Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3a2f33332d3333203d3e20323637353438.roa
File:                     323830343a343331383a3a2f33332d3333203d3e20323637353438.roa (raw, json)
Hash identifier:          H3dc4dKno2C7iJigiRHloUXKKyAT4n90TRsEMy/hdRU=
Subject key identifier:   B9:E5:0E:5B:75:89:F9:7E:22:1A:38:29:11:0A:47:16:26:22:04:DF
Certificate issuer:       /CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
Certificate serial:       353055C6BD472D76AAE28FF5C8FE15EA5ED2D274
Authority key identifier: A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3a2f33332d3333203d3e20323637353438.roa
Signing time:             Wed 03 Apr 2024 21:35:09 +0000
ROA not before:           Wed 03 Apr 2024 21:30:09 +0000
ROA not after:            Wed 02 Apr 2025 21:35:09 +0000
asID:                     267548
IP address blocks:        2804:4318::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:30:55:c6:bd:47:2d:76:aa:e2:8f:f5:c8:fe:15:ea:5e:d2:d2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
        Validity
            Not Before: Apr  3 21:30:09 2024 GMT
            Not After : Apr  2 21:35:09 2025 GMT
        Subject: CN=B9E50E5B7589F97E221A3829110A4716262204DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:ba:e8:d5:d1:79:58:94:91:23:e5:9f:b7:
                    8f:d1:35:c9:d2:ee:dd:fb:98:b8:2b:b2:64:2a:4d:
                    f6:7d:fb:5e:78:ac:2f:e3:69:de:3c:fe:54:a2:59:
                    e8:2a:8b:7c:87:63:02:1d:86:14:52:27:de:40:b5:
                    1b:25:a0:5b:d2:f9:8a:44:96:fc:41:27:3d:9e:b6:
                    fc:c1:cb:42:cf:90:45:2c:c3:6d:ed:d9:eb:4a:36:
                    c0:ac:8d:fc:78:d2:a6:f8:ce:42:65:f2:00:5b:2b:
                    bd:28:a5:1d:e5:31:6a:a6:c7:be:82:cc:8e:e9:6f:
                    d8:c7:77:69:b4:8c:95:d6:38:b8:0b:5f:14:79:22:
                    38:13:21:18:e4:26:86:e7:c5:0f:d1:53:02:5f:6b:
                    e2:8f:d3:d2:78:f2:fd:21:0c:df:36:28:1e:5c:df:
                    ac:22:86:06:0b:89:02:ac:6a:73:6d:19:21:c9:95:
                    00:e5:24:8a:b0:02:68:f7:56:ac:ce:e4:4a:76:37:
                    c7:8a:9d:34:40:d5:0f:03:9f:d9:2c:10:ea:12:05:
                    b1:61:a5:2f:41:d2:f8:c9:07:5d:d7:a9:f9:b3:56:
                    b3:c6:b2:a8:10:52:17:64:6e:fc:9a:83:80:78:d1:
                    35:e8:d9:88:99:8c:da:60:16:10:7e:93:01:44:25:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:0E:5B:75:89:F9:7E:22:1A:38:29:11:0A:47:16:26:22:04:DF
            X509v3 Authority Key Identifier:
                keyid:A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a3a2f33332d3333203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4318::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:30:6a:2a:e3:53:42:0d:99:31:cd:b4:a7:0f:74:aa:4d:5f:
         e7:5c:ef:d3:24:ea:07:e4:a0:47:d8:9e:00:e2:59:30:e6:11:
         a4:15:c1:c4:cf:50:89:32:0f:1c:02:9f:fe:af:c4:d9:4a:01:
         c1:ed:4d:e9:96:5d:57:58:69:64:6a:fb:dc:0d:a4:70:7d:78:
         ed:22:30:7d:f8:df:15:7f:e0:65:24:8f:bf:b5:34:24:88:a2:
         5e:8c:c6:2f:e7:54:25:e2:13:0d:1e:9c:13:10:bd:e6:a6:00:
         83:65:b4:5e:38:31:c5:54:03:4c:c1:e5:37:f4:50:5e:b2:b9:
         ec:2f:02:5f:63:e4:fe:6f:67:36:dc:61:ed:af:88:2b:c8:d7:
         21:8f:12:fa:e5:22:ba:65:85:d5:ea:20:28:1b:f1:74:5e:88:
         f0:3c:d0:21:0a:87:06:93:e9:b8:86:fd:b9:73:0c:02:7e:07:
         88:07:75:6a:f1:84:ef:6d:90:93:ce:43:51:4b:b5:fc:0d:ff:
         9e:c0:da:26:c5:7c:2c:a7:e6:18:38:c6:8b:2e:4a:8c:22:9f:
         a2:1d:6e:fc:f4:bf:dd:c1:9f:73:ee:41:eb:b5:75:8c:c1:8c:
         12:cb:46:ba:0d:69:56:73:06:b2:2c:e4:e5:e8:28:68:fb:eb:
         d1:29:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----