Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33342d3334203d3e20323633313434.roa
File:                     323830343a313736383a3a2f33342d3334203d3e20323633313434.roa (raw, json)
Hash identifier:          n0TpTx1GXk4K3xU4LUrTm6KuAH5Qbo+cM4kNK613u5o=
Subject key identifier:   18:9D:F3:80:10:02:00:0B:F0:FF:0E:99:90:E2:45:C3:EC:A5:85:A6
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       61298A7BE0BE202FD1E5339D031FB6477757F39D
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33342d3334203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:03:00 +0000
ROA not before:           Wed 03 Apr 2024 23:58:00 +0000
ROA not after:            Thu 03 Apr 2025 00:03:00 +0000
asID:                     263144
IP address blocks:        2804:1768::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:29:8a:7b:e0:be:20:2f:d1:e5:33:9d:03:1f:b6:47:77:57:f3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:58:00 2024 GMT
            Not After : Apr  3 00:03:00 2025 GMT
        Subject: CN=189DF3801002000BF0FF0E9990E245C3ECA585A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:31:73:b0:ac:37:da:13:25:ef:f1:e2:93:
                    dd:69:3f:b2:ef:a0:5e:1c:1b:c5:b1:ad:13:99:25:
                    07:40:ea:cd:9c:ae:e8:f1:a2:45:8e:fd:1c:a5:fb:
                    95:90:75:49:45:46:e1:b9:2b:b9:b3:ce:48:a2:f7:
                    b0:2c:a1:00:1a:49:8f:24:92:1b:98:45:ed:6d:c9:
                    97:4b:e2:c1:69:89:5c:6b:5e:cc:eb:0f:62:1b:0e:
                    3a:e7:6b:10:98:0e:9e:60:1d:0f:0a:1e:71:61:39:
                    76:7b:2a:7e:bd:e5:5c:91:80:84:a8:6b:8f:0e:dc:
                    97:92:aa:32:5f:99:45:28:d3:40:d7:fd:3c:52:5d:
                    49:0f:b0:6b:e7:a5:d8:79:32:32:df:aa:7b:28:5f:
                    2b:0b:d4:09:37:99:5e:b4:a7:57:ea:2d:66:b3:d8:
                    b7:c6:53:f5:c7:ed:99:0a:fe:9c:9a:cd:a1:89:62:
                    c9:22:c4:6a:1f:49:06:a1:40:84:3f:10:6e:65:cd:
                    52:1f:88:64:20:01:db:c4:13:e0:01:a6:a2:fc:91:
                    0a:ac:73:e0:9a:8a:45:38:51:55:ac:b3:b9:c6:2f:
                    72:1f:64:82:21:08:a7:e9:97:52:4e:dc:3c:c4:47:
                    47:ed:6e:f3:8b:70:81:2f:25:d0:2c:12:79:8d:c1:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:F3:80:10:02:00:0B:F0:FF:0E:99:90:E2:45:C3:EC:A5:85:A6
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a3a2f33342d3334203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:d1:36:76:7e:78:cc:80:9e:7a:c7:3d:eb:f5:0b:46:87:
         38:59:50:cb:d4:be:7b:d0:93:58:ba:ae:7c:fa:89:5d:82:47:
         54:ae:86:b5:f8:8e:1f:ca:6d:30:d8:f8:b3:34:03:ce:16:8e:
         cb:b5:ac:a6:1f:e1:2c:d5:0b:1c:f9:6f:9e:2e:da:b6:59:26:
         43:3a:66:ad:a5:85:9a:4b:16:70:57:a7:87:cc:3c:5d:d3:6d:
         23:60:a5:ef:b4:28:39:ac:7b:9f:85:ca:a7:34:c7:31:77:18:
         d7:49:92:8e:42:80:02:db:ca:dd:35:47:5f:09:37:dd:19:59:
         7a:92:a8:47:2b:95:c3:c7:11:c5:b6:19:d0:9c:b9:32:cd:f2:
         77:17:b5:c4:02:ef:4b:fa:9e:d3:c8:2d:e8:6e:30:61:36:9d:
         52:5f:99:a3:d2:2b:f8:69:b2:42:ff:e0:3e:b8:bd:2e:0d:52:
         81:5b:97:41:23:3b:b9:2f:96:95:61:2c:13:13:c6:51:15:df:
         9a:ef:41:db:1d:64:19:12:14:b0:20:db:ff:18:c6:e3:0f:7f:
         6a:3a:17:a0:d2:b6:b5:56:66:28:0c:0d:4b:50:2f:55:39:8b:
         24:6c:02:55:21:f8:b5:8f:ce:21:33:79:b8:b8:90:86:d0:76:
         9e:21:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----