Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/323830343a3361383a3a2f33322d3438203d3e203533313935.roa
File:                     323830343a3361383a3a2f33322d3438203d3e203533313935.roa (raw, json)
Hash identifier:          pbYj6L5nj6IZ2v0IcKzK3Zc1dWgkHmsjUx1Ft7lRj6g=
Subject key identifier:   E5:FF:10:B0:FD:19:DD:E2:57:BE:1D:81:F6:D5:DD:0F:A7:80:DB:9B
Certificate issuer:       /CN=C21506A6156B7F8310321D898139CEE0A28D6935
Certificate serial:       19A5DED20B3AF75698F69C9FBD79AF88A0FFCA5C
Authority key identifier: C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/323830343a3361383a3a2f33322d3438203d3e203533313935.roa
Signing time:             Wed 10 Apr 2024 13:30:26 +0000
ROA not before:           Wed 10 Apr 2024 13:25:26 +0000
ROA not after:            Wed 09 Apr 2025 13:30:26 +0000
asID:                     53195
IP address blocks:        2804:3a8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a5:de:d2:0b:3a:f7:56:98:f6:9c:9f:bd:79:af:88:a0:ff:ca:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21506A6156B7F8310321D898139CEE0A28D6935
        Validity
            Not Before: Apr 10 13:25:26 2024 GMT
            Not After : Apr  9 13:30:26 2025 GMT
        Subject: CN=E5FF10B0FD19DDE257BE1D81F6D5DD0FA780DB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:10:82:b0:2c:6e:fa:84:d8:b0:a1:9f:80:
                    0e:eb:bd:c1:32:26:b3:b9:33:62:66:20:56:25:ba:
                    8b:c1:54:e9:84:3b:74:12:2b:27:b6:c4:12:c2:21:
                    fa:55:54:6e:a9:4d:54:17:88:35:f5:42:b4:f0:14:
                    0b:94:ce:8f:14:b4:12:78:a8:f1:62:24:6d:c5:51:
                    6f:84:bc:34:eb:47:07:72:e1:c3:f3:41:67:8b:a9:
                    27:d7:6d:cb:6f:fd:2f:6c:e3:3c:b2:1a:ff:48:c8:
                    50:32:5d:3d:cc:dd:ad:cc:e3:56:bd:b0:b3:93:68:
                    84:65:56:f9:56:5a:77:02:32:35:2d:ba:c7:4a:23:
                    ab:2b:70:55:a2:fc:a7:ef:c3:3b:b1:ac:3f:de:5e:
                    60:c9:bf:1b:29:08:43:5f:62:bd:1e:da:77:ef:f8:
                    85:72:7b:08:f8:48:db:be:62:2a:ba:49:3f:b8:fe:
                    51:f1:a3:9f:ab:b2:77:40:37:98:9d:15:87:a9:02:
                    c0:43:ba:f7:07:57:27:cf:f3:58:fb:22:b8:3d:21:
                    f6:99:28:76:8a:fa:57:e1:d4:ba:31:6e:1e:ef:fc:
                    a0:b2:8b:09:73:8d:f5:47:d6:0f:48:d4:6b:11:d8:
                    28:f0:23:ec:b0:6e:db:24:11:76:ed:1e:d0:02:48:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:10:B0:FD:19:DD:E2:57:BE:1D:81:F6:D5:DD:0F:A7:80:DB:9B
            X509v3 Authority Key Identifier:
                keyid:C2:15:06:A6:15:6B:7F:83:10:32:1D:89:81:39:CE:E0:A2:8D:69:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/C21506A6156B7F8310321D898139CEE0A28D6935.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C21506A6156B7F8310321D898139CEE0A28D6935.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/1/323830343a3361383a3a2f33322d3438203d3e203533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:1d:cf:af:11:43:a2:10:1c:5b:04:dc:e5:eb:1c:76:97:
         e1:56:9c:d6:3c:c3:df:ea:93:8a:90:f9:70:5c:21:2b:f7:93:
         cf:28:22:09:6d:ac:24:79:d7:c3:61:c8:3e:71:94:0e:c4:7f:
         c2:b9:90:70:85:1f:f2:2d:1d:bf:38:bf:5c:f9:2b:50:56:91:
         4a:02:3a:da:20:e0:35:42:ae:72:02:5f:4b:44:84:b8:2b:61:
         17:53:88:4e:20:e3:3f:9a:49:44:28:66:bf:c2:7b:b2:71:7b:
         70:20:cc:64:b6:a2:fa:34:a8:7a:c2:25:27:ba:e8:20:8c:11:
         dd:42:68:c3:99:34:9a:74:15:dd:45:d3:88:b7:7a:e6:ed:d0:
         a8:4e:82:1f:f7:97:85:5d:9a:49:95:d9:cf:b3:4a:46:d8:77:
         85:3c:89:35:2c:5c:8d:70:c8:eb:51:00:fb:bd:8e:82:1f:3e:
         82:be:83:83:5e:fa:c5:d1:2b:20:32:7c:52:6f:5c:4d:a9:7d:
         44:46:27:e9:03:40:44:9f:8d:2e:a0:1c:d8:10:8f:42:0e:bb:
         17:1b:bd:b2:68:e9:67:9d:4f:2c:6a:3d:a9:2d:7e:80:34:09:
         c6:36:06:55:a9:51:c6:f7:f4:96:f9:29:70:a0:f1:76:b7:49:
         91:20:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----