Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a3a2f33322d3332203d3e20323633333834.roa
File:                     323830343a313535343a3a2f33322d3332203d3e20323633333834.roa (raw, json)
Hash identifier:          CuVUgorRtQEyr++0wmd5y4WpMqJhRVKCqut1JyXH0/w=
Subject key identifier:   3F:E2:E5:18:6D:D8:26:F3:9B:D8:0A:AA:FE:8F:03:14:25:C3:C6:69
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       6D4B5F45B61679C1203C02002BC05ADD7E959559
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a3a2f33322d3332203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:53 +0000
ROA not before:           Thu 04 Apr 2024 13:24:53 +0000
ROA not after:            Thu 03 Apr 2025 13:29:53 +0000
asID:                     263384
IP address blocks:        2804:1554::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4b:5f:45:b6:16:79:c1:20:3c:02:00:2b:c0:5a:dd:7e:95:95:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:53 2024 GMT
            Not After : Apr  3 13:29:53 2025 GMT
        Subject: CN=3FE2E5186DD826F39BD80AAAFE8F031425C3C669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:27:b9:2d:9e:81:02:d1:be:29:2d:32:69:10:
                    97:64:0e:56:9a:35:6e:a5:7f:17:a9:b7:fe:cb:70:
                    39:78:9b:db:15:e7:3b:10:db:58:47:34:78:18:92:
                    71:a3:8f:2b:0f:7b:51:8f:8e:4f:fa:ae:cb:c5:fb:
                    fa:ae:8f:d7:f8:0f:6b:81:36:05:55:26:66:7c:e6:
                    60:13:ff:89:d6:ca:9a:a7:7b:9b:80:7e:f3:91:dc:
                    77:c0:85:60:02:8d:b0:73:8f:c8:0e:2f:44:da:d5:
                    d4:9d:09:d8:33:fd:b9:1f:1b:f4:6d:e1:bb:d7:54:
                    2d:98:a8:65:9d:7f:82:b7:ee:64:2e:ad:4e:94:2a:
                    cc:6e:22:f1:d1:8a:08:36:64:59:d0:ed:77:58:9a:
                    c6:22:5e:e8:8d:ec:5e:65:4c:f3:6e:44:34:94:29:
                    56:af:49:2b:4f:4d:f2:20:4f:e8:6a:42:4c:67:6b:
                    e8:f5:bb:aa:03:c3:9e:bc:fb:33:d6:fc:02:4f:1b:
                    7b:78:af:2d:c7:e1:50:a8:b5:c8:10:cb:33:28:4a:
                    2c:a8:2d:31:c8:7d:de:33:51:b9:57:7b:84:b1:88:
                    21:d0:65:ea:ed:4e:18:71:0d:39:b5:88:64:ed:d5:
                    e1:64:7c:c4:17:4b:88:ab:4b:99:29:a5:af:b2:5a:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E2:E5:18:6D:D8:26:F3:9B:D8:0A:AA:FE:8F:03:14:25:C3:C6:69
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a3a2f33322d3332203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:c5:59:ce:89:90:7e:bb:7c:93:cb:5e:58:c3:0d:36:2f:
         b6:7d:c6:22:94:94:b5:dc:3e:7f:a7:4a:93:c8:31:63:e3:ec:
         b9:11:9d:36:75:e6:22:3b:76:5b:96:79:fb:81:f1:ab:d2:8c:
         c3:33:ca:ee:8e:2d:e4:c8:a1:d7:58:5b:e7:49:89:ea:e4:54:
         9f:c6:0e:b2:ad:b7:c2:72:e6:ff:27:1b:d9:1d:c6:43:0a:ec:
         62:35:9d:de:57:28:0d:7d:69:61:de:6c:7f:46:6d:29:46:18:
         f1:0a:7b:36:2e:83:f6:69:a0:61:05:30:91:0c:7f:38:9f:0d:
         62:8b:a7:d5:b5:47:07:d8:91:c8:1a:71:46:3e:b6:3b:ac:f9:
         f7:e0:3b:e6:fd:e8:74:1e:1b:78:6f:69:95:9b:14:a9:03:5b:
         cc:48:12:5c:aa:80:42:1d:40:83:dd:b3:9b:6c:49:64:9e:d2:
         79:d6:cb:81:df:05:e1:0b:7b:df:39:60:16:69:74:c3:c1:d3:
         9a:22:4a:eb:1c:2b:4f:1d:f4:90:78:47:d0:6e:f0:b3:6b:b4:
         4e:3d:37:25:fb:24:57:19:ec:0d:b6:8c:60:5c:55:3f:08:e7:
         24:a5:f8:d5:06:3d:e8:be:56:23:6f:91:ff:d4:56:04:7b:7e:
         05:2f:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----