Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
File:                     323830343a323039383a3a2f33322d3332203d3e20323634353030.roa (raw, json)
Hash identifier:          Q9Y9B51SHDMFgiOSm2ylt5tPpFot7QZEhj4XWifSeZA=
Subject key identifier:   81:17:EE:ED:35:18:80:A1:E5:48:31:B3:AE:E8:05:1A:62:05:13:02
Certificate issuer:       /CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
Certificate serial:       2D0204A8855347BAE24AED76B4341D706DAC57C4
Authority key identifier: 01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
Signing time:             Thu 04 Apr 2024 04:27:40 +0000
ROA not before:           Thu 04 Apr 2024 04:22:40 +0000
ROA not after:            Thu 03 Apr 2025 04:27:40 +0000
asID:                     264500
IP address blocks:        2804:2098::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:02:04:a8:85:53:47:ba:e2:4a:ed:76:b4:34:1d:70:6d:ac:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01441CB27386E7155FDF18B124E4B538A8FA3E5D
        Validity
            Not Before: Apr  4 04:22:40 2024 GMT
            Not After : Apr  3 04:27:40 2025 GMT
        Subject: CN=8117EEED351880A1E54831B3AEE8051A62051302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:3a:af:80:08:98:87:0c:53:06:1f:b5:a8:
                    dd:ac:b7:09:89:51:53:63:8d:0a:96:8e:47:71:df:
                    24:c7:a7:dc:4f:7c:68:4e:a7:89:b8:a2:5c:0b:3d:
                    c5:59:3e:0f:46:c3:f0:19:79:e0:65:4e:65:ef:dd:
                    0c:9b:0c:9a:96:b6:91:60:66:62:e7:50:ec:73:bf:
                    43:c8:28:6a:f0:00:58:01:26:c6:d7:10:bb:1b:3a:
                    ce:a5:6a:15:46:b2:ed:b7:c4:a8:03:9a:d7:4f:8d:
                    11:27:0e:e4:9f:77:ae:d9:5a:f6:e1:22:c1:dd:e7:
                    ca:8f:f6:56:ec:01:ff:55:a3:76:a3:43:b4:27:ad:
                    5b:79:31:0a:cc:e3:46:ef:45:1b:14:1e:a8:49:61:
                    f3:81:94:b1:9a:ec:92:41:8c:57:38:73:00:75:3a:
                    28:da:26:c5:0a:1f:75:3e:da:76:d0:e2:f7:1d:51:
                    c9:3b:53:75:d2:b2:4f:1a:88:8e:6f:73:58:57:1d:
                    e7:f2:fe:65:7c:2c:cc:5d:76:3e:39:b9:8a:fa:a7:
                    ae:48:eb:3d:cb:20:cd:a2:de:cd:63:60:e6:ab:5f:
                    8d:c6:42:d2:48:6f:45:68:c6:78:2b:b9:77:88:62:
                    2c:67:11:91:16:e7:1f:d6:9a:77:75:88:34:a7:08:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:17:EE:ED:35:18:80:A1:E5:48:31:B3:AE:E8:05:1A:62:05:13:02
            X509v3 Authority Key Identifier:
                keyid:01:44:1C:B2:73:86:E7:15:5F:DF:18:B1:24:E4:B5:38:A8:FA:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01441CB27386E7155FDF18B124E4B538A8FA3E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/1/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:76:45:d2:3b:ef:c2:29:9b:93:c8:13:7b:7b:b5:c3:b7:
         c9:d5:cf:25:14:14:fe:fe:2b:80:e0:ef:cf:32:d5:c7:0c:d8:
         05:49:fe:f6:b7:ee:06:0c:7b:4f:2c:c0:33:1c:e1:0e:e3:ef:
         d2:d1:c1:ab:a8:81:b8:bc:b8:52:42:50:d9:47:0b:55:c5:bb:
         38:3c:53:c0:25:8b:8d:d4:b4:c1:ab:8e:22:fc:a7:5f:f3:9d:
         99:89:5c:82:c8:67:ae:37:42:d0:3b:e6:ad:b8:b8:d2:58:05:
         5b:db:d7:67:78:2f:86:e6:a0:13:f7:53:62:38:23:fa:56:9d:
         0d:ab:41:2d:b6:41:c5:b6:6f:04:bf:05:6a:30:1b:e5:4d:2f:
         21:02:28:51:9c:7d:91:c0:7d:98:2c:7c:b4:56:df:70:95:f0:
         92:f4:cc:49:b0:1a:fc:c8:7c:a7:59:c2:a8:66:09:1f:8b:3d:
         02:c7:3a:15:a6:cd:de:68:27:a4:7c:ce:40:fe:06:ac:01:b1:
         96:bf:39:40:cc:94:46:e3:df:b9:3d:e8:ea:c4:ba:5c:ea:33:
         99:1b:f9:13:54:ee:4c:7d:b8:89:06:25:03:1c:63:d2:db:95:
         25:8a:f7:b3:d0:5b:e3:6c:3c:96:2c:30:e2:8e:2d:56:e3:e8:
         bd:32:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----