Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a3a2f33322d3332203d3e20323730383734.roa
File:                     323830343a373263343a3a2f33322d3332203d3e20323730383734.roa (raw, json)
Hash identifier:          CHyA32uEw5AbhpkGYPt9dTT+1FGqQaj9DCyKFLuccDk=
Subject key identifier:   C5:51:C7:04:AF:6F:79:F9:63:7F:CD:CB:4C:F3:DF:E4:C3:34:EA:83
Certificate issuer:       /CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
Certificate serial:       4068F8A639445328FC416904C3EE366D62A94872
Authority key identifier: 5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a3a2f33322d3332203d3e20323730383734.roa
Signing time:             Mon 13 May 2024 04:17:32 +0000
ROA not before:           Mon 13 May 2024 04:12:32 +0000
ROA not after:            Mon 12 May 2025 04:17:32 +0000
asID:                     270874
IP address blocks:        2804:72c4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:68:f8:a6:39:44:53:28:fc:41:69:04:c3:ee:36:6d:62:a9:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F384CAF597EE6AD61C526C86D22E586C1935FA0
        Validity
            Not Before: May 13 04:12:32 2024 GMT
            Not After : May 12 04:17:32 2025 GMT
        Subject: CN=C551C704AF6F79F9637FCDCB4CF3DFE4C334EA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:bb:8b:1d:12:dc:95:33:90:db:9c:d1:fe:
                    09:41:a7:55:95:75:cd:3c:b7:22:f4:b1:1a:98:96:
                    c1:6a:da:bd:35:24:4e:33:8f:44:2c:d3:2d:39:4e:
                    9e:fc:be:d7:4c:bc:03:8c:c8:21:c3:aa:12:01:74:
                    9c:71:d2:c9:83:c7:0b:bd:5d:e7:0b:1a:69:ef:5c:
                    06:81:37:f2:b9:f3:58:f6:db:2c:76:80:6b:1c:86:
                    75:98:c2:9d:9d:6f:d6:f4:cc:90:ee:c7:84:30:9b:
                    b7:f6:00:db:6e:f8:a0:c5:5b:ae:8c:a2:f1:51:63:
                    d4:18:dd:79:39:45:ee:3c:9d:7a:b2:69:61:84:e9:
                    ab:90:d5:4e:fa:1e:97:41:92:5c:b7:dc:e3:61:85:
                    4e:99:aa:b9:5a:63:7a:54:57:5e:d6:a2:dd:d2:f6:
                    ca:13:dc:5c:40:c9:dd:cc:64:cc:dd:9b:97:0b:e0:
                    0b:6f:aa:52:5c:f3:a3:2b:19:08:83:67:22:c5:8c:
                    00:36:ed:3b:37:60:96:87:fb:13:08:f6:43:75:3f:
                    3b:e3:5c:da:52:da:c5:c5:6c:0f:5c:13:a8:a4:f0:
                    42:ca:f2:6d:41:4c:2d:ac:9c:7e:1d:98:12:43:46:
                    f0:93:36:6c:01:a3:da:76:c0:11:22:ce:93:d5:3c:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:51:C7:04:AF:6F:79:F9:63:7F:CD:CB:4C:F3:DF:E4:C3:34:EA:83
            X509v3 Authority Key Identifier:
                keyid:5F:38:4C:AF:59:7E:E6:AD:61:C5:26:C8:6D:22:E5:86:C1:93:5F:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/5F384CAF597EE6AD61C526C86D22E586C1935FA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F384CAF597EE6AD61C526C86D22E586C1935FA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJvgz9KfoQYQAj5kKgJNqb2tUud5ayA4QqAmSGxevUdu/0/323830343a373263343a3a2f33322d3332203d3e20323730383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:1e:97:22:8c:76:fa:31:ad:4a:5a:21:aa:bd:64:16:d5:
         c3:77:8f:ef:ae:65:0a:91:fa:4e:2d:72:1f:ee:b7:4d:97:51:
         6a:d1:f8:b2:f8:a4:2a:e6:72:18:47:2d:d3:0e:88:9c:13:87:
         91:d5:57:34:b6:60:99:2e:c7:38:51:46:ab:55:78:bb:55:d5:
         3c:04:b6:6c:9c:3b:f1:93:97:e1:c0:05:15:18:7b:70:46:1c:
         86:70:3a:6b:b5:f7:be:b2:02:cb:e7:ee:62:8c:c2:fa:88:b8:
         e8:05:8c:15:ff:9c:ef:8d:56:74:2d:48:39:9e:0f:01:28:28:
         9c:9c:a4:5f:69:aa:09:16:a5:ef:c6:7d:a3:78:20:17:fd:df:
         3e:96:6e:4b:f2:6d:77:aa:9f:10:4b:5a:7a:4e:f5:fb:a2:73:
         4d:e5:b7:93:01:d3:86:6d:c1:69:fa:3a:e3:2a:00:02:44:52:
         33:bd:d9:ae:eb:c0:0f:07:c4:38:5e:5e:ce:ca:79:31:e3:0f:
         83:5f:39:f7:63:80:7a:0b:81:b0:9e:66:88:03:13:78:7b:06:
         d7:db:76:f9:60:36:c4:4f:07:ef:c4:73:c9:46:df:5d:00:2b:
         5b:86:38:9f:43:40:a2:f5:42:c7:0d:0a:57:3c:25:74:38:d7:
         2b:ff:e4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----