Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33322d3332203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33322d3332203d3e20323633313434.roa (raw, json)
Hash identifier:          WmltvG2URXvoDNLYP5xbQ+yMGMreG1zjA9iOmmk2n4U=
Subject key identifier:   D7:50:84:94:50:F5:91:3F:CD:A2:C1:B0:EE:53:89:EB:33:18:6A:D1
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       54C8849C97E528A0C00818A212B185936535C636
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33322d3332203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:03:00 +0000
ROA not before:           Wed 03 Apr 2024 23:58:00 +0000
ROA not after:            Thu 03 Apr 2025 00:03:00 +0000
asID:                     263144
IP address blocks:        2804:1768::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c8:84:9c:97:e5:28:a0:c0:08:18:a2:12:b1:85:93:65:35:c6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:58:00 2024 GMT
            Not After : Apr  3 00:03:00 2025 GMT
        Subject: CN=D750849450F5913FCDA2C1B0EE5389EB33186AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:1f:e5:d8:ed:5a:88:a0:0b:4b:ec:a1:63:
                    8e:f9:2b:ae:da:57:ab:70:ed:25:d4:55:4a:2c:e5:
                    51:fe:71:c7:d2:03:24:ae:58:b4:d4:6c:78:0d:90:
                    52:a6:c0:36:46:94:fe:a7:39:20:f6:5c:43:ba:78:
                    4d:ec:4f:31:dc:ba:e5:63:27:1b:54:65:c8:fe:5b:
                    90:1a:66:56:93:01:27:b5:fc:c9:fc:35:52:89:ba:
                    17:4c:7b:78:b5:9a:38:6b:e7:de:e5:d5:05:a5:a7:
                    cc:c7:c7:0c:4b:d1:06:40:ad:b7:cf:e3:ed:6e:f9:
                    85:ca:ae:87:d5:3a:2d:80:1c:37:1a:8c:9c:f1:fa:
                    00:7c:65:ca:73:cf:8b:4e:77:2b:b1:75:4d:ea:6a:
                    b9:87:db:e3:f4:33:cf:7a:be:e9:17:ba:ed:6e:b0:
                    3a:2b:45:c8:b0:c0:b0:38:10:3c:e8:48:03:6a:45:
                    5a:e6:b9:13:d9:d0:56:b3:52:84:e2:40:b2:e8:b8:
                    46:e9:54:24:4c:c8:0f:9f:b8:13:0c:9e:96:3f:8d:
                    c9:8d:0f:7f:4a:e8:3c:89:8f:99:69:56:36:f1:5f:
                    f4:76:70:c1:ce:76:4a:bb:49:a8:43:de:2f:7a:27:
                    37:76:89:66:b3:33:89:c0:23:50:ad:dd:3d:81:83:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:50:84:94:50:F5:91:3F:CD:A2:C1:B0:EE:53:89:EB:33:18:6A:D1
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33322d3332203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:1f:52:39:0d:6a:fd:b6:1b:e3:31:88:2a:dd:37:b8:4f:
         ea:79:4c:26:c3:0e:80:63:6d:16:7f:08:37:99:74:10:28:5a:
         fe:48:f9:81:90:76:22:3c:ee:70:73:eb:48:f2:64:4a:79:1e:
         d0:8d:6b:36:6e:25:a5:b0:b2:10:0a:1d:67:25:60:61:65:ea:
         43:a2:d8:7f:bf:11:44:06:87:e6:83:50:78:54:e5:54:0f:7e:
         e8:93:5f:79:bf:63:51:dd:41:68:cb:bc:47:df:ae:0e:6e:b6:
         69:37:1e:83:d3:53:fa:e1:41:73:29:98:bb:fd:e1:92:70:52:
         38:20:3e:b9:0f:b7:6b:0e:71:2d:13:e8:2e:3c:e9:6c:0c:11:
         f1:8d:57:da:a5:9b:83:53:80:7f:6f:bf:d0:12:db:79:a9:11:
         7e:a1:7f:ed:17:e6:06:6b:b5:79:fd:71:20:d0:73:04:7b:4b:
         98:40:7d:ed:07:f1:dd:2b:d4:59:ab:5c:bf:a4:e6:51:0b:99:
         6e:d4:19:c4:2b:87:83:eb:89:a5:3f:c4:f7:a8:62:ad:49:69:
         be:de:0a:ef:cb:09:f7:1d:33:3f:42:26:07:bb:71:72:db:54:
         a7:c5:bf:a6:e4:84:73:cc:7a:3c:16:ab:6f:21:cc:f5:e7:f2:
         e3:49:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----