Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa
File:                     323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa (raw, json)
Hash identifier:          OJW2S2ZBqS3mt8h/H4640XjypK5cMYAY0WGMIARbHl8=
Subject key identifier:   99:D0:4B:7C:50:C2:62:C6:08:5C:D9:F8:F1:1F:15:14:AD:4B:97:D0
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       2C134CD4282414C5B5D403D45860B1B1C11540A2
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        2804:531c:230::/45 maxlen: 45

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:13:4c:d4:28:24:14:c5:b5:d4:03:d4:58:60:b1:b1:c1:15:40:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:b8:e8:03:e9:67:ef:ab:51:94:f5:db:39:
                    b8:68:43:b5:05:f3:e0:de:f0:31:45:2d:79:a2:b1:
                    83:bb:a0:66:aa:1b:33:fd:f5:b9:8a:f9:b9:b4:bb:
                    dc:1a:8d:1e:1a:3b:1a:a2:49:bf:09:e4:e0:31:28:
                    88:41:15:f8:a0:f8:07:c7:31:27:4b:32:08:79:fe:
                    a2:34:c2:15:87:b4:f4:6a:a1:64:5a:fd:b6:58:60:
                    40:c8:3e:9c:d0:6a:68:bf:8d:9d:02:8f:3c:c8:5b:
                    5b:c1:8a:c5:86:3c:d1:73:81:0c:ab:0d:61:45:ea:
                    fd:04:24:7c:71:ff:1e:e3:dd:6d:73:31:5d:f7:b1:
                    62:71:49:8c:85:ab:74:0f:85:07:2c:4e:1f:c2:12:
                    c1:05:f4:91:85:5c:53:02:e2:92:48:00:07:5d:ac:
                    e2:1d:51:42:4f:6c:b2:b3:c6:c2:97:bb:18:45:2f:
                    c8:8f:2f:5b:c5:f1:f6:cc:66:d2:44:91:82:ba:a5:
                    0d:6b:27:4e:01:66:7a:1e:7b:55:e8:c5:30:4e:f6:
                    54:ff:88:5b:68:f7:cc:d1:07:dc:f7:f8:94:05:ae:
                    93:03:dd:f3:54:f2:f5:21:db:0e:19:4d:1a:fc:fc:
                    fa:73:b9:2a:4e:55:3c:2d:dd:03:b5:fd:55:87:bf:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D0:4B:7C:50:C2:62:C6:08:5C:D9:F8:F1:1F:15:14:AD:4B:97:D0
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:230::/45

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:d9:79:8d:ec:a0:67:11:0f:5b:ff:4e:6b:96:a4:11:19:
         c0:63:fd:b1:83:8c:ee:68:6c:0f:51:47:38:6f:ac:d1:15:12:
         a4:be:fe:11:73:7a:e7:d9:05:a2:66:6e:37:07:a1:ed:46:1f:
         c3:2c:88:10:7b:55:cb:27:78:9c:9d:96:7f:6c:1d:65:1b:55:
         b0:15:af:26:00:4f:82:b2:0c:0b:3a:15:c1:cd:cb:66:7f:54:
         a5:14:56:5c:b6:ef:f4:5f:49:28:a9:df:40:23:76:d0:ba:a4:
         a9:bb:a0:66:ce:3c:ac:d9:66:ec:cc:da:3d:8b:bb:17:ca:72:
         6c:e1:6a:d6:6a:af:f2:69:b0:6e:41:7d:a8:53:96:73:a0:4b:
         eb:b8:ca:5e:20:25:9d:63:7b:a9:db:d1:90:6a:f1:9a:d9:58:
         9f:1c:d6:3d:93:a7:13:81:85:04:45:04:85:6d:8e:82:00:53:
         1f:6a:82:2b:0c:40:68:2d:87:36:a6:dd:3d:41:27:e9:b0:a5:
         96:da:8a:82:d7:17:51:67:34:a2:1c:4b:c9:71:ba:08:55:a5:
         fd:ae:77:a4:89:c3:83:11:0a:b6:88:22:82:64:ec:0c:de:f0:
         6a:40:cb:19:27:86:e1:d2:68:5b:4f:db:0a:60:dd:e2:34:ee:
         58:ad:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----