Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3a2f33322d3332203d3e20323638353634.roa
File:                     323830343a353331633a3a2f33322d3332203d3e20323638353634.roa (raw, json)
Hash identifier:          OU8PxFifZUr7ED8urxfnRSoO7P28qCA1pBRImWt2XxY=
Subject key identifier:   FA:3D:F7:E7:36:DB:D9:E0:77:3F:54:01:49:F0:97:E3:C6:E8:58:9C
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       79DEAAC235120B856EDAC2882B109EDD6EDF03B9
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3a2f33322d3332203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        2804:531c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:de:aa:c2:35:12:0b:85:6e:da:c2:88:2b:10:9e:dd:6e:df:03:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject: CN=3082010A0282010100BA1777C944C78ADA8B20DC1B889CF7AFE21989C2BAE7C1D06CAE141A71569865D4025B4C17DC6D848B60E828E5C8D4A88253A76CC0189E81D3C1C486232A7745CDA622C3643FA3D1C576CD4C1A55D3E9E7507038F05A58438B8FFAA4B90F8391BF696E47DC4DA468B4580C044571AEFE58500124910C9DB0F49B16F2AE8B5E05D33B81984282DFD13D57E46684002B433C6B1A1580D837EE680F916F4BFAA33BBF039ABA6B4FBAC29E2253DF981D20A49F9A9ED144E43350E65D02702A9758613E027766F114F1BFD59191B35ACA0D5A875FC97C4D4D5C459E8C4A02F7C27C18EA86EC110DCE9CCB10B8D98B61C1D88B2173DEE4DBEFB811EA834FBEF322DB6F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:77:c9:44:c7:8a:da:8b:20:dc:1b:88:9c:
                    f7:af:e2:19:89:c2:ba:e7:c1:d0:6c:ae:14:1a:71:
                    56:98:65:d4:02:5b:4c:17:dc:6d:84:8b:60:e8:28:
                    e5:c8:d4:a8:82:53:a7:6c:c0:18:9e:81:d3:c1:c4:
                    86:23:2a:77:45:cd:a6:22:c3:64:3f:a3:d1:c5:76:
                    cd:4c:1a:55:d3:e9:e7:50:70:38:f0:5a:58:43:8b:
                    8f:fa:a4:b9:0f:83:91:bf:69:6e:47:dc:4d:a4:68:
                    b4:58:0c:04:45:71:ae:fe:58:50:01:24:91:0c:9d:
                    b0:f4:9b:16:f2:ae:8b:5e:05:d3:3b:81:98:42:82:
                    df:d1:3d:57:e4:66:84:00:2b:43:3c:6b:1a:15:80:
                    d8:37:ee:68:0f:91:6f:4b:fa:a3:3b:bf:03:9a:ba:
                    6b:4f:ba:c2:9e:22:53:df:98:1d:20:a4:9f:9a:9e:
                    d1:44:e4:33:50:e6:5d:02:70:2a:97:58:61:3e:02:
                    77:66:f1:14:f1:bf:d5:91:91:b3:5a:ca:0d:5a:87:
                    5f:c9:7c:4d:4d:5c:45:9e:8c:4a:02:f7:c2:7c:18:
                    ea:86:ec:11:0d:ce:9c:cb:10:b8:d9:8b:61:c1:d8:
                    8b:21:73:de:e4:db:ef:b8:11:ea:83:4f:be:f3:22:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:F7:E7:36:DB:D9:E0:77:3F:54:01:49:F0:97:E3:C6:E8:58:9C
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/323830343a353331633a3a2f33322d3332203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:94:26:bd:37:1e:04:e5:db:45:8d:f1:1b:45:07:ad:fd:5c:
         a7:11:70:2b:67:4f:ce:f5:b7:df:66:13:08:97:b2:2e:69:d4:
         4b:1d:60:1c:35:32:ef:04:e9:98:25:d0:58:02:d3:5b:e3:a3:
         74:5e:20:8c:bd:58:84:c9:e4:8c:c8:99:72:f9:8d:d0:d9:05:
         72:6a:3f:d4:bd:7a:30:91:af:61:01:16:b4:5c:6c:b4:af:1c:
         58:7b:26:7f:95:fc:a2:92:e0:6f:98:fa:a5:fa:11:b8:97:43:
         52:a8:77:26:69:fa:dc:e0:b9:4b:52:59:ec:32:49:e4:a0:81:
         22:16:c6:62:c1:fe:1b:85:97:cd:1f:e7:8a:a3:8b:73:b6:92:
         f4:70:8c:c3:7f:5c:53:01:6a:a0:39:d5:bd:e3:6f:8e:e7:30:
         d9:a0:66:81:6c:74:96:b5:87:e5:14:41:3e:37:93:1f:01:7a:
         70:a9:df:da:2d:6f:18:58:59:de:fe:22:04:cf:84:b6:b2:78:
         15:af:3f:11:6d:03:64:6d:6d:f3:09:c9:22:bb:68:ed:75:8e:
         0e:80:9a:e6:81:a9:75:b9:0d:1d:2e:e2:70:52:3f:e7:6e:c9:
         d4:9d:45:a9:9a:03:36:9a:33:78:f8:42:af:41:fc:8b:56:96:
         93:90:59:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----