Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa
File:                     323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (raw, json)
Hash identifier:          et6/7VCKdjGjDi4yJ22vJW1jcyHdEZ4FPPra7kLMPRA=
Subject key identifier:   67:93:0E:86:11:55:7E:D0:55:83:D6:BE:32:43:59:CB:2C:AD:5D:FA
Certificate issuer:       /CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
Certificate serial:       346557D89FC1A1CD8BFB97A7ECEF225C9741BC6A
Authority key identifier: 78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa
Signing time:             Wed 03 Apr 2024 23:10:47 +0000
ROA not before:           Wed 03 Apr 2024 23:05:47 +0000
ROA not after:            Wed 02 Apr 2025 23:10:47 +0000
asID:                     269053
IP address blocks:        2804:5ebc::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:65:57:d8:9f:c1:a1:cd:8b:fb:97:a7:ec:ef:22:5c:97:41:bc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7809B770F256907DD528D90BF9096D8C2F05A4CA
        Validity
            Not Before: Apr  3 23:05:47 2024 GMT
            Not After : Apr  2 23:10:47 2025 GMT
        Subject: CN=67930E8611557ED05583D6BE324359CB2CAD5DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:ea:69:25:61:ec:c2:27:f3:f2:cd:8f:a8:
                    4f:02:e3:ee:cb:21:06:79:72:92:0c:df:c8:d7:9d:
                    50:ca:f7:d6:4b:c7:a7:0e:58:c7:a1:42:bf:41:c5:
                    b7:e9:ed:d1:db:72:f6:b6:a9:ed:cf:f1:88:a0:87:
                    d4:8f:b3:cd:9f:80:d0:cf:10:e7:dd:96:fb:0b:b1:
                    1f:99:82:1e:41:b0:89:68:f4:cf:de:ee:51:5b:48:
                    69:87:79:2a:a3:07:3b:7f:05:70:37:fe:9f:0e:60:
                    44:f9:bd:c7:59:5f:c1:2c:c1:88:31:72:d8:ce:ea:
                    42:be:f1:61:46:fe:c6:85:77:ee:9d:f8:28:d5:b4:
                    4e:a1:88:e3:c0:ff:da:14:68:04:bd:23:83:c2:a0:
                    62:e1:a7:d9:2f:96:a2:2b:9e:20:e4:21:91:8f:59:
                    a6:59:49:42:40:4a:d6:d1:81:d0:2f:18:3a:ca:4a:
                    29:2f:1b:fd:b9:2c:b2:e7:4a:4e:83:ae:ee:16:23:
                    f9:de:89:5e:dc:fe:7e:68:f5:f4:df:04:df:85:10:
                    f5:ba:a8:96:06:b6:f6:40:30:61:ce:13:44:cd:c3:
                    0a:f8:a6:ef:eb:2c:dc:2e:d1:ab:33:73:73:70:fd:
                    00:f1:5a:b5:a1:98:95:96:41:e6:1f:b5:28:09:1a:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:93:0E:86:11:55:7E:D0:55:83:D6:BE:32:43:59:CB:2C:AD:5D:FA
            X509v3 Authority Key Identifier:
                keyid:78:09:B7:70:F2:56:90:7D:D5:28:D9:0B:F9:09:6D:8C:2F:05:A4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7809B770F256907DD528D90BF9096D8C2F05A4CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/1/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:98:ba:8f:9c:a1:6a:7f:8e:c6:1c:47:d2:ee:66:e0:a9:
         f9:ee:27:e0:26:c7:48:40:63:6b:62:d1:88:6f:e2:eb:55:eb:
         b0:4a:7c:b2:4a:f8:5f:bc:0b:e6:49:4a:35:a5:76:91:bf:04:
         da:4f:e3:fc:03:22:65:98:59:c0:b2:46:9b:0c:97:64:84:80:
         4a:d1:e7:58:f0:b3:ca:21:47:e7:fa:11:3c:f9:03:4c:e4:d9:
         1a:07:76:f2:02:91:47:fc:df:67:ff:b5:ff:50:24:fc:fb:a1:
         8e:03:07:eb:5c:52:67:bf:99:e7:09:26:2c:16:d2:38:21:4c:
         ee:97:ab:32:dc:3b:35:c0:0d:1e:db:79:6d:3b:00:69:7d:e7:
         8c:c8:3f:70:82:8f:57:0f:10:64:ee:20:e1:ab:71:49:5e:6a:
         fb:31:d5:b7:f2:10:68:02:84:7d:c8:be:bc:3e:0a:b5:74:96:
         6f:44:95:c4:c9:47:16:aa:d9:70:32:52:0e:c1:fa:ec:a6:20:
         f0:33:ce:f7:e8:79:26:b2:b7:8b:53:12:f7:84:64:f1:2a:b3:
         e9:af:93:4f:4a:7b:0d:76:cd:b7:54:ab:b8:ca:9e:2e:a3:73:
         bd:5f:53:49:44:d3:60:8a:d7:e8:6a:6c:ee:d9:01:08:ca:f9:
         2f:b6:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----