Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/1/323830343a316233383a3a2f33322d3438203d3e203631373136.roa
File:                     323830343a316233383a3a2f33322d3438203d3e203631373136.roa (raw, json)
Hash identifier:          VsCCkdrpH9UZKQOcGJkPwzcJt2iyIMZeKgYWqURup7Q=
Subject key identifier:   23:E6:F6:AE:F8:22:73:2A:C5:14:3A:B2:5C:DF:27:45:33:63:AF:8B
Certificate issuer:       /CN=9C4D6789615EE8AA63C414868D4404AA64592C04
Certificate serial:       59977FACEB352EDBD9A94AC4B8B60E52FFE04CCB
Authority key identifier: 9C:4D:67:89:61:5E:E8:AA:63:C4:14:86:8D:44:04:AA:64:59:2C:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C4D6789615EE8AA63C414868D4404AA64592C04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/1/323830343a316233383a3a2f33322d3438203d3e203631373136.roa
Signing time:             Wed 03 Apr 2024 20:35:16 +0000
ROA not before:           Wed 03 Apr 2024 20:30:16 +0000
ROA not after:            Wed 02 Apr 2025 20:35:16 +0000
asID:                     61716
IP address blocks:        2804:1b38::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:97:7f:ac:eb:35:2e:db:d9:a9:4a:c4:b8:b6:0e:52:ff:e0:4c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C4D6789615EE8AA63C414868D4404AA64592C04
        Validity
            Not Before: Apr  3 20:30:16 2024 GMT
            Not After : Apr  2 20:35:16 2025 GMT
        Subject: CN=23E6F6AEF822732AC5143AB25CDF27453363AF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:c7:e2:06:ce:1a:ed:cd:08:39:02:b0:6d:
                    61:bf:c2:35:b1:fb:5c:08:21:22:79:26:46:74:90:
                    2a:38:e0:e5:ad:8b:f3:c9:67:13:4a:9e:b3:7e:00:
                    1c:5d:14:48:58:ad:5b:8c:36:97:d4:f0:b4:f4:a9:
                    b0:7f:7e:fc:0c:8e:72:e8:cd:3e:9e:fd:8d:cf:91:
                    a9:91:2c:d3:e4:e8:47:8f:0c:27:62:ae:4a:dc:69:
                    52:e1:7b:9f:e8:8c:80:10:c4:4b:2c:86:21:5b:45:
                    23:99:c1:a2:df:ce:e6:f7:fc:31:8f:93:32:bb:ed:
                    0e:6a:fd:7b:3f:e9:0a:b3:2b:e6:15:79:6b:12:fe:
                    fd:40:2d:17:2e:0c:65:7c:d8:e7:71:94:d8:e0:d3:
                    4e:52:d7:a8:7a:bc:f8:a9:6a:02:79:80:2c:11:9b:
                    0d:d2:e4:21:96:12:c8:75:97:39:2d:6b:1b:35:1b:
                    0e:1c:63:9c:6b:8d:fc:c4:b9:a5:39:49:1c:6a:39:
                    bc:42:b6:35:0f:fa:b8:7b:86:d0:a6:6e:a3:c6:19:
                    40:b0:fa:53:c7:7f:c4:28:3a:f0:1d:13:98:12:4e:
                    30:b6:dd:34:2e:73:80:d1:c4:16:bd:55:8a:a2:33:
                    d3:47:70:2f:28:53:86:5c:5f:9c:0c:f3:a8:0f:1d:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:F6:AE:F8:22:73:2A:C5:14:3A:B2:5C:DF:27:45:33:63:AF:8B
            X509v3 Authority Key Identifier:
                keyid:9C:4D:67:89:61:5E:E8:AA:63:C4:14:86:8D:44:04:AA:64:59:2C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/1/9C4D6789615EE8AA63C414868D4404AA64592C04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C4D6789615EE8AA63C414868D4404AA64592C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/1/323830343a316233383a3a2f33322d3438203d3e203631373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:5b:f4:5d:7d:b4:a6:5f:c8:f8:f0:06:f7:77:8e:2c:16:79:
         f9:b4:b4:fe:af:c8:47:56:6a:d2:6d:88:a8:5a:09:89:30:9d:
         93:30:26:26:12:01:86:d6:bb:c6:5e:14:de:a5:c7:93:98:eb:
         a7:7c:44:6f:81:0e:8a:fd:57:1d:27:19:3c:a9:3f:3e:b4:9b:
         1d:4f:9e:a2:90:01:15:e2:41:53:86:ae:0a:b8:23:88:61:00:
         bb:04:81:23:5d:54:73:5e:ba:42:2c:3a:40:91:ba:43:cc:f4:
         9c:0b:34:05:69:ef:4f:d5:7b:32:3f:0e:9e:c1:4d:cf:10:35:
         ca:c5:94:24:c9:9b:d2:7f:64:f2:66:c0:be:e0:b0:47:07:ed:
         cd:87:c2:d2:4a:de:08:72:66:fa:7f:c6:31:86:e2:de:2a:13:
         6c:66:17:ca:a9:14:48:74:39:21:14:5a:d7:ff:c4:a1:61:24:
         23:c8:aa:40:38:81:8e:39:71:7a:b8:3d:c3:31:5d:e6:ed:10:
         b8:96:70:ad:ea:cb:a2:fb:34:f1:80:76:64:fb:8f:51:0d:09:
         24:1f:eb:51:9f:84:8f:5a:c9:a5:35:d4:64:0d:58:11:23:5c:
         82:11:38:ac:8e:cc:df:32:de:fe:99:30:f8:1a:9c:76:92:9b:
         b1:d3:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----