Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa
File:                     323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa (raw, json)
Hash identifier:          HGEHgaEiWb4yEXHPQjBflZucLGBqV9cOoegVLmmkLSc=
Subject key identifier:   53:73:4F:A9:1C:69:23:01:86:6A:DE:35:28:D4:0F:47:89:D8:A9:D8
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       437426C72BA63127B916B543AFC855E54B8BEC7A
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        2804:531c:238::/45 maxlen: 45

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:74:26:c7:2b:a6:31:27:b9:16:b5:43:af:c8:55:e5:4b:8b:ec:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:27:6e:a3:28:d2:32:51:6d:4c:f1:0a:df:
                    29:73:4c:84:68:cd:8a:71:4f:0b:57:ad:17:5c:05:
                    31:ef:39:23:c1:97:cb:6b:d3:97:b2:dd:0f:16:0a:
                    e6:60:61:90:3a:bc:54:18:7a:ca:de:c8:fc:15:82:
                    ec:ee:d1:f1:ea:8d:8c:6f:9c:d5:07:4b:85:da:a2:
                    ee:24:f9:83:cd:65:f7:73:b4:cb:9f:b3:05:c6:d2:
                    a7:3f:ab:54:8d:1d:47:f8:4c:84:53:45:95:28:07:
                    19:0e:6c:a4:94:ed:4e:9f:ec:5d:e7:73:6b:66:4c:
                    d3:f3:23:0b:c8:a4:8c:56:e0:ae:0f:44:15:25:f0:
                    0b:32:82:42:1c:48:e2:4c:7d:fa:e8:20:b2:b0:1c:
                    6f:32:ae:67:13:56:72:d4:fb:4e:ae:71:78:8c:7b:
                    73:0f:4a:26:dd:80:39:05:2c:3e:ec:fe:9f:67:ec:
                    53:d4:d7:68:99:9f:93:c4:1f:c0:9a:5b:d6:85:2b:
                    f2:63:65:2b:1c:e3:7a:fc:17:8b:85:4b:37:23:c6:
                    5c:af:19:6d:6c:96:bf:20:ba:44:fa:c2:2d:41:b5:
                    45:93:b9:dc:be:1d:d2:6a:7e:fa:8e:40:5d:6a:9b:
                    6a:e3:6b:0a:b1:a8:0f:83:b8:d7:ab:53:24:6b:4d:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:73:4F:A9:1C:69:23:01:86:6A:DE:35:28:D4:0F:47:89:D8:A9:D8
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:238::/45

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:e4:df:99:b3:0b:a7:69:b6:77:46:c6:d2:ed:40:a1:ab:
         9f:45:4e:24:99:43:5a:db:7f:03:cf:b7:1a:7a:e0:8f:8a:bc:
         ac:1d:46:f3:15:ff:16:05:67:46:43:cd:5f:d9:99:3e:9d:0d:
         f5:45:72:09:12:ab:31:ad:fe:04:c1:9f:57:87:11:f8:32:75:
         bb:1b:90:f4:3f:b2:83:af:5b:24:98:95:02:23:6f:2f:4d:b3:
         9f:a7:45:e7:37:63:e9:b6:79:f3:39:11:18:31:01:40:49:f0:
         ee:ff:6f:78:9b:9a:df:c5:62:94:f5:11:b4:fb:92:05:72:9e:
         d4:22:4b:a6:41:2c:da:e9:38:c3:7b:2e:6e:b3:62:be:07:c3:
         70:f6:8c:9d:10:03:d2:c3:7f:32:ad:e5:db:96:da:7d:5b:b7:
         f0:80:d9:2e:5a:4e:6a:64:5c:49:0d:d2:a5:75:92:34:81:81:
         62:10:3e:ae:e8:df:3f:54:b9:6d:cd:a1:5d:df:54:e3:25:8f:
         23:0f:a0:89:54:2a:93:c7:7a:4a:82:51:5d:8e:2e:30:3a:81:
         a8:a9:de:c5:5f:d4:07:c2:02:93:c7:82:92:65:51:52:cc:68:
         31:87:1e:7e:9a:3f:2b:22:27:d3:a9:7b:bf:bd:66:db:d9:3b:
         70:b9:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----