Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/323830343a313161303a3a2f33322d3332203d3e20323632383839.roa
File:                     323830343a313161303a3a2f33322d3332203d3e20323632383839.roa (raw, json)
Hash identifier:          KFSDRN6OmPcd/llLgv4lF7l+OscK+f3aY84FR04km90=
Subject key identifier:   DB:38:93:16:3B:AC:A5:BB:E5:D8:1D:92:57:B5:08:D8:6E:D6:4D:B8
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       78B0E515BDA008B2FEFABBA6458415A297BFC2F3
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/323830343a313161303a3a2f33322d3332203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        2804:11a0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b0:e5:15:bd:a0:08:b2:fe:fa:bb:a6:45:84:15:a2:97:bf:c2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=DB3893163BACA5BBE5D81D9257B508D86ED64DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:82:4c:a0:11:70:0a:ed:c8:cb:81:77:a3:
                    91:f8:26:b3:f4:a9:aa:35:32:d1:28:2b:1f:0f:6e:
                    a8:e6:6a:ae:ed:7e:f4:b3:bc:32:8e:0a:d0:16:ec:
                    05:12:fd:0a:47:e3:cd:47:8b:99:ef:3b:9d:32:9a:
                    92:b0:f5:46:68:3b:95:8a:8e:e0:34:53:48:46:6f:
                    dc:90:51:33:b2:bd:7c:16:1d:1e:8f:1e:7f:70:11:
                    a1:ee:12:2c:0b:28:8f:2a:57:79:51:97:3c:ed:9e:
                    27:b1:d0:48:5c:ce:62:7e:6a:69:d0:75:68:3b:f9:
                    8f:d3:e7:b8:50:89:73:fd:57:5e:3f:44:a6:e3:19:
                    34:3f:8e:59:23:ab:f0:c7:b9:83:ad:a8:d7:cc:fb:
                    fd:e4:8e:71:2b:9b:1a:aa:32:57:3b:04:c8:46:0e:
                    b5:c1:cd:d8:ed:a0:d1:04:6e:df:43:2d:d6:8c:19:
                    56:a6:29:ca:9b:75:34:b9:d2:20:1b:82:40:5a:8f:
                    aa:55:e5:d9:67:ec:dc:1d:2c:13:b0:76:80:fe:43:
                    43:03:c8:56:bd:b0:2f:98:10:c6:f7:0f:b7:10:73:
                    f4:f5:d3:65:51:75:5e:e2:28:15:df:f2:5d:4e:3f:
                    cb:96:04:1d:6a:7b:16:3b:af:33:0a:44:37:4a:cd:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:93:16:3B:AC:A5:BB:E5:D8:1D:92:57:B5:08:D8:6E:D6:4D:B8
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/323830343a313161303a3a2f33322d3332203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:d1:0c:05:30:e7:eb:1e:cf:26:d5:18:00:1f:be:e0:f1:
         3f:12:8d:17:81:60:f5:da:d7:a9:ae:aa:5a:f0:ab:69:44:0a:
         7f:cc:45:52:f1:35:6f:7b:b6:5b:d9:66:e2:e3:19:04:d4:e4:
         50:0f:c3:a5:87:a2:9f:7f:9e:86:55:cf:28:58:5d:6c:be:b4:
         16:4b:7f:3d:c6:74:ec:8d:49:fb:e9:ad:75:98:57:4f:ba:36:
         04:7e:ab:7c:aa:e9:0e:0a:28:11:79:b7:6d:02:f2:cf:53:ae:
         ff:f8:ef:56:f0:c6:96:b9:9d:51:84:ef:dc:5e:f6:0f:1f:23:
         ae:26:22:8f:43:60:11:80:0e:57:c2:b7:7f:07:29:70:aa:ac:
         6f:f1:51:e8:8d:c3:31:a2:9e:40:55:a4:d4:67:1a:51:f2:60:
         dc:9a:e5:77:1e:35:6e:d7:ca:7b:75:b5:b8:6f:9b:0c:47:35:
         da:77:f1:ed:c4:df:99:42:3e:88:13:e4:4e:6b:e1:d8:2c:cc:
         3a:07:8d:93:b9:47:aa:54:b9:29:38:0a:4b:ab:5b:c0:eb:15:
         39:de:26:2e:1c:d4:1c:00:2a:52:03:88:cc:4e:b2:79:db:b6:
         e6:e7:4e:28:d8:69:69:45:f7:45:d5:bc:97:6c:2e:81:e2:f2:
         83:e2:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----