Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa
File:                     323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa (raw, json)
Hash identifier:          bkaQgotqN7EfQbR2hHPEbpXO4BHiXduIyFYlPaZrtPw=
Subject key identifier:   7A:19:AC:6D:39:EB:E5:C5:F6:0E:77:7E:34:A7:F5:C0:11:17:12:87
Certificate issuer:       /CN=282867FDA1906735DA18D9838B50748AC97E1655
Certificate serial:       06379075F7F33E061648F08DB2652BCBF5961BE8
Authority key identifier: 28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa
Signing time:             Tue 16 Apr 2024 18:44:59 +0000
ROA not before:           Tue 16 Apr 2024 18:39:59 +0000
ROA not after:            Tue 15 Apr 2025 18:44:59 +0000
asID:                     265484
IP address blocks:        2804:34d8:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:37:90:75:f7:f3:3e:06:16:48:f0:8d:b2:65:2b:cb:f5:96:1b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Validity
            Not Before: Apr 16 18:39:59 2024 GMT
            Not After : Apr 15 18:44:59 2025 GMT
        Subject: CN=7A19AC6D39EBE5C5F60E777E34A7F5C011171287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fc:01:b5:04:a1:42:df:15:0e:b9:eb:62:1f:
                    97:e7:bd:db:a7:32:7d:f1:77:01:c3:85:2d:97:24:
                    5f:63:73:c4:13:92:8b:52:bd:a9:ee:e1:09:65:8f:
                    95:fa:a3:63:2e:57:61:7d:28:ed:d7:74:ba:56:cc:
                    37:25:4e:2e:0d:f5:1e:5f:8c:ed:0a:f4:88:6f:c9:
                    ad:5d:b3:72:09:4d:e7:ba:9b:c5:eb:8a:49:e2:a8:
                    46:e6:cc:e3:22:26:6f:18:b4:68:3d:f5:4e:d4:47:
                    d6:06:18:60:70:11:1f:74:aa:ad:06:ba:e4:68:fe:
                    f7:b4:e2:a7:d0:65:ca:14:0a:2f:43:fb:f5:30:0a:
                    cc:d5:57:8c:e4:17:88:88:72:58:be:05:1b:8a:5b:
                    38:ca:ee:ab:24:c3:89:9c:3b:ef:6a:5c:53:6c:f0:
                    ef:35:99:a9:9c:a2:59:39:db:8e:f4:1a:47:1d:6e:
                    e9:69:86:dc:fc:32:c6:5c:56:93:b3:a5:b2:43:df:
                    1e:0d:2f:42:88:74:8e:2d:66:08:d0:00:e5:7b:a8:
                    5a:5a:0f:f7:e8:13:64:ca:91:59:ee:b7:b2:82:68:
                    99:d5:53:2c:0e:ea:bd:ec:a9:de:6f:41:e6:2f:f4:
                    20:77:e5:f2:78:cc:86:88:45:95:0b:94:ec:55:72:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:AC:6D:39:EB:E5:C5:F6:0E:77:7E:34:A7:F5:C0:11:17:12:87
            X509v3 Authority Key Identifier:
                keyid:28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:8a:64:65:4a:f0:c5:9d:33:9d:c2:07:c6:f8:2e:d4:32:
         b3:36:2d:38:84:0f:2e:14:74:23:58:95:04:7f:4f:98:24:bd:
         33:ac:84:d4:2d:24:80:95:01:60:02:29:20:ee:a8:03:9d:b1:
         83:5b:45:0e:84:c7:55:42:df:75:f7:20:c5:e7:0e:1c:bd:e9:
         8e:99:34:84:d2:96:0f:3b:85:f4:22:2c:22:1e:0d:ee:13:e2:
         c4:25:b5:4c:31:bf:08:f5:b6:31:b1:ca:88:6a:fa:a5:98:ad:
         f7:7d:ec:5f:cb:04:0d:a9:0d:5c:3f:01:bf:e1:2c:b4:8e:46:
         72:4d:38:30:db:b1:5d:bc:7e:00:13:7c:05:0b:92:bf:79:aa:
         66:ae:47:b0:e0:55:fe:72:8d:23:46:07:25:45:e7:9a:02:4a:
         9c:3c:ed:9e:ad:97:7d:a2:70:8d:07:05:4d:d9:c9:3e:e5:bb:
         d3:a0:03:ee:b7:3c:25:99:37:a0:14:05:48:7e:46:d7:76:2d:
         7e:ec:94:93:34:6b:e2:d8:d0:aa:ed:bd:a0:99:24:d9:df:05:
         78:3b:bb:1e:39:ec:68:ff:a8:66:97:de:75:60:0f:ae:12:2d:
         f8:f6:f9:10:8f:e0:63:ad:ee:02:3a:5f:04:8d:06:57:53:64:
         d3:cf:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----