Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/323830343a356639303a3a2f33322d3336203d3e20323639313039.roa
File:                     323830343a356639303a3a2f33322d3336203d3e20323639313039.roa (raw, json)
Hash identifier:          Z0ishfi2mMr5paavaQndAn+SoFsQBMHfjrXvqd65hJw=
Subject key identifier:   47:F1:F7:6F:D0:48:AA:D4:13:CC:36:25:C7:EF:F5:08:CA:FE:01:BB
Certificate issuer:       /CN=8BA7F66325E28134C424CF19BA1599819495E340
Certificate serial:       7A8E0E5849C44A21EEF2A52F08DD139C0B1CA601
Authority key identifier: 8B:A7:F6:63:25:E2:81:34:C4:24:CF:19:BA:15:99:81:94:95:E3:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA7F66325E28134C424CF19BA1599819495E340.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/323830343a356639303a3a2f33322d3336203d3e20323639313039.roa
Signing time:             Wed 03 Apr 2024 19:19:41 +0000
ROA not before:           Wed 03 Apr 2024 19:14:41 +0000
ROA not after:            Wed 02 Apr 2025 19:19:41 +0000
asID:                     269109
IP address blocks:        2804:5f90::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8e:0e:58:49:c4:4a:21:ee:f2:a5:2f:08:dd:13:9c:0b:1c:a6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA7F66325E28134C424CF19BA1599819495E340
        Validity
            Not Before: Apr  3 19:14:41 2024 GMT
            Not After : Apr  2 19:19:41 2025 GMT
        Subject: CN=47F1F76FD048AAD413CC3625C7EFF508CAFE01BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:26:9a:a1:30:a7:bf:04:04:e8:d6:05:0d:
                    6b:42:26:15:e0:93:08:eb:75:85:db:01:60:ee:b6:
                    22:60:c4:f0:09:b2:a7:97:8d:7a:12:47:c4:6b:67:
                    6c:b3:93:1c:59:98:38:73:0d:ba:b6:f4:c5:bb:20:
                    8b:c0:95:61:1d:69:19:31:28:71:66:82:90:8b:c7:
                    87:2f:5d:58:28:69:6c:29:5a:6b:8d:20:0a:c7:d2:
                    7c:ce:69:b4:d7:6e:7c:3c:e3:f0:df:12:0d:de:34:
                    68:0c:7c:c7:99:3e:eb:46:05:53:b4:37:b0:74:9c:
                    e9:98:18:b7:06:dd:6a:05:9b:8a:03:8c:c6:5c:03:
                    ef:19:3f:83:46:9a:72:56:8d:85:4e:d4:eb:b2:6d:
                    bf:f9:da:48:c8:26:08:e4:7f:9d:16:92:85:4a:f5:
                    96:df:02:28:aa:1a:50:44:ac:93:70:ab:ea:83:af:
                    23:52:49:bf:9d:a5:f3:d0:14:26:3c:fe:f3:b2:b9:
                    9c:0f:db:d9:ae:ea:0b:7c:91:9d:dd:66:fd:02:7f:
                    03:d8:26:2b:60:5e:0a:ca:2d:2b:ac:d0:11:12:98:
                    84:7e:09:1f:ee:c0:f0:93:49:95:56:17:d8:f6:1b:
                    47:76:7d:2d:69:d7:66:19:c4:f7:9d:02:4d:5b:cc:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:F7:6F:D0:48:AA:D4:13:CC:36:25:C7:EF:F5:08:CA:FE:01:BB
            X509v3 Authority Key Identifier:
                keyid:8B:A7:F6:63:25:E2:81:34:C4:24:CF:19:BA:15:99:81:94:95:E3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/8BA7F66325E28134C424CF19BA1599819495E340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA7F66325E28134C424CF19BA1599819495E340.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/323830343a356639303a3a2f33322d3336203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:27:82:ea:7a:9f:f1:f8:bb:c5:2e:37:f2:e6:b1:36:a7:75:
         a6:a6:2a:cf:97:6f:18:9c:70:4d:48:c7:aa:2a:4b:f0:d8:3e:
         b6:ee:5c:5a:e5:00:2f:e2:d8:78:64:13:41:d2:17:61:e8:ad:
         16:38:92:5c:42:27:8e:37:50:1f:b3:79:e5:9a:78:bc:03:e2:
         6e:85:fe:d2:6d:76:28:57:76:77:76:36:67:bb:f8:61:d7:ad:
         09:8f:2d:73:85:2d:e6:42:01:69:87:59:9d:66:8d:78:74:99:
         dc:47:28:b1:0b:6f:b9:31:38:bd:5e:2b:c6:22:c9:5c:b0:e8:
         60:44:ae:01:68:01:0d:f1:df:f5:30:e1:c6:54:fe:5d:7c:d3:
         18:d4:80:e5:a5:a6:37:27:70:fa:64:09:e6:6e:00:c8:0b:bf:
         d6:6b:4c:67:c8:83:b2:29:67:52:ec:d5:6e:57:c7:ee:54:d4:
         80:e3:b8:09:4a:64:00:39:a6:3a:d0:d7:56:56:72:8d:1d:26:
         b3:0e:63:0b:1b:f1:2c:fb:1a:79:7e:2b:b9:d5:53:e2:39:ca:
         9f:45:c6:14:6c:12:17:37:15:e9:8b:ec:f7:7c:a6:8b:24:d4:
         86:ac:95:50:39:65:19:3d:c0:af:8b:24:97:81:f6:76:23:36:
         95:30:f9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----