Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a3a2f33332d3333203d3e20323633333834.roa
File:                     323830343a313535343a3a2f33332d3333203d3e20323633333834.roa (raw, json)
Hash identifier:          1A/9TWjiwWiwWA+EQLkLhGBFt7RifhVdpDX2o6bIfwA=
Subject key identifier:   D7:2B:B5:2E:FD:D6:76:09:4A:5A:C0:46:EA:0C:52:76:2F:A1:F4:00
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       3AD66A99F7B2DECF1344AB5FAD54B1123CF53F8E
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a3a2f33332d3333203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:54 +0000
ROA not before:           Thu 04 Apr 2024 13:24:54 +0000
ROA not after:            Thu 03 Apr 2025 13:29:54 +0000
asID:                     263384
IP address blocks:        2804:1554::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d6:6a:99:f7:b2:de:cf:13:44:ab:5f:ad:54:b1:12:3c:f5:3f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:54 2024 GMT
            Not After : Apr  3 13:29:54 2025 GMT
        Subject: CN=D72BB52EFDD676094A5AC046EA0C52762FA1F400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:df:58:ac:68:4a:b4:ab:f5:15:08:c6:0f:
                    5d:f6:65:af:1b:43:ff:1c:e1:f7:5e:e9:2c:8c:22:
                    ca:b9:b2:4a:ba:1b:e5:5e:ba:fb:10:03:b1:8b:95:
                    4f:af:6e:fe:84:6f:14:3c:bd:35:ad:ed:82:7e:10:
                    da:b5:c7:84:3b:58:7c:c3:4f:7f:8d:0f:40:85:55:
                    a2:79:f2:a1:25:37:6e:35:11:1a:a5:bc:88:cb:d2:
                    24:ba:02:b2:7e:17:86:5a:f6:a5:53:95:2d:69:7b:
                    8a:4a:d1:51:27:4c:eb:1f:04:f5:8f:e6:03:00:ad:
                    cc:93:9d:ab:5f:d5:80:0c:23:de:a0:91:2f:0d:d5:
                    7c:64:e7:9a:75:fe:84:a9:8d:1f:37:22:3c:22:40:
                    2f:4b:2d:74:86:4f:e5:85:54:f1:33:ca:38:e9:54:
                    d8:bf:4b:f4:f0:d9:70:28:c1:2d:89:df:8c:47:50:
                    4b:06:27:d0:20:87:92:e5:0d:4b:91:c3:67:d4:45:
                    8b:7f:2c:57:d1:5e:71:85:8b:7a:5e:4e:a0:03:6d:
                    f8:9a:eb:65:c1:b9:db:52:dd:d7:e9:eb:a3:dc:91:
                    d3:8b:eb:d5:ec:5e:41:b1:c9:22:cb:52:9f:bd:0e:
                    1b:2f:cf:74:9f:73:a7:dd:8d:40:ce:01:d3:79:69:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:B5:2E:FD:D6:76:09:4A:5A:C0:46:EA:0C:52:76:2F:A1:F4:00
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/323830343a313535343a3a2f33332d3333203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1554::/33

    Signature Algorithm: sha256WithRSAEncryption
         de:03:9a:e5:33:a8:65:4d:bd:90:e5:67:f0:19:e9:a1:be:4c:
         f2:13:e0:57:3d:59:16:55:56:1a:3a:46:87:91:39:48:d9:01:
         a0:52:d7:da:cf:c0:cc:8c:19:a5:e3:94:9b:ac:0e:7a:f0:09:
         55:bc:38:84:fa:89:bd:24:1f:83:b4:c5:bf:64:ac:eb:fc:67:
         27:a4:33:13:bf:5f:ad:08:86:08:a8:fa:1e:4b:3a:16:d9:46:
         36:0f:7b:d1:2d:28:aa:23:e4:0f:37:a8:3b:81:3b:de:ae:75:
         e5:87:93:78:05:d8:60:47:04:55:31:b2:1e:f8:b6:f8:a2:bb:
         dc:0f:34:63:5f:92:3d:69:07:17:37:a2:5e:20:57:4a:b0:fa:
         63:60:ce:db:ed:e7:b5:4f:7d:b0:5c:ec:1f:45:82:94:d8:ef:
         a9:30:e8:14:14:6a:5e:6f:9e:70:ae:75:33:3d:53:ba:d2:f5:
         92:ed:6a:b6:de:4b:76:64:6e:4d:ab:67:21:91:ba:80:21:b9:
         1a:24:e1:fa:cb:bb:64:72:2a:68:06:3a:87:ed:c7:22:a3:cd:
         c8:99:02:01:6a:a7:b7:a1:52:56:c8:07:49:84:e0:6f:fc:2f:
         6d:0a:aa:de:70:2e:3b:53:27:e2:15:7e:5a:36:3a:4d:39:2e:
         98:95:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----