Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/323830343a383331383a3a2f33322d3332203d3e20323732313736.roa
File:                     323830343a383331383a3a2f33322d3332203d3e20323732313736.roa (raw, json)
Hash identifier:          HAOekHlhRlhi1enh4pPyaX+WDNmj2D9aKR3AWcUoAdo=
Subject key identifier:   7C:52:F1:E7:B8:74:50:41:2B:75:D6:ED:EA:B5:DF:BC:B7:74:F5:22
Certificate issuer:       /CN=5CB0D337B6247AB499A605FF2A3112EF674AC9FB
Certificate serial:       3C3146C45EE48906FAD4F4DC184B247AEEA02F6F
Authority key identifier: 5C:B0:D3:37:B6:24:7A:B4:99:A6:05:FF:2A:31:12:EF:67:4A:C9:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/323830343a383331383a3a2f33322d3332203d3e20323732313736.roa
Signing time:             Thu 04 Apr 2024 19:16:52 +0000
ROA not before:           Thu 04 Apr 2024 19:11:52 +0000
ROA not after:            Thu 03 Apr 2025 19:16:52 +0000
asID:                     272176
IP address blocks:        2804:8318::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:31:46:c4:5e:e4:89:06:fa:d4:f4:dc:18:4b:24:7a:ee:a0:2f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB0D337B6247AB499A605FF2A3112EF674AC9FB
        Validity
            Not Before: Apr  4 19:11:52 2024 GMT
            Not After : Apr  3 19:16:52 2025 GMT
        Subject: CN=7C52F1E7B87450412B75D6EDEAB5DFBCB774F522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:7c:8b:2d:58:31:50:63:90:a5:e5:64:67:
                    4e:4a:1f:1a:73:53:d1:4e:a0:7e:a2:9c:8e:1b:b1:
                    0b:ad:26:cf:2d:c8:28:8e:a2:d8:6c:08:dc:06:e4:
                    6d:2d:93:0c:32:70:7c:6e:ee:d2:ac:32:d1:f1:a8:
                    15:4b:fc:71:97:2e:d8:43:de:7b:a3:09:45:21:2e:
                    80:b3:70:fa:fa:bc:60:33:ab:56:34:63:c5:42:22:
                    54:b1:42:b2:74:ab:ea:16:05:4a:aa:71:4d:ab:0e:
                    7e:5f:8b:9e:8e:70:99:0b:c7:f8:2f:cd:6f:d0:43:
                    f6:8f:a3:6b:99:1e:c2:6f:8c:6a:8c:69:e0:68:3d:
                    0e:7d:16:5d:a7:5b:97:dd:de:13:dc:dd:56:98:36:
                    7e:fa:8c:84:be:2a:52:86:8a:ca:3a:da:5e:9c:e8:
                    44:19:b2:c0:dc:ba:33:10:15:2b:61:42:2a:22:01:
                    c2:08:15:08:eb:6b:7a:37:e7:c7:80:ef:c2:93:37:
                    e3:d5:ab:8a:1c:4e:82:79:10:52:7a:d3:87:be:e4:
                    68:23:32:2c:31:78:38:7f:a2:d6:fc:86:b9:0a:8f:
                    04:3f:9e:24:68:27:1d:90:c6:6f:6c:44:12:a6:44:
                    79:66:60:09:44:cb:d6:d7:78:ef:ce:31:50:b0:f5:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:52:F1:E7:B8:74:50:41:2B:75:D6:ED:EA:B5:DF:BC:B7:74:F5:22
            X509v3 Authority Key Identifier:
                keyid:5C:B0:D3:37:B6:24:7A:B4:99:A6:05:FF:2A:31:12:EF:67:4A:C9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB0D337B6247AB499A605FF2A3112EF674AC9FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/1/323830343a383331383a3a2f33322d3332203d3e20323732313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8318::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:06:ec:84:35:a4:00:e0:75:a5:fa:f6:07:75:7e:c2:b0:aa:
         f5:0c:fc:3c:02:8d:82:ce:c2:04:18:8f:c5:d0:69:43:60:39:
         82:6d:92:7c:44:36:02:17:89:63:3b:55:c9:7c:61:3f:04:29:
         6e:87:f8:2b:bf:16:d1:3e:ee:5e:f3:23:6f:ca:d3:1b:69:4a:
         9d:e2:3b:45:78:2b:df:56:80:ca:50:e1:a5:d9:46:55:25:e5:
         08:8a:ef:f4:66:21:03:56:c5:a7:c3:61:9b:32:4d:13:23:a6:
         7c:d6:cd:19:88:8e:ae:7b:06:0d:3d:a0:7c:dc:71:0d:e0:98:
         bf:99:57:20:bf:d2:48:84:98:9f:a7:d5:c2:48:27:4c:b6:d7:
         80:db:e0:4e:fa:82:b5:19:96:b4:c0:a2:ea:86:b6:1a:6a:42:
         b9:fc:c0:af:93:b4:fd:54:41:6d:ef:f5:ec:d6:8f:9e:ad:70:
         1e:89:9e:78:02:5f:05:97:38:43:93:4c:2b:ce:43:1f:9b:8c:
         ea:18:a4:1e:bb:96:5a:87:d6:b8:35:8e:85:a6:ee:85:6e:2f:
         71:c5:e7:24:9a:ee:ec:8a:ff:56:03:f6:ad:ae:b3:17:80:65:
         b8:5f:00:89:fe:91:72:9a:70:92:e8:06:2d:77:ca:c3:7a:1d:
         6a:0a:fc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----