Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/323830343a333231383a3a2f33332d3333203d3e20323635303535.roa
File:                     323830343a333231383a3a2f33332d3333203d3e20323635303535.roa (raw, json)
Hash identifier:          gSN9dPDserwuNLBqMp55reTprBF3/wtSxI08mfAbmwI=
Subject key identifier:   DF:7E:80:61:B8:9C:5F:FA:75:83:88:2A:61:30:DC:3E:15:19:3D:39
Certificate issuer:       /CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
Certificate serial:       5B47FA801EFABFACBB5E7257B024818F37498640
Authority key identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/323830343a333231383a3a2f33332d3333203d3e20323635303535.roa
Signing time:             Wed 03 Apr 2024 19:11:44 +0000
ROA not before:           Wed 03 Apr 2024 19:06:44 +0000
ROA not after:            Wed 02 Apr 2025 19:11:44 +0000
asID:                     265055
IP address blocks:        2804:3218::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:47:fa:80:1e:fa:bf:ac:bb:5e:72:57:b0:24:81:8f:37:49:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
        Validity
            Not Before: Apr  3 19:06:44 2024 GMT
            Not After : Apr  2 19:11:44 2025 GMT
        Subject: CN=DF7E8061B89C5FFA7583882A6130DC3E15193D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:ad:be:e3:95:ce:6f:ba:bf:9f:04:ee:82:
                    6d:1a:0c:74:ad:35:ae:18:b1:53:06:9a:83:67:77:
                    8b:59:1a:51:d7:f8:c9:b9:31:91:4d:6d:4b:34:e7:
                    29:e9:53:5a:59:8b:6a:a0:64:40:1f:a3:f5:65:bf:
                    79:a6:09:06:3f:68:a2:9b:cc:2a:52:39:b5:9c:93:
                    fb:56:dd:ed:98:25:63:12:e8:a2:e5:f4:f9:56:38:
                    b7:16:34:e7:c8:cd:89:5b:f1:d6:67:83:e7:0e:e2:
                    80:9a:4c:69:26:35:65:ac:7c:f7:46:ba:1d:1c:f0:
                    89:0e:34:66:8c:e4:d0:31:a5:a4:a8:98:d0:8d:74:
                    50:28:a7:12:29:1d:02:0d:3f:8b:d8:8c:5c:6f:ca:
                    c8:88:21:8c:01:43:c5:49:67:96:c6:bc:fb:da:b0:
                    82:6d:45:a3:00:70:6c:08:e4:93:78:38:6b:ea:21:
                    16:08:56:b9:fe:d4:68:00:6e:93:74:2c:6b:5e:bc:
                    4a:50:bf:74:ff:b5:a8:0e:e1:88:64:dd:d4:1b:a0:
                    51:1c:af:91:5f:a3:f4:b8:41:e5:99:76:70:19:25:
                    69:93:0a:21:d0:e1:85:84:06:da:a7:b5:e0:74:bd:
                    8e:19:fa:16:3c:f0:ef:a3:40:7f:fd:b5:bc:d3:7c:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:80:61:B8:9C:5F:FA:75:83:88:2A:61:30:DC:3E:15:19:3D:39
            X509v3 Authority Key Identifier:
                keyid:23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/323830343a333231383a3a2f33332d3333203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3218::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:29:5b:05:94:b9:a0:78:50:d0:50:6a:10:67:ae:64:f4:0f:
         57:e4:1c:10:21:28:d2:66:ad:b2:50:cf:e9:33:9f:d7:8c:7c:
         aa:22:71:c9:9b:0d:b6:53:95:38:b3:f7:78:21:91:f5:b6:02:
         de:9a:e2:83:83:5a:60:63:8f:00:47:d2:2d:19:02:76:e5:8b:
         5a:7c:4f:5e:10:fc:2c:01:e0:8a:60:b4:2c:b1:95:3b:fd:6b:
         ec:52:43:a8:59:39:e4:e0:09:ec:be:e7:0a:0e:c8:bd:12:1f:
         2e:81:e5:ad:f1:3f:cf:da:92:1d:f1:b9:3c:c0:a5:82:41:14:
         36:09:5b:ff:93:a3:48:13:41:9d:b4:ba:e1:2a:19:20:79:41:
         e8:f6:d6:0e:47:09:6d:db:a7:ef:01:2e:36:dd:6b:56:90:18:
         b0:6d:fe:c7:93:07:4b:16:b0:0b:64:0b:d1:cf:da:6f:de:83:
         36:48:df:2f:ca:ef:e5:eb:5e:f3:a7:d3:89:6a:51:db:43:46:
         69:b2:08:b0:1e:36:2d:d6:d9:1d:4f:5f:9e:b8:d4:01:02:6e:
         36:5c:17:ed:6c:33:29:58:6d:f1:d5:8d:db:84:68:41:cd:ac:
         3a:09:d2:6b:85:28:78:be:a2:23:c3:5e:33:8c:36:c7:05:b6:
         51:aa:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----