Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/323830343a373965633a3a2f33322d3332203d3e20323731333336.roa
File:                     323830343a373965633a3a2f33322d3332203d3e20323731333336.roa (raw, json)
Hash identifier:          NSi52KWNXgTXLOy8XSB1vIQ9JE/MC3UWKIKMbou4xyc=
Subject key identifier:   2A:B2:0B:9B:15:9E:07:19:9F:A6:C2:48:E5:3F:BD:04:E5:39:30:87
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       3278413DD9B3B0CDC4A6E37B89DE313A2846E71A
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/323830343a373965633a3a2f33322d3332203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:31 +0000
ROA not before:           Thu 04 Apr 2024 01:12:31 +0000
ROA not after:            Thu 03 Apr 2025 01:17:31 +0000
asID:                     271336
IP address blocks:        2804:79ec::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:78:41:3d:d9:b3:b0:cd:c4:a6:e3:7b:89:de:31:3a:28:46:e7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:31 2024 GMT
            Not After : Apr  3 01:17:31 2025 GMT
        Subject: CN=2AB20B9B159E07199FA6C248E53FBD04E5393087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:e9:f7:24:0e:d3:d9:54:76:5d:6b:af:a7:
                    20:ca:6d:4d:b6:de:7e:c4:c5:39:46:c5:24:fe:47:
                    da:e6:90:86:1d:f8:cb:8c:d4:5e:c5:18:b8:38:d6:
                    8e:d2:80:68:43:63:e8:59:af:62:80:ea:9c:31:c4:
                    66:7a:31:af:6e:71:4b:ae:d0:08:37:5b:61:0d:fa:
                    74:37:fa:3f:72:8b:7c:2f:87:72:80:d8:82:ed:e8:
                    9c:b1:86:92:0f:08:79:74:23:d6:78:90:45:77:a6:
                    e9:e5:20:1f:ea:5b:f7:2e:0c:a1:64:c0:c1:5c:b6:
                    fe:4d:ac:79:b0:9c:7a:3a:51:3e:54:e0:b2:48:ae:
                    e1:37:b1:a0:ae:c5:eb:72:ae:5c:23:45:72:ea:c0:
                    9a:7b:03:52:ed:0c:e0:60:dc:d6:c4:cc:78:17:47:
                    28:e3:3d:26:1d:4e:6d:99:f7:0b:68:09:ee:1d:b2:
                    16:f5:8d:07:f6:69:7d:d8:c1:c9:ca:9e:1b:dd:1c:
                    f5:8c:c4:39:1f:b7:43:0f:f4:3e:0c:23:e3:9b:fc:
                    d7:7f:49:3d:7c:ca:db:7a:13:c1:e9:a7:45:c7:b6:
                    69:ab:fe:4e:84:9b:3b:ce:cb:0c:cb:2b:29:a5:99:
                    f6:ce:86:6b:b9:0e:bf:b1:f1:ee:45:2e:88:84:d7:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:0B:9B:15:9E:07:19:9F:A6:C2:48:E5:3F:BD:04:E5:39:30:87
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/323830343a373965633a3a2f33322d3332203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:c8:74:da:3c:f1:0a:f3:ff:86:dd:08:51:8d:ae:6a:b9:fc:
         7b:07:fb:2e:3b:ab:33:d1:a2:c3:64:16:a3:b9:ac:e6:79:dc:
         aa:88:c9:b6:c4:33:be:3d:66:2e:9f:19:f7:e9:43:41:8b:24:
         94:5f:36:66:7a:5f:42:b1:34:a6:86:32:d3:9a:bb:f0:b2:e7:
         a4:59:61:74:e7:7c:c0:2c:b7:44:50:2f:01:81:90:cf:f8:b6:
         f9:a3:01:96:fa:19:41:ca:57:b4:ab:bb:17:b1:df:34:91:9f:
         7d:20:f7:c2:65:55:54:ae:15:01:11:5f:b7:18:5b:69:a7:c8:
         2b:03:80:f3:10:a1:b0:55:1a:a3:ec:28:d9:13:77:eb:c2:53:
         3a:f3:73:cb:ad:29:d0:13:63:fe:6f:34:5a:b5:1c:c9:cb:40:
         5a:1e:41:2e:df:57:92:7a:8b:84:5d:b6:ea:1a:ed:e3:e7:c1:
         fd:45:c1:04:c4:f7:56:9d:8d:7c:67:b8:50:bb:c1:37:ce:bb:
         9e:a6:be:65:65:43:a0:ea:29:97:3c:ef:be:dd:3f:54:dd:21:
         38:79:45:18:3c:ff:5d:e5:0a:36:a6:9a:ac:97:8b:65:3b:1d:
         fa:fd:8a:ad:88:4e:f2:b8:8e:d0:26:e3:cd:80:57:e8:3e:93:
         92:cc:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----