Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/323830343a346139303a3a2f33322d3438203d3e20323637323439.roa
File:                     323830343a346139303a3a2f33322d3438203d3e20323637323439.roa (raw, json)
Hash identifier:          L9eMyULlI0FjNfwsbvdBpb2Vr8Q3C7SwLIlu9QRq+DM=
Subject key identifier:   82:CE:F6:43:85:88:3E:C4:23:D3:7E:61:34:0E:A5:85:C1:AE:26:CB
Certificate issuer:       /CN=019644AAEAED29967FF0AC96DCADEF592F939063
Certificate serial:       532D1CD92B66390A7A6D2DAB81D577D68B2E75CC
Authority key identifier: 01:96:44:AA:EA:ED:29:96:7F:F0:AC:96:DC:AD:EF:59:2F:93:90:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019644AAEAED29967FF0AC96DCADEF592F939063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/323830343a346139303a3a2f33322d3438203d3e20323637323439.roa
Signing time:             Wed 10 Apr 2024 13:13:54 +0000
ROA not before:           Wed 10 Apr 2024 13:08:54 +0000
ROA not after:            Wed 09 Apr 2025 13:13:54 +0000
asID:                     267249
IP address blocks:        2804:4a90::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:1c:d9:2b:66:39:0a:7a:6d:2d:ab:81:d5:77:d6:8b:2e:75:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019644AAEAED29967FF0AC96DCADEF592F939063
        Validity
            Not Before: Apr 10 13:08:54 2024 GMT
            Not After : Apr  9 13:13:54 2025 GMT
        Subject: CN=82CEF64385883EC423D37E61340EA585C1AE26CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:9c:fa:aa:e3:7c:bf:f0:d5:10:f5:6f:b0:
                    d7:3a:3f:b3:82:69:fa:1f:54:15:0f:bb:d1:0b:45:
                    07:79:ff:b5:ed:57:b0:f4:82:b0:c9:4c:58:ef:72:
                    bf:08:cc:7e:49:76:73:22:38:76:6b:4f:f0:42:b0:
                    29:a7:19:bf:d8:ea:7c:a8:52:80:65:10:49:d6:b4:
                    67:1f:b0:c3:d6:37:fe:6b:19:54:53:f0:03:ff:ff:
                    7f:a5:d3:7c:ad:ef:d6:5c:04:f2:48:44:5c:75:fe:
                    ba:bb:a4:3a:13:38:6c:08:59:5c:83:aa:b6:e2:ac:
                    6b:2d:ac:db:2c:26:51:b7:b2:0b:10:be:23:ed:24:
                    a4:71:f0:0c:2a:e9:91:28:fd:1c:59:ff:dd:ee:d4:
                    5b:fe:cb:a5:5f:0b:e5:b7:b7:10:6c:6f:00:f8:f6:
                    f1:ed:41:31:fb:46:5e:41:d2:2c:d7:7d:98:d1:a3:
                    5f:a9:c2:8f:63:9f:31:4c:84:e7:be:29:97:76:e2:
                    dc:85:48:f6:56:81:45:83:c3:97:6e:84:9c:e3:31:
                    75:e0:20:d3:6f:ee:5f:80:b2:da:13:69:d3:ed:1e:
                    76:b7:d8:be:dc:7b:25:3e:71:b1:4b:8d:79:51:e9:
                    13:52:4f:e6:02:66:00:4a:c8:68:df:cc:4d:92:ed:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:F6:43:85:88:3E:C4:23:D3:7E:61:34:0E:A5:85:C1:AE:26:CB
            X509v3 Authority Key Identifier:
                keyid:01:96:44:AA:EA:ED:29:96:7F:F0:AC:96:DC:AD:EF:59:2F:93:90:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/019644AAEAED29967FF0AC96DCADEF592F939063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019644AAEAED29967FF0AC96DCADEF592F939063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/323830343a346139303a3a2f33322d3438203d3e20323637323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:48:b6:b6:f9:b5:a6:83:14:42:1c:fa:e0:65:ee:e4:7d:33:
         a1:45:ae:40:2c:e7:7e:cc:79:30:97:2a:83:46:2d:88:0a:ee:
         ba:87:c8:0e:2e:f8:46:f1:34:54:98:3b:da:9d:03:d2:c6:1b:
         79:d5:31:ec:93:cd:03:50:88:e0:c8:92:b5:43:ea:16:e5:18:
         10:57:de:9a:c1:4f:7f:59:5d:cb:7f:c2:25:80:7c:12:f2:8e:
         f1:07:c5:43:75:4e:5d:86:64:4a:09:d3:84:55:d6:84:d7:94:
         38:c9:6f:01:77:31:01:35:bc:09:f4:a4:01:11:7f:37:b0:fc:
         74:9c:85:0f:23:cc:00:37:90:b7:d3:9d:9b:af:54:d4:0f:98:
         4b:f8:08:ac:50:24:05:3d:10:44:c5:98:12:c9:05:41:bd:83:
         5c:55:49:7b:1d:c3:08:fa:8d:e0:12:a3:0a:03:61:d3:e7:11:
         02:b1:a6:80:b2:b7:97:73:69:e3:3f:fa:dc:21:c3:a2:c7:2a:
         d5:53:90:a1:11:d6:2e:27:b0:22:1a:d5:cb:20:f1:79:cc:e1:
         e6:79:01:dc:51:c6:2b:c3:df:c9:4e:2e:f5:25:fc:2b:f8:c2:
         fa:e0:b0:5f:ee:38:83:de:fe:97:a4:10:6e:39:29:83:e4:c6:
         e6:05:7e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----