Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/323830343a363032633a3a2f33322d313238203d3e20323639313530.roa
File:                     323830343a363032633a3a2f33322d313238203d3e20323639313530.roa (raw, json)
Hash identifier:          tAuzVU5f3kUVh0p734RjINiflIIBLaiTbC1LcsIruH0=
Subject key identifier:   22:08:06:03:2D:17:C3:4E:04:04:7B:87:35:26:8C:92:35:9C:CF:82
Certificate issuer:       /CN=E7D836D65B0B513E88A8D2438552042B3E8B18C5
Certificate serial:       240050D5535808D45AA5AF2B5B9F59E1413DC8E8
Authority key identifier: E7:D8:36:D6:5B:0B:51:3E:88:A8:D2:43:85:52:04:2B:3E:8B:18:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D836D65B0B513E88A8D2438552042B3E8B18C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/323830343a363032633a3a2f33322d313238203d3e20323639313530.roa
Signing time:             Thu 04 Apr 2024 18:48:23 +0000
ROA not before:           Thu 04 Apr 2024 18:43:23 +0000
ROA not after:            Thu 03 Apr 2025 18:48:23 +0000
asID:                     269150
IP address blocks:        2804:602c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:00:50:d5:53:58:08:d4:5a:a5:af:2b:5b:9f:59:e1:41:3d:c8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D836D65B0B513E88A8D2438552042B3E8B18C5
        Validity
            Not Before: Apr  4 18:43:23 2024 GMT
            Not After : Apr  3 18:48:23 2025 GMT
        Subject: CN=220806032D17C34E04047B8735268C92359CCF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:2d:54:c0:7b:b1:f0:db:b8:f6:89:6b:51:
                    9a:4c:a5:87:35:6a:ef:66:d4:37:b9:da:bb:c9:82:
                    3e:29:e3:1b:14:0e:81:c9:79:2d:f7:f6:a4:64:8a:
                    67:7f:61:db:06:4c:1e:9b:10:95:5c:be:4e:9e:3a:
                    e4:14:4c:ef:ac:d3:38:fa:65:c9:d5:8b:23:20:d8:
                    3f:32:32:88:1d:60:c1:88:97:55:b9:1e:99:bf:46:
                    6b:31:ae:8e:a9:02:34:a3:7f:57:68:2f:cc:3d:bb:
                    66:6c:f3:24:cb:79:50:a4:3c:db:fc:1e:ce:e2:56:
                    ae:62:85:9e:a6:e7:62:f8:ae:0a:39:1f:21:f4:9c:
                    21:dd:5c:f0:38:40:b3:fd:b7:90:d0:72:43:0d:8c:
                    08:db:c2:7b:b2:8f:40:17:69:cc:bf:4c:d0:bf:b1:
                    ba:13:0d:39:76:bf:bb:bf:04:00:f8:aa:31:63:c6:
                    d7:c7:98:26:ad:0a:37:5c:92:44:c9:af:b4:5d:c6:
                    6c:da:ee:f9:6b:4b:ec:67:6e:66:e8:a2:08:9a:79:
                    5f:6d:fc:d7:a5:bd:8f:84:0e:52:e0:31:aa:31:c1:
                    ec:2d:7b:2f:6b:33:a1:b7:6c:10:a4:74:61:46:dc:
                    15:2a:4e:f3:78:e0:a6:04:90:be:21:32:b7:9b:8a:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:08:06:03:2D:17:C3:4E:04:04:7B:87:35:26:8C:92:35:9C:CF:82
            X509v3 Authority Key Identifier:
                keyid:E7:D8:36:D6:5B:0B:51:3E:88:A8:D2:43:85:52:04:2B:3E:8B:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/E7D836D65B0B513E88A8D2438552042B3E8B18C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D836D65B0B513E88A8D2438552042B3E8B18C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1tkFASNJPv4qCtBrZHJTuoc1KW4uaqPtxsqLddjpjdw/1/323830343a363032633a3a2f33322d313238203d3e20323639313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:602c::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:49:78:d3:61:1e:ef:c1:4e:bb:e5:7f:db:4f:4c:cb:86:
         5f:03:63:f0:4f:50:a6:1a:75:c6:d6:78:5c:93:52:ac:b9:3e:
         12:9e:a5:88:07:3a:10:20:9e:e7:1c:9f:10:35:a8:10:84:21:
         5e:79:58:32:a5:27:73:e7:1b:45:e0:f7:99:02:70:dc:56:22:
         5e:53:92:bb:7b:75:07:13:fa:b3:93:57:af:6b:c5:43:44:84:
         12:df:a0:3a:37:c9:27:86:0d:87:6d:52:64:5e:27:b8:b5:ad:
         f2:7c:08:60:03:1e:fb:11:54:88:f9:5e:4b:04:da:70:c5:5e:
         04:d3:40:57:84:f5:4a:cb:5d:92:dd:d4:35:e9:6e:77:a9:1e:
         83:43:45:4e:19:d2:29:e0:1e:a8:00:3c:4d:4e:34:6d:14:37:
         da:cd:eb:a1:02:ec:41:e9:61:6e:2c:30:b6:a9:02:53:10:51:
         21:6a:d9:f9:b0:08:26:75:ad:b0:50:16:da:b2:09:c7:92:02:
         8e:ec:ab:6e:df:f1:d1:47:44:f5:74:88:2c:54:30:3d:76:19:
         1e:50:63:42:c4:28:10:5b:4d:2b:c4:72:5d:fe:3d:bd:7c:a8:
         88:d6:1e:ba:ef:46:54:c3:f4:2e:e4:e0:fe:35:8a:a1:c7:72:
         8c:91:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----