Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/323830343a313232343a3a2f33322d313238203d3e20323633343539.roa
File:                     323830343a313232343a3a2f33322d313238203d3e20323633343539.roa (raw, json)
Hash identifier:          CnEorNXwqeEzzRbff51ITXbWUJuE5pvyMdOgJHz11K0=
Subject key identifier:   EE:48:45:1C:DD:08:92:0E:CF:11:46:BD:8B:B1:6D:3C:A4:4A:A5:B0
Certificate issuer:       /CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
Certificate serial:       3568E6CEECDF8935FF414F0304C363692436E582
Authority key identifier: 88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/323830343a313232343a3a2f33322d313238203d3e20323633343539.roa
Signing time:             Thu 04 Apr 2024 06:55:10 +0000
ROA not before:           Thu 04 Apr 2024 06:50:10 +0000
ROA not after:            Thu 03 Apr 2025 06:55:10 +0000
asID:                     263459
IP address blocks:        2804:1224::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:68:e6:ce:ec:df:89:35:ff:41:4f:03:04:c3:63:69:24:36:e5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
        Validity
            Not Before: Apr  4 06:50:10 2024 GMT
            Not After : Apr  3 06:55:10 2025 GMT
        Subject: CN=EE48451CDD08920ECF1146BD8BB16D3CA44AA5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:ab:a4:bf:62:fb:27:9c:bd:34:9f:2b:9a:
                    e7:e6:2f:8c:42:3f:6f:6f:62:d3:11:99:89:b4:48:
                    34:24:fc:63:57:3a:ed:a2:a9:fb:d5:90:05:91:f2:
                    67:69:9b:e7:50:e8:e0:e7:27:e9:95:c9:ac:a4:1b:
                    d4:73:4f:cf:20:ba:2c:30:da:1b:b2:a9:c4:84:40:
                    f7:a9:c6:ca:e9:2e:21:d5:08:55:b0:c8:52:4b:cc:
                    a0:ba:c2:06:71:b8:18:96:7c:31:53:0c:c9:99:79:
                    9e:43:13:4f:d8:0b:f4:23:d3:80:a0:34:73:e6:84:
                    cc:64:c9:35:48:79:f5:b5:de:16:2f:1a:53:c6:e5:
                    8d:41:08:80:1a:f1:f2:a5:aa:bf:25:5d:49:ec:77:
                    99:55:78:17:88:aa:26:8a:c6:82:ad:49:09:81:5a:
                    e6:d2:51:e6:35:c8:49:21:4f:3e:1e:6d:3d:5f:6b:
                    b8:9d:78:19:d6:46:c6:09:1b:72:59:8b:fd:d0:7a:
                    59:08:51:39:fb:87:67:63:36:9c:6b:97:e8:90:bc:
                    dd:65:16:57:b0:39:ab:b0:2f:e8:c9:52:1b:47:47:
                    6b:c9:6e:b3:c7:4c:d4:be:d8:89:d0:4a:0e:93:3d:
                    19:7b:dd:bb:da:3e:e5:38:70:75:c5:db:3b:69:6a:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:48:45:1C:DD:08:92:0E:CF:11:46:BD:8B:B1:6D:3C:A4:4A:A5:B0
            X509v3 Authority Key Identifier:
                keyid:88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/323830343a313232343a3a2f33322d313238203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1224::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:cd:6e:91:ca:1a:1a:72:19:18:ff:86:76:b9:da:b4:43:ca:
         12:2e:fe:ad:a3:98:c7:87:c3:0e:52:69:04:26:91:b1:3c:86:
         07:3f:37:9d:0b:d1:b7:3a:eb:17:6b:c0:c6:49:fc:e7:31:08:
         f4:65:32:a7:8f:09:8b:2d:e3:ee:06:f6:93:68:87:31:e8:1d:
         12:c7:e7:b8:d9:a2:c1:cb:19:dc:8c:09:ff:ce:c2:27:be:77:
         84:84:99:16:d9:54:00:d4:5b:b5:fd:0a:4a:c6:23:b6:9f:2a:
         d0:ed:f3:b4:53:d0:2f:43:92:6e:bf:6c:c5:8c:95:e4:b4:9b:
         98:37:34:c4:f6:1d:68:35:a6:8c:23:af:c9:fb:ca:7a:2b:c1:
         e9:f1:05:90:74:bc:a8:6e:2b:a8:57:de:10:66:43:3c:02:16:
         5f:bd:ea:5e:92:f0:1e:a7:22:9e:e4:f6:d1:73:08:73:5b:87:
         7d:48:a5:6c:15:d8:58:59:4a:d4:86:d6:10:14:47:8f:ba:19:
         66:25:77:40:da:bf:57:e6:b5:e2:d0:17:29:5e:cc:10:f7:53:
         39:d0:33:b4:12:bf:0e:ff:80:f0:b1:ca:ff:6a:d4:9f:98:dc:
         99:c1:3a:aa:8e:d2:34:20:63:4e:4d:b7:43:93:f6:06:7a:5b:
         f7:8c:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----