Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3332203d3e20323633343730.roa
File:                     323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (raw, json)
Hash identifier:          owCdLOwHVFx8tCDUGSbJ5eszqm1pgCNjUXfFuGLKoTQ=
Subject key identifier:   DE:5B:0F:E8:F5:1C:E2:5D:BF:E7:4D:60:00:F5:5C:80:DB:B8:4B:FB
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       584AE88E96257577680823A69F304E8732BC9EED
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3332203d3e20323633343730.roa
Signing time:             Wed 15 May 2024 18:08:31 +0000
ROA not before:           Wed 15 May 2024 18:03:31 +0000
ROA not after:            Wed 14 May 2025 18:08:31 +0000
asID:                     263470
IP address blocks:        2804:1254::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4a:e8:8e:96:25:75:77:68:08:23:a6:9f:30:4e:87:32:bc:9e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 15 18:03:31 2024 GMT
            Not After : May 14 18:08:31 2025 GMT
        Subject: CN=DE5B0FE8F51CE25DBFE74D6000F55C80DBB84BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:f7:f3:98:6a:3d:d5:ea:5d:b2:3b:9e:ce:
                    15:11:ac:63:6f:74:8d:ea:57:20:c9:0f:38:da:b4:
                    c2:9e:12:2e:b5:cc:ef:51:b0:3f:42:61:08:d9:2f:
                    96:bf:cf:0b:f3:38:f6:6e:da:6f:9b:1c:2c:eb:50:
                    4e:38:4f:98:d5:02:b0:41:3f:f0:4a:3c:da:2c:5d:
                    1f:0b:ce:81:c3:0b:a0:a0:5e:bd:8c:d2:07:79:8e:
                    9b:bc:c7:5b:1d:1d:4a:6e:3b:5c:b6:f5:c7:f5:bd:
                    9b:1b:67:60:ae:a8:88:eb:41:51:77:70:0c:42:34:
                    3d:93:79:30:5e:63:88:3f:28:0a:75:43:d6:4a:bc:
                    5f:4b:b9:b6:67:81:49:65:12:a7:89:2f:40:69:72:
                    10:13:b0:0c:55:e7:62:7e:e8:4f:7f:39:c9:b8:55:
                    50:76:33:ab:49:7d:aa:c3:82:fc:15:2a:03:3d:6a:
                    20:ca:bc:2b:a4:7e:d1:7f:9c:16:3c:8d:ea:9a:96:
                    8d:95:bd:48:85:6b:7a:70:a0:06:24:0a:e0:84:0f:
                    a8:01:ac:a9:e5:d2:52:3f:d2:f4:52:ec:d2:41:37:
                    ef:bf:38:e8:96:c2:73:21:ae:f8:0c:cf:be:9a:26:
                    fe:1a:3c:e4:9f:4a:52:3c:03:f8:40:13:66:96:98:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5B:0F:E8:F5:1C:E2:5D:BF:E7:4D:60:00:F5:5C:80:DB:B8:4B:FB
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3332203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1254::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:53:93:c6:0c:41:0c:23:cf:1c:5e:ba:0c:ec:49:95:3b:
         1a:cf:87:b3:4e:fd:60:10:0b:c4:c8:6c:e4:0a:2c:04:d2:0f:
         82:aa:3d:ed:66:28:a7:63:7b:57:a7:02:b5:36:9c:58:5e:cc:
         d6:b1:39:f0:89:56:08:10:f1:11:02:8f:8e:94:5e:e3:05:28:
         04:b1:3a:77:34:94:a1:59:2f:03:0e:a0:22:94:df:8a:ff:21:
         79:11:59:5d:e1:2a:b1:7b:0c:00:ef:0f:24:7f:3e:0d:55:41:
         22:25:63:87:98:a4:4b:c4:25:dc:d4:68:ed:ca:b6:92:bb:4e:
         6e:ec:0b:98:48:96:44:03:ed:59:90:92:6e:de:1f:8d:1b:35:
         15:03:cf:ca:4d:ef:7b:2f:52:89:dd:60:93:07:5d:7b:7a:bd:
         b8:16:c5:cf:45:d7:e7:6b:1e:bd:f3:42:30:5c:28:b2:f3:ed:
         43:ab:d4:bc:a6:93:ab:38:04:c3:90:a1:4f:01:7a:ec:8a:84:
         a2:93:ed:47:40:31:e3:5e:cf:a4:e5:93:0f:11:fc:2d:cb:8e:
         ef:78:20:9c:55:86:95:5f:3f:cf:e9:f4:7e:8a:2c:5b:2d:eb:
         1e:ab:b8:69:a6:c8:83:d0:c0:ff:fd:a8:e1:a1:f0:59:14:95:
         00:82:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----