Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa
File:                     323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa (raw, json)
Hash identifier:          ZFgHrhWAykOC205wG0ab43eog5gvSOdJvOl9MTQ9Lmo=
Subject key identifier:   5C:04:BE:40:27:5F:EF:83:FA:B2:47:B0:88:BB:21:B7:39:0B:43:A8
Certificate issuer:       /CN=E009CBEA2F489817D984A8C8B522736BD150142D
Certificate serial:       4E521099B3331194E1EFF21D162FF2508D94D4DB
Authority key identifier: E0:09:CB:EA:2F:48:98:17:D9:84:A8:C8:B5:22:73:6B:D1:50:14:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E009CBEA2F489817D984A8C8B522736BD150142D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa
Signing time:             Fri 17 May 2024 20:36:37 +0000
ROA not before:           Fri 17 May 2024 20:31:37 +0000
ROA not after:            Fri 16 May 2025 20:36:37 +0000
asID:                     271047
IP address blocks:        2801:80:39d0::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:52:10:99:b3:33:11:94:e1:ef:f2:1d:16:2f:f2:50:8d:94:d4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E009CBEA2F489817D984A8C8B522736BD150142D
        Validity
            Not Before: May 17 20:31:37 2024 GMT
            Not After : May 16 20:36:37 2025 GMT
        Subject: CN=5C04BE40275FEF83FAB247B088BB21B7390B43A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:f1:8e:b1:55:4a:67:bb:3c:af:06:47:c2:
                    8a:d7:a9:cc:eb:3f:be:bf:0c:0f:a2:85:cb:ad:cf:
                    a5:05:e6:27:1f:45:43:d1:6c:ed:69:99:77:37:b3:
                    d0:e5:f4:10:92:9c:5d:b9:ad:0d:98:48:89:26:15:
                    f7:2a:51:d0:11:75:85:92:be:f6:1d:b3:91:f3:0f:
                    dd:2c:59:aa:c0:bc:3b:57:05:7a:e6:ad:a0:a5:2d:
                    91:2b:18:68:62:f7:20:19:28:fe:4f:82:97:95:38:
                    d0:0d:12:d3:3b:bf:48:61:b6:f8:ca:ea:73:92:32:
                    71:33:2e:34:b9:f3:cb:1c:e6:3f:aa:fd:d1:27:40:
                    87:78:a9:56:21:68:8e:9e:64:d7:3f:e7:4b:42:a1:
                    ee:c3:4c:22:79:62:bb:57:6b:4c:81:48:a2:d3:2e:
                    60:81:bf:be:c6:c9:ac:e0:40:26:0a:ae:92:de:30:
                    9c:94:a2:8e:6b:72:25:88:e6:ed:f1:90:ee:73:a9:
                    8b:65:98:b9:4a:e0:1e:c3:79:17:16:c3:9f:8f:68:
                    45:c1:0f:f4:56:18:01:c8:e4:ef:f5:2d:b0:7e:b9:
                    ad:41:1d:b9:6c:2c:b9:cd:8b:f1:6b:4b:10:11:fd:
                    68:c8:f8:33:6e:1c:13:95:bc:1a:19:91:c5:e2:48:
                    7c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:BE:40:27:5F:EF:83:FA:B2:47:B0:88:BB:21:B7:39:0B:43:A8
            X509v3 Authority Key Identifier:
                keyid:E0:09:CB:EA:2F:48:98:17:D9:84:A8:C8:B5:22:73:6B:D1:50:14:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/E009CBEA2F489817D984A8C8B522736BD150142D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E009CBEA2F489817D984A8C8B522736BD150142D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/2/323830313a38303a333964303a3a2f34382d3438203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:39d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:28:df:43:38:31:ae:01:eb:97:f7:96:8b:b4:83:7d:11:
         4f:3e:68:0a:46:66:45:f3:e8:04:16:d3:63:e1:7c:5b:e7:eb:
         f5:29:fc:3e:91:f2:b8:43:88:cb:90:6b:34:92:14:78:00:18:
         4d:08:9c:0f:24:59:97:a9:e0:4e:ae:d6:04:b2:5b:af:c9:1e:
         94:2a:fd:6c:3f:12:b6:b3:46:f0:5a:44:80:c1:14:ee:34:91:
         e9:d5:12:14:59:a9:27:56:b7:9f:73:d2:1c:37:09:c7:75:eb:
         e1:31:e5:32:09:80:8a:85:e7:57:de:3a:94:ec:28:84:8d:38:
         03:f8:10:78:02:1f:1c:e1:4a:d2:d2:99:7c:f5:e3:2f:8e:c0:
         51:18:af:1a:e6:25:91:9c:52:a2:23:ea:46:38:90:ad:79:88:
         46:fe:0a:a7:7e:0c:c2:10:15:7c:0f:b4:66:6b:5e:85:1c:bd:
         9a:e3:f8:a4:87:c3:68:f8:c8:ea:bc:4f:67:7c:cd:71:1c:98:
         2c:ec:b2:49:36:89:17:50:7f:d4:71:50:d4:f6:a7:1b:fa:bc:
         15:5d:b1:f9:82:8e:ab:1a:8d:85:fd:18:b6:33:3c:22:b5:91:
         8b:37:95:02:08:16:ff:39:be:8a:95:1d:ef:76:71:93:af:8f:
         0f:d1:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----