Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/323830343a356136343a3a2f33322d313238203d3e20323638373730.roa
File:                     323830343a356136343a3a2f33322d313238203d3e20323638373730.roa (raw, json)
Hash identifier:          kozfVD6UNeQG6WehqQSul+kwbV3xKll2dYrWx/XG3vE=
Subject key identifier:   A3:C6:03:C9:1C:FD:F9:2B:A6:21:E5:64:8A:CA:FC:44:42:F9:DD:9B
Certificate issuer:       /CN=09A777C93AD197CE3C74B4E53C10D9AA6E308485
Certificate serial:       4C4DE3A6B04CA1A43BEE477BB2EE0C4FE4954197
Authority key identifier: 09:A7:77:C9:3A:D1:97:CE:3C:74:B4:E5:3C:10:D9:AA:6E:30:84:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09A777C93AD197CE3C74B4E53C10D9AA6E308485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/323830343a356136343a3a2f33322d313238203d3e20323638373730.roa
Signing time:             Thu 04 Apr 2024 16:45:02 +0000
ROA not before:           Thu 04 Apr 2024 16:40:02 +0000
ROA not after:            Thu 03 Apr 2025 16:45:02 +0000
asID:                     268770
IP address blocks:        2804:5a64::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4d:e3:a6:b0:4c:a1:a4:3b:ee:47:7b:b2:ee:0c:4f:e4:95:41:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A777C93AD197CE3C74B4E53C10D9AA6E308485
        Validity
            Not Before: Apr  4 16:40:02 2024 GMT
            Not After : Apr  3 16:45:02 2025 GMT
        Subject: CN=A3C603C91CFDF92BA621E5648ACAFC4442F9DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:77:42:5f:da:de:f5:df:cf:85:f0:20:bd:
                    0c:c7:2d:4f:a3:0e:91:ec:0b:4a:54:38:df:0a:da:
                    8c:e8:5f:32:a4:bd:43:e1:4a:df:b1:ea:bb:a2:79:
                    ee:6c:68:57:26:71:d2:21:67:bd:24:57:59:2d:bc:
                    88:5c:60:59:21:28:0a:94:91:9f:81:5e:79:71:b7:
                    5f:57:9c:d9:af:39:6a:f4:e7:13:62:ad:ac:67:c8:
                    a6:98:b3:22:f6:19:2a:75:1d:f2:80:c8:30:08:bc:
                    f4:4e:dd:19:96:d8:56:2d:ed:90:ec:f6:6c:78:70:
                    2c:e4:ed:89:d7:75:14:41:66:6d:ca:07:bb:3e:bf:
                    75:da:94:3f:7b:ca:3c:1e:b2:80:0c:20:e5:0b:e4:
                    f7:1e:98:f8:aa:00:f3:f1:3d:99:61:73:bc:65:28:
                    64:a4:21:c3:7c:39:db:bc:02:bd:0e:d9:e8:c2:58:
                    6c:f9:7d:ce:70:e4:c0:a7:36:c8:4e:fe:fd:4f:c4:
                    1e:d5:48:7e:b3:33:06:37:9b:0b:7e:25:2b:8d:f8:
                    e1:32:cc:20:b0:d2:4a:83:1c:a8:43:81:34:eb:a8:
                    46:61:eb:68:88:74:5e:ab:ee:d2:c7:8b:9c:b9:97:
                    c8:62:c2:3f:e4:1a:e6:a3:ac:af:82:59:f8:5b:53:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C6:03:C9:1C:FD:F9:2B:A6:21:E5:64:8A:CA:FC:44:42:F9:DD:9B
            X509v3 Authority Key Identifier:
                keyid:09:A7:77:C9:3A:D1:97:CE:3C:74:B4:E5:3C:10:D9:AA:6E:30:84:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/09A777C93AD197CE3C74B4E53C10D9AA6E308485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09A777C93AD197CE3C74B4E53C10D9AA6E308485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/323830343a356136343a3a2f33322d313238203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:4a:91:1d:18:de:90:4f:c6:12:a6:0c:d4:b6:e4:0c:a8:72:
         7a:b5:ea:28:c7:0d:b6:bd:b6:2d:b4:bf:69:48:0c:6e:a4:a0:
         7e:3d:cc:06:f4:28:8a:21:34:54:25:2d:5c:1b:b8:13:7b:7b:
         08:ab:0e:e5:3e:a4:df:5b:ed:c4:5c:61:7f:91:4b:e5:d0:79:
         e0:cc:bc:79:08:97:5e:cf:7e:d0:ad:ed:96:7c:a1:b3:5d:52:
         a9:59:d2:11:4a:a0:8a:dd:53:ce:fe:d7:ff:3c:e0:33:38:72:
         e5:03:29:2f:1b:46:a1:90:8c:3c:3a:af:15:2b:8d:65:cb:07:
         ea:df:99:55:89:48:e8:69:ea:fb:5f:bb:5a:5b:63:6e:15:45:
         d3:3f:b8:d5:d8:b0:fa:82:a4:7e:3a:66:ab:77:5d:f3:d2:4f:
         6a:ed:d8:58:e6:6e:6c:f8:25:0e:c9:9a:3c:45:ed:4c:df:f9:
         94:3c:73:89:79:ee:3e:d6:13:df:2c:4b:ea:6e:7e:8b:6b:06:
         3c:87:85:80:c4:c3:61:f9:9a:08:88:b7:05:ff:a9:ab:99:0e:
         51:08:6b:1f:95:23:7f:75:6e:c0:2b:7c:c1:c4:a6:72:8f:f3:
         f3:fe:d9:0d:7d:03:3a:d4:b9:a5:99:03:1c:97:3e:9f:a3:8e:
         48:4c:c6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----