Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa
File:                     323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa (raw, json)
Hash identifier:          N1YO7vN6AibvqXWy7QZ/hhYrUX6GxkWy6ByyGIapfa8=
Subject key identifier:   CB:13:AE:B4:5D:C9:E0:E8:4E:BF:E9:3E:31:B5:8C:B7:93:14:85:97
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       0CC561EB85A9C9FE307F1C772129FD70753180DD
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:52 +0000
ROA not before:           Thu 04 Apr 2024 13:24:52 +0000
ROA not after:            Thu 03 Apr 2025 13:29:52 +0000
asID:                     263384
IP address blocks:        2804:1554:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c5:61:eb:85:a9:c9:fe:30:7f:1c:77:21:29:fd:70:75:31:80:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:52 2024 GMT
            Not After : Apr  3 13:29:52 2025 GMT
        Subject: CN=CB13AEB45DC9E0E84EBFE93E31B58CB793148597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:38:94:ec:fd:2e:93:26:61:fd:55:81:d9:
                    d6:da:9b:6a:02:af:bd:cd:48:0f:91:9a:32:1d:5e:
                    e9:a1:96:4d:f9:f3:c2:17:43:48:0e:c5:f7:9b:e6:
                    dc:98:dc:93:a1:e8:67:f9:a0:52:c0:e4:77:08:10:
                    0f:6d:d0:a4:ec:a0:1b:3a:10:39:63:cf:f2:3f:d3:
                    fb:f8:b8:72:76:bc:25:85:8c:1a:63:8a:4d:68:c5:
                    e1:54:fe:0b:05:48:62:f5:4f:32:99:b3:f1:90:98:
                    fd:5e:e2:e3:d5:e3:53:93:0a:7f:7e:7c:44:f8:89:
                    1b:60:e7:ed:99:09:6a:50:e9:ae:28:39:2e:dd:2c:
                    0d:33:31:f0:3f:ac:82:e3:e0:5e:ee:9e:2c:c9:68:
                    7e:fe:69:bb:dc:3d:f7:34:e1:7f:cb:2d:77:23:c2:
                    2a:71:ee:de:e6:09:34:de:e5:85:78:07:3b:a4:2e:
                    66:94:a5:57:4c:ff:01:d3:08:c8:c1:62:31:21:b1:
                    b0:02:d9:6f:0d:2a:a5:77:eb:70:21:e3:50:cb:6c:
                    f8:73:90:88:f0:15:4c:af:0a:b7:46:31:eb:de:b3:
                    a4:30:fc:1b:7c:c8:4e:06:6d:19:12:4a:6f:fe:b8:
                    cf:69:e0:cf:9e:06:49:f3:57:75:c5:86:78:ff:0d:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:AE:B4:5D:C9:E0:E8:4E:BF:E9:3E:31:B5:8C:B7:93:14:85:97
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a383030303a3a2f33332d3333203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:5c:72:25:d0:f5:fd:e8:ba:9a:21:a8:17:db:4c:b2:11:
         da:6c:16:aa:c9:61:1d:b1:a6:ee:52:79:a0:71:e9:45:a5:65:
         61:d7:9b:09:f5:75:df:78:f6:ab:b8:85:1f:22:04:f0:9e:5f:
         cb:3f:40:0b:c0:a9:e4:fa:57:06:c9:85:57:e5:b2:a5:4c:17:
         06:35:f5:84:57:27:28:e0:98:83:35:ae:d1:63:28:f6:7e:7a:
         99:06:a1:24:12:be:c0:c6:0d:f9:5d:21:7c:e2:49:24:98:94:
         cf:da:b1:f8:f6:5a:d5:31:d5:d8:1d:1f:70:b0:92:ba:aa:04:
         ce:3e:90:0d:1f:69:be:71:1b:d9:de:12:1e:a9:53:69:95:69:
         8a:9e:b7:2c:33:73:fd:f5:bb:a5:c4:12:39:c0:85:16:3a:99:
         bf:5d:f2:4f:7b:cd:e0:c9:5b:09:11:55:58:86:e2:73:cb:20:
         91:64:22:8f:e3:f9:83:ea:77:eb:4e:1f:d2:9f:8b:0e:ef:cb:
         ef:8b:3d:ce:3f:42:f2:3e:b9:97:01:a4:75:bd:d3:27:48:f8:
         1a:40:68:82:24:20:4c:ad:d7:f9:62:69:b6:97:ab:73:b5:f4:
         b1:0f:85:48:f0:cd:9f:0a:f1:4d:0a:6b:3e:99:82:6f:f7:65:
         9e:c3:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----