Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33322d3438203d3e20323638353137.roa
File:                     323830343a353236633a3a2f33322d3438203d3e20323638353137.roa (raw, json)
Hash identifier:          +7GDtpcjjKs0A612fivQpDMgSR06k4upklwxjp0DkuE=
Subject key identifier:   6F:C5:40:86:0F:4F:DB:EC:A5:7F:4D:68:3F:55:E9:18:25:2A:1F:D6
Certificate issuer:       /CN=D9D49EEBD290A2DD3F7C385715AD61CCCDC8BF5A
Certificate serial:       35693125D7AC2179A830927CD80F7A4A8E3EB581
Authority key identifier: D9:D4:9E:EB:D2:90:A2:DD:3F:7C:38:57:15:AD:61:CC:CD:C8:BF:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9D49EEBD290A2DD3F7C385715AD61CCCDC8BF5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33322d3438203d3e20323638353137.roa
Signing time:             Thu 11 Apr 2024 10:41:48 +0000
ROA not before:           Thu 11 Apr 2024 10:36:48 +0000
ROA not after:            Thu 10 Apr 2025 10:41:48 +0000
asID:                     268517
IP address blocks:        2804:526c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:69:31:25:d7:ac:21:79:a8:30:92:7c:d8:0f:7a:4a:8e:3e:b5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9D49EEBD290A2DD3F7C385715AD61CCCDC8BF5A
        Validity
            Not Before: Apr 11 10:36:48 2024 GMT
            Not After : Apr 10 10:41:48 2025 GMT
        Subject: CN=6FC540860F4FDBECA57F4D683F55E918252A1FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:69:f8:fb:d6:7d:e6:8f:ef:94:28:ce:37:
                    c1:be:5c:b3:36:b9:07:e9:5a:72:08:cb:25:1e:bd:
                    b9:e8:d0:e6:8e:c6:1d:fb:09:71:42:00:13:02:54:
                    9c:dc:e6:07:c1:07:c9:9f:f1:d3:47:30:33:35:37:
                    96:64:ac:c5:6f:11:3c:42:f5:f7:a6:f4:d0:5e:58:
                    5e:78:16:35:26:3f:4c:48:a0:41:65:2c:f4:1d:cb:
                    87:96:7c:20:86:e6:7e:af:d4:dc:1f:9d:8b:0e:21:
                    03:a3:b0:d4:05:93:73:33:57:a0:e5:db:f8:47:04:
                    e0:ae:01:ac:a7:c1:16:dc:f5:5a:df:f9:42:3b:1b:
                    fb:a4:45:12:f4:b2:69:d6:98:74:a6:a8:fc:66:2f:
                    dc:2e:3c:ac:33:6c:16:07:b4:6c:b2:ca:eb:6e:fd:
                    22:1d:ee:ac:f5:a0:46:ab:0c:72:44:17:6f:71:59:
                    0d:bf:4a:ca:21:c0:e3:16:41:21:9d:5a:5b:66:72:
                    80:e6:b2:3d:8f:a3:94:f0:7a:9f:fe:b8:79:82:13:
                    eb:91:74:3a:4c:6b:b4:38:62:b7:a4:27:f5:f2:78:
                    e7:8f:23:93:6b:95:81:f5:a5:da:4b:fc:3e:aa:dc:
                    fa:0f:f7:4e:9b:e4:9a:a9:d9:a9:f1:d2:9d:1d:39:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:40:86:0F:4F:DB:EC:A5:7F:4D:68:3F:55:E9:18:25:2A:1F:D6
            X509v3 Authority Key Identifier:
                keyid:D9:D4:9E:EB:D2:90:A2:DD:3F:7C:38:57:15:AD:61:CC:CD:C8:BF:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/D9D49EEBD290A2DD3F7C385715AD61CCCDC8BF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9D49EEBD290A2DD3F7C385715AD61CCCDC8BF5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33322d3438203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:526c::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:ef:c2:49:1a:b4:95:e8:0e:50:ef:93:c1:4a:77:e2:9a:
         ae:73:28:fb:3d:b8:b3:75:42:e6:1c:d3:da:0e:19:7e:75:e7:
         4e:f1:cc:3a:1c:30:4f:d6:29:61:e9:5a:04:23:50:c5:21:4c:
         27:c6:31:1c:ed:33:a2:33:e3:80:b8:24:33:cc:c8:a5:6a:20:
         a9:7f:ce:bd:15:f6:27:49:58:04:06:bc:95:e6:a1:80:f8:bc:
         b0:48:9b:97:46:13:a8:9e:8a:6f:57:71:12:2e:73:6a:cb:fc:
         e2:d1:4f:78:16:cf:48:cd:70:de:82:0a:3b:4c:19:9b:71:e4:
         ec:4b:98:b6:22:b0:8e:b0:f6:43:ff:0d:06:cc:4e:db:10:1b:
         9a:c1:fe:29:f5:ed:5c:af:7e:0e:e2:39:99:ce:2c:69:1b:b9:
         14:54:ac:fa:ea:7c:d1:84:67:11:67:5f:f8:93:0d:f4:e7:0a:
         b3:6c:ce:fb:67:d8:9d:cc:ad:06:64:57:4a:e1:8c:5f:c1:90:
         87:d6:a5:9f:c6:1a:fb:df:c6:db:bc:4b:90:dc:76:cd:21:2a:
         dc:04:08:6e:c4:b1:5f:cb:f3:ba:81:d9:a4:99:e8:e0:37:bc:
         0a:94:d0:2a:5d:a2:3d:14:59:ad:43:64:02:e6:83:41:2a:fb:
         00:14:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----