:ff:dd:1e:06:75:7e:32:26:36:e0:f2:5e:f0:
                    c7:b8:a1:10:a5:37:d3:c1:9b:68:42:06:aa:e6:88:
                    08:bd:d7:2c:f6:ee:89:5e:14:dc:1e:36:e2:a0:15:
                    fa:2d:5c:60:4a:e3:69:18:d4:81:c7:97:26:98:d6:
                    da:64:bb:07:5e:5f:03:ea:97:ac:9d:3b:83:69:64:
                    72:44:ae:67:2b:e3:6a:06:36:e1:3b:95:66:a7:db:
                    7c:17:87:6d:5a:07:09:a2:a1:41:fd:88:25:4d:8f:
                    c8:d1:0b:4f:97:eb:14:72:25:db:40:75:d1:95:87:
                    79:11:75:51:1e:08:6a:b1:67:55:d8:c0:57:02:83:
                    a5:c0:fd:6b:80:cd:ec:bb:0e:fe:e0:da:00:4c:1f:
                    18:c7:8f:29:50:3e:26:ec:f9:cb:bd:d7:f0:e0:b9:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:EB:19:AE:D8:5B:C8:CD:7E:A4:42:21:7C:6E:E1:88:66:D8:0D
            X509v3 Authority Key Identifier:
                keyid:31:57:DF:FC:50:D5:E3:CB:2A:92:5A:F3:5D:7F:ED:AC:4A:55:95:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3157DFFC50D5E3CB2A925AF35D7FEDAC4A5595FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5EYetUMawp9rnhQduRX59tW73vH6jCBm9fu4dobubqg/2/323830343a373862343a3a2f33322d3332203d3e20323731323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:99:d2:cb:09:68:84:21:0e:c1:e1:b8:b2:87:0f:64:19:75:
         0c:59:87:24:2c:2e:97:c3:ce:38:d4:47:85:52:40:6f:e6:6e:
         70:36:0e:36:f1:96:15:96:cc:f8:74:03:9e:33:43:49:eb:90:
         81:37:25:85:6f:d9:ff:b8:47:6c:ae:12:8d:d8:db:af:75:8b:
         9b:51:4c:5c:c7:0c:d7:cd:39:1c:da:17:54:40:b1:c0:1b:64:
         1f:c6:84:13:54:0c:c0:57:62:63:12:2e:72:00:82:9e:84:1a:
         42:b4:13:1e:ac:f3:e3:45:37:b0:15:13:d9:f9:0c:78:0d:ae:
         74:67:13:4a:53:c3:93:36:db:0d:44:4f:14:cc:81:a7:70:9f:
         8a:79:e5:82:d9:de:a3:04:a2:35:1a:3b:b1:4a:6d:64:0f:b4:
         b0:98:d5:d0:7c:18:2a:64:49:8b:ab:29:59:48:39:5f:db:e8:
         54:37:09:dc:23:4e:0d:86:b5:25:6b:a0:69:59:9c:07:ff:79:
         4c:b2:a4:9c:0e:29:1a:c4:b6:a0:d0:97:ed:c3:fc:6f:76:0f:
         df:87:74:1d:a6:75:32:0b:1d:45:9a:8c:dc:fb:5c:14:ab:7e:
         59:fe:82:56:a4:5c:a9:a6:67:aa:86:19:dc:ab:7f:55:63:3b:
         e7:cf:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----