Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/323830343a6536343a3a2f33322d3438203d3e20323632393532.roa
File:                     323830343a6536343a3a2f33322d3438203d3e20323632393532.roa (raw, json)
Hash identifier:          DtfC+zS4yLbfm+yTpPCNW4syfpI/DnE6WLnfAvWg2RQ=
Subject key identifier:   BB:01:30:EF:97:CE:22:03:D7:F1:FE:0C:CA:C2:0B:22:C6:D3:E1:99
Certificate issuer:       /CN=64E4B884F01FC9DC0000E111AE283F356C137547
Certificate serial:       11F690A68D96A538B07D83A30293436EE257FF02
Authority key identifier: 64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/323830343a6536343a3a2f33322d3438203d3e20323632393532.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     262952
IP address blocks:        2804:e64::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:90:a6:8d:96:a5:38:b0:7d:83:a3:02:93:43:6e:e2:57:ff:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E4B884F01FC9DC0000E111AE283F356C137547
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=BB0130EF97CE2203D7F1FE0CCAC20B22C6D3E199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:4c:e2:2f:7c:0a:8e:f8:c9:a8:21:a7:94:
                    41:e1:d3:9a:ab:9d:be:72:d8:85:3d:d1:12:58:27:
                    54:c3:28:8c:4b:12:21:da:77:be:73:7b:55:10:db:
                    1a:d4:22:ab:90:0c:e5:7d:e3:d2:ab:5c:d8:fb:80:
                    27:77:53:7b:eb:31:a0:d9:48:ab:2e:a0:f0:90:13:
                    e1:c7:89:b0:c4:c9:d3:fc:f8:53:77:3c:30:39:e6:
                    6c:5f:43:88:1a:6e:b5:e5:c3:8b:48:db:93:0f:1b:
                    dc:d2:68:a9:4a:d0:e8:30:f0:be:4d:18:f7:23:12:
                    a2:b3:ea:4d:15:db:d0:8d:72:dc:5f:09:d4:4d:db:
                    09:3b:c5:e1:3c:31:0b:2a:ad:63:c1:e3:83:96:d9:
                    de:98:1d:33:23:dd:84:a6:fc:cb:ea:1a:a1:74:85:
                    e4:0c:18:6d:df:21:0a:fd:5b:7b:51:e0:e2:84:ce:
                    af:a2:6e:9a:82:96:e5:7c:28:a7:04:94:6e:6d:7f:
                    c6:d8:db:c2:65:67:34:7f:68:0a:8c:cf:a9:53:4e:
                    a3:d6:70:77:e5:3f:55:ed:24:c0:0a:ae:c2:c6:02:
                    3c:72:00:d9:f0:ec:13:e6:15:39:74:4a:1d:89:7d:
                    69:46:74:cd:2e:81:cc:50:3c:10:af:a9:52:35:d7:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:30:EF:97:CE:22:03:D7:F1:FE:0C:CA:C2:0B:22:C6:D3:E1:99
            X509v3 Authority Key Identifier:
                keyid:64:E4:B8:84:F0:1F:C9:DC:00:00:E1:11:AE:28:3F:35:6C:13:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/64E4B884F01FC9DC0000E111AE283F356C137547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E4B884F01FC9DC0000E111AE283F356C137547.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/1/323830343a6536343a3a2f33322d3438203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:91:03:11:8c:6b:5d:ac:42:48:03:c7:8d:e0:51:7a:e0:dd:
         56:79:2d:d5:37:db:4b:7f:19:7a:f8:d7:17:34:52:04:e9:7b:
         f1:14:f2:89:3e:ae:97:1a:a9:ef:62:3a:ab:8e:33:9b:48:f9:
         70:5d:a8:af:21:01:3e:0e:28:a9:92:6a:e0:20:b2:cf:5b:d3:
         5e:f1:1e:ea:fd:d2:b9:36:82:c4:f7:42:94:68:fd:26:64:ce:
         b8:ee:c2:0c:2b:96:40:61:8e:c6:b2:44:4f:bb:bd:af:66:95:
         ad:c8:7b:43:bc:55:52:a7:be:cc:b0:4a:c5:15:72:8d:7b:af:
         bc:ea:7d:19:f6:24:43:4a:ff:e6:d5:f4:d5:b4:fb:98:30:1e:
         24:71:9d:c8:b6:8e:c8:df:06:61:72:0d:7c:e4:86:24:5c:43:
         8e:5f:94:8f:66:0a:1e:b5:6e:7c:4f:9c:da:6c:f8:c6:b7:f3:
         55:5d:ac:af:2b:2f:7a:69:91:32:8a:bd:33:b8:e9:4b:35:a7:
         e1:bd:9f:b5:94:49:e9:43:c4:b0:89:3c:80:7c:6c:30:69:1c:
         15:1e:c0:9a:67:42:fe:fa:e0:23:f3:2c:68:30:d2:f2:78:5b:
         f5:70:80:69:c2:b0:58:45:f1:d1:1c:e8:e5:3b:16:ab:a3:62:
         d9:36:c0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----