Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a323130303a3a2f34302d3430203d3e20323731373434.roa
File:                     323830343a383035343a323130303a3a2f34302d3430203d3e20323731373434.roa (raw, json)
Hash identifier:          LKpHTFNFpRXrwnQMg1bLbSzxlc8kFVGtdXJJ++XQnMI=
Subject key identifier:   98:4D:F5:60:96:E9:98:BA:5D:02:EC:E4:91:03:A4:3B:72:33:1D:C9
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       31FC14A4DE9BF92BC0E8E789BF4634D86A3785E8
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a323130303a3a2f34302d3430203d3e20323731373434.roa
Signing time:             Wed 15 May 2024 16:08:46 +0000
ROA not before:           Wed 15 May 2024 16:03:46 +0000
ROA not after:            Wed 14 May 2025 16:08:46 +0000
asID:                     271744
IP address blocks:        2804:8054:2100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fc:14:a4:de:9b:f9:2b:c0:e8:e7:89:bf:46:34:d8:6a:37:85:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: May 15 16:03:46 2024 GMT
            Not After : May 14 16:08:46 2025 GMT
        Subject: CN=984DF56096E998BA5D02ECE49103A43B72331DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:e0:cb:c8:33:f3:f5:a3:06:5e:a3:c8:b7:
                    db:57:80:8e:65:f4:9a:b7:29:7b:93:81:82:ba:60:
                    f4:d4:57:66:c9:69:e8:30:06:8e:34:72:42:4b:42:
                    ac:e2:bc:c8:00:6d:b1:89:a5:dd:6b:fe:b4:07:78:
                    8d:1a:ac:58:56:87:ad:04:17:98:bd:36:0d:2b:38:
                    3e:37:0b:27:07:13:d5:fb:e4:e9:9c:88:95:42:2e:
                    a3:22:29:00:b2:37:7a:19:19:a1:2d:fc:1f:83:56:
                    2d:ad:82:3a:70:20:7d:58:84:84:9d:4c:50:17:bb:
                    35:ff:ce:a9:df:2d:b6:dd:5e:e3:c0:f5:22:65:6f:
                    bd:1f:f2:0d:bc:26:58:b1:aa:ce:06:3a:f9:9e:a7:
                    eb:af:84:1a:1e:9e:39:3d:d6:f3:98:a6:02:c0:e7:
                    b9:4f:2b:23:dc:39:53:90:c8:95:90:f9:fe:2e:60:
                    1b:88:60:d5:67:19:e8:24:d3:45:5b:0c:d7:2c:76:
                    22:5b:39:17:49:bc:37:51:ac:d1:38:97:25:8f:de:
                    bd:2f:e0:9b:13:4f:d9:73:73:15:f7:70:3e:3a:d0:
                    81:79:c4:9e:55:52:bb:67:32:83:78:f4:3d:a9:b0:
                    99:53:72:ca:94:8a:f4:ee:13:1e:36:69:67:1c:e3:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:F5:60:96:E9:98:BA:5D:02:EC:E4:91:03:A4:3B:72:33:1D:C9
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/323830343a383035343a323130303a3a2f34302d3430203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8054:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:23:04:b7:d2:9f:12:07:49:53:1a:41:4c:01:8d:c6:c3:0b:
         de:9c:64:c5:6f:bc:81:f0:a4:63:d3:de:71:c7:05:b8:fe:32:
         0e:19:00:59:79:86:a1:e2:d1:a5:80:11:af:37:25:4c:b7:f8:
         dd:ad:85:00:97:61:40:50:c8:5f:10:39:c6:9e:43:20:10:e6:
         b4:73:e4:3a:04:8f:db:e3:08:30:47:2f:45:37:f2:75:d1:49:
         75:41:de:7d:92:0c:23:73:7e:a8:e7:ff:44:1d:56:76:b3:c2:
         87:43:ab:b7:c7:32:cd:2b:53:6b:e5:c7:4e:3e:a1:9b:45:34:
         9a:16:fb:9b:13:ba:a3:1c:cc:e5:18:7a:12:f9:e5:97:c8:23:
         22:84:15:98:0b:b6:a7:d1:8e:4f:12:40:04:9b:e3:64:00:f6:
         f6:44:f5:67:b1:f3:b2:bb:56:23:6b:28:67:b2:0e:b3:89:1e:
         bc:d8:13:aa:d1:b4:63:14:ed:67:54:0c:58:19:02:6f:36:68:
         84:fb:8c:2e:a8:11:84:ad:c5:93:0f:61:fd:3c:a3:a3:01:f3:
         04:35:af:c2:dc:5e:82:13:0f:18:f1:60:d5:1e:c7:95:1b:79:
         4c:d9:9a:78:4c:68:b1:04:07:f8:02:c2:c3:af:3d:99:e7:15:
         e9:3f:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----