Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa
File:                     323830343a356562633a3a2f33322d3332203d3e20323639303533.roa (raw, json)
Hash identifier:          F4vBHcPwoOPRe5loyqQs+gyzrAtFc2LGeSxv/t6njN4=
Subject key identifier:   B2:CC:8A:5D:37:48:3E:71:EE:F5:B7:71:73:72:CE:68:87:F9:59:B0
Certificate issuer:       /CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
Certificate serial:       34827A05AB6CC4B8EF0AD505AAE56EA15AF796C0
Authority key identifier: 78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa
Signing time:             Wed 03 Apr 2024 23:10:49 +0000
ROA not before:           Wed 03 Apr 2024 23:05:49 +0000
ROA not after:            Wed 02 Apr 2025 23:10:49 +0000
asID:                     269053
IP address blocks:        2804:5ebc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:82:7a:05:ab:6c:c4:b8:ef:0a:d5:05:aa:e5:6e:a1:5a:f7:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
        Validity
            Not Before: Apr  3 23:05:49 2024 GMT
            Not After : Apr  2 23:10:49 2025 GMT
        Subject: CN=B2CC8A5D37483E71EEF5B7717372CE6887F959B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4a:0e:b0:6c:88:b5:d8:be:a3:78:1d:d6:9b:
                    84:0e:cb:51:18:58:99:88:71:30:d2:53:a1:95:8d:
                    81:c7:16:16:a3:28:80:66:3e:47:a9:3e:25:f2:39:
                    55:24:4e:4b:ee:cf:8b:16:ef:8f:3e:f9:0d:27:7c:
                    7a:4c:62:05:57:d0:bd:91:5c:d9:6e:e3:d0:0a:15:
                    db:a5:1b:98:eb:fb:4c:33:9b:1d:43:db:9f:41:ea:
                    15:f4:b2:f1:32:42:f0:ae:29:70:f0:76:33:b4:fe:
                    18:20:2e:b5:4e:bc:fa:6a:8e:a4:71:a3:d5:95:ac:
                    79:ec:f7:c4:59:87:aa:bf:94:40:ed:50:53:3e:f2:
                    0b:bf:e7:ed:26:6d:5e:20:bc:1c:bf:40:cd:bb:fb:
                    b0:a5:19:a8:4d:d8:e3:50:6e:a3:54:52:4d:36:99:
                    aa:b5:8b:23:88:c2:af:9b:8f:00:ed:14:9a:ac:85:
                    57:5a:60:fc:47:e1:23:2d:02:c2:b4:92:71:38:40:
                    27:e6:70:ed:19:5f:bd:16:57:ff:21:9f:da:10:51:
                    2d:83:2e:37:40:af:56:17:b7:5e:3f:fa:ea:03:9c:
                    6b:b6:2f:62:1c:c7:54:09:20:30:49:3e:71:fc:b9:
                    ff:45:19:38:b7:ff:e5:07:23:1d:ea:e2:d3:7e:84:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CC:8A:5D:37:48:3E:71:EE:F5:B7:71:73:72:CE:68:87:F9:59:B0
            X509v3 Authority Key Identifier:
                keyid:78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a3a2f33322d3332203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:ce:72:0e:94:d0:3a:d4:92:d0:4e:b9:6c:b8:a9:b0:27:7b:
         a0:a7:62:59:c7:c2:b0:77:a6:b9:84:23:19:5b:c1:0f:b3:05:
         8c:c5:f6:04:b8:ce:49:6a:39:a1:c0:f2:62:09:61:8e:f6:af:
         5b:ad:a8:94:0c:bb:ab:40:76:93:35:6f:75:15:2d:fa:70:08:
         af:67:cb:67:ad:3c:b7:5d:cd:ad:2d:44:60:0c:a7:d6:85:00:
         d1:98:5b:06:97:c2:05:09:5c:5b:b8:d2:9b:7b:7c:c0:f4:f9:
         9a:36:65:ac:b7:88:d2:01:10:f0:fa:ef:cc:ae:c8:fe:b0:8c:
         a0:6d:5e:79:76:3f:d5:84:2f:34:db:d0:cd:75:c6:f3:24:bc:
         96:6d:ab:a6:af:27:57:2f:11:ab:0c:cd:f0:70:b7:37:36:fa:
         41:28:e7:82:13:fd:42:1e:99:16:61:c4:3d:ae:cf:c9:36:93:
         dd:75:62:64:43:da:e6:2e:16:ad:9f:44:64:38:41:30:4f:a8:
         00:ff:44:e2:30:5f:c2:76:82:6c:c6:15:80:a4:61:20:e2:72:
         b3:9b:ae:9f:93:b3:15:db:33:65:fd:85:fd:5e:b9:87:a0:59:
         e8:e8:0b:75:69:5e:e6:38:c0:d1:7b:bf:4a:e4:7a:63:9b:62:
         ab:e4:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----