Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a3a2f33322d3332203d3e20323633393037.roa
File:                     323830343a323738383a3a2f33322d3332203d3e20323633393037.roa (raw, json)
Hash identifier:          kSyQbh4MQ2YfZmnATWzo1PPTFvFB9Rax/GBVj8jlCEY=
Subject key identifier:   F2:CF:63:A8:99:A2:30:20:70:5F:05:D3:4B:74:91:CA:F2:EC:03:5E
Certificate issuer:       /CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
Certificate serial:       2D0851CCE66241CC269F845DD55F63962B9ED1FB
Authority key identifier: 70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a3a2f33322d3332203d3e20323633393037.roa
Signing time:             Fri 05 Apr 2024 01:46:33 +0000
ROA not before:           Fri 05 Apr 2024 01:41:33 +0000
ROA not after:            Fri 04 Apr 2025 01:46:33 +0000
asID:                     263907
IP address blocks:        2804:2788::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:51:cc:e6:62:41:cc:26:9f:84:5d:d5:5f:63:96:2b:9e:d1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8
        Validity
            Not Before: Apr  5 01:41:33 2024 GMT
            Not After : Apr  4 01:46:33 2025 GMT
        Subject: CN=F2CF63A899A23020705F05D34B7491CAF2EC035E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:39:1a:b9:32:92:87:7f:c6:fd:b7:d5:bd:
                    c3:15:ad:74:3b:97:68:16:82:ef:bf:79:de:54:86:
                    4a:36:cb:62:4d:a2:7d:87:36:4c:5f:50:55:28:22:
                    58:3d:d8:50:e7:6e:e1:b2:cc:93:5d:43:93:d0:ad:
                    3b:77:8d:84:82:59:51:e6:9c:e9:f9:af:76:e8:50:
                    31:27:01:cd:ac:a4:7c:df:92:8b:91:3d:97:66:8c:
                    1a:35:50:66:e1:04:55:f6:f3:74:53:26:9b:cb:8e:
                    7c:bd:1c:c4:8a:a7:8f:c3:be:77:ee:2f:61:21:bc:
                    20:cc:20:ce:d7:90:16:78:70:5e:73:6a:f4:4f:8c:
                    4c:06:2c:32:e4:68:43:9e:e5:05:26:e0:35:4c:30:
                    bd:b7:68:00:f3:74:0f:d0:21:e5:5b:a3:71:8c:58:
                    bf:e0:64:71:f6:48:39:02:90:e7:5b:71:11:8e:ba:
                    98:52:5e:13:f7:4d:60:cc:27:fc:5f:30:8c:87:89:
                    a3:fc:29:c5:48:b6:40:1a:d2:32:1d:10:57:53:79:
                    d3:31:ed:10:ee:9b:44:4b:70:75:2c:a5:07:0a:21:
                    ae:f7:89:f5:ca:44:d2:bc:7c:8a:60:4c:14:e0:e4:
                    5b:85:32:33:d8:a2:5d:f4:dc:1b:cf:8b:1a:d0:15:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CF:63:A8:99:A2:30:20:70:5F:05:D3:4B:74:91:CA:F2:EC:03:5E
            X509v3 Authority Key Identifier:
                keyid:70:B4:5E:86:AB:E3:9A:BA:1D:5E:61:7D:4A:8B:BC:F3:48:51:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B45E86ABE39ABA1D5E617D4A8BBCF348510EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/1/323830343a323738383a3a2f33322d3332203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:59:0b:ae:9f:d7:8e:63:d5:c7:d9:c5:63:1d:65:07:0f:
         17:78:b5:c6:7f:c0:9f:f8:11:80:e1:50:c3:d9:71:a8:91:dd:
         cf:82:8d:a7:bb:6b:5c:6f:d8:3f:5c:8e:b4:7f:f5:9b:d4:34:
         d2:63:42:33:89:36:71:94:ed:9c:c6:ee:ae:31:85:c8:ca:51:
         dc:e8:2e:0d:ad:0f:4d:63:1a:21:e8:86:86:c6:e7:82:3a:c4:
         10:f9:3f:8b:e1:6e:9e:8f:0a:1a:e2:7e:39:d0:ce:80:a8:dc:
         fb:e2:e2:ea:57:01:a3:cc:c8:49:a1:57:db:94:47:f3:87:34:
         9d:29:0b:66:83:3c:bc:74:dd:8f:ea:80:5f:3a:52:76:8e:a8:
         b7:4e:57:94:9a:f0:8b:8a:37:33:47:06:a0:ae:25:6d:e4:35:
         0d:7a:e9:e1:b0:a0:a1:7a:78:ff:8f:f3:59:03:61:9a:a3:91:
         2d:72:bb:fc:64:8e:80:db:d5:2f:61:c9:8f:ca:67:51:b0:05:
         76:e6:cb:8a:04:15:ee:d0:64:4d:39:e9:74:07:6b:8d:e3:0c:
         40:b7:64:16:e6:a2:28:2a:f7:51:8d:5e:df:54:3b:85:7d:cb:
         fe:8e:52:4c:9e:3a:16:3c:e5:1c:73:83:f8:a2:84:85:ba:e8:
         3d:45:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----