Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa
File:                     323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa (raw, json)
Hash identifier:          vnd6k73Q3IwdWMMEqC/p1D4eXCBVTfb4r7vTLzKVxok=
Subject key identifier:   1D:9D:DC:39:0D:CF:80:80:4B:BC:A5:00:FF:3E:CB:8D:FC:10:EC:08
Certificate issuer:       /CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
Certificate serial:       1754240F2388E7A05EFF0C9619063BBC0F2003B5
Authority key identifier: 4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa
Signing time:             Fri 15 Mar 2024 16:09:52 +0000
ROA not before:           Fri 15 Mar 2024 16:04:52 +0000
ROA not after:            Fri 14 Mar 2025 16:09:52 +0000
asID:                     263612
IP address blocks:        2804:ffc:e001::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:54:24:0f:23:88:e7:a0:5e:ff:0c:96:19:06:3b:bc:0f:20:03:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BA590AB49324CA51E7274BA95C792A99E6E54DA
        Validity
            Not Before: Mar 15 16:04:52 2024 GMT
            Not After : Mar 14 16:09:52 2025 GMT
        Subject: CN=1D9DDC390DCF80804BBCA500FF3ECB8DFC10EC08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:a0:26:3f:96:14:cf:2a:61:b7:a0:18:ae:
                    f1:d2:ed:89:30:3a:5c:45:29:a7:99:13:96:48:85:
                    f0:76:33:fd:be:1d:e2:87:ff:e9:c8:e7:43:1a:32:
                    a9:ed:be:00:c6:01:42:54:6d:9e:3a:e6:f0:33:9f:
                    bf:a7:24:3d:7a:00:ad:70:1a:4a:d7:ca:6b:52:0f:
                    c4:b4:13:70:84:19:00:db:a3:de:fd:3c:e4:97:a1:
                    b0:91:34:a9:99:64:30:25:b4:47:e3:82:2a:a9:27:
                    f9:ec:ff:de:3c:73:c0:c4:34:34:f2:45:eb:7a:11:
                    de:55:a2:4f:3f:fb:87:3d:33:74:a2:d0:e5:2b:ad:
                    d9:0a:21:b0:c3:1e:d5:ec:18:a4:f5:c0:a1:78:9a:
                    0e:9f:aa:ee:78:3f:98:4d:c2:1e:63:29:4a:8c:6b:
                    05:05:79:ca:d9:85:13:f9:27:22:e8:80:db:78:fb:
                    f3:29:3a:a1:2c:f6:20:c9:af:57:a1:ad:55:9e:09:
                    8a:63:03:5c:3d:54:a6:2b:18:8f:69:0f:c6:3a:74:
                    ec:a2:20:48:8c:09:31:97:8f:e6:30:6f:92:cb:f2:
                    f1:87:94:06:e9:e9:7f:4e:c8:cf:b0:25:16:84:c7:
                    c4:8e:3d:ae:0a:20:fe:c3:68:24:c5:7d:ce:b9:e8:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:DC:39:0D:CF:80:80:4B:BC:A5:00:FF:3E:CB:8D:FC:10:EC:08
            X509v3 Authority Key Identifier:
                keyid:4B:A5:90:AB:49:32:4C:A5:1E:72:74:BA:95:C7:92:A9:9E:6E:54:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4BA590AB49324CA51E7274BA95C792A99E6E54DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653030313a3a2f34382d3438203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:20:17:03:08:49:97:a8:0a:e8:04:10:77:e4:36:eb:24:20:
         05:f7:44:d9:09:87:d0:c1:08:b5:c4:ea:84:9e:cd:b2:18:83:
         bd:e9:46:2a:75:bb:43:36:33:d1:d8:bb:82:90:7a:60:f2:a7:
         f1:9d:82:41:56:47:33:49:4a:24:4c:06:6c:3f:07:e1:00:ce:
         1b:7f:1f:3e:8f:fa:ef:00:1d:0c:1c:83:ae:57:8f:97:11:a3:
         ee:b3:6e:f2:c5:74:92:14:4e:fe:64:01:93:5f:ae:68:ff:b4:
         57:05:02:37:46:d2:48:60:23:97:ee:bc:ca:39:d4:62:34:e1:
         69:68:55:e3:c1:e7:09:09:76:5b:77:3c:bc:9f:d3:cc:48:90:
         92:3e:34:5d:b1:c5:37:a6:c3:20:24:61:b2:53:7f:92:84:19:
         6e:31:47:7e:fa:3c:fb:68:13:95:f3:c3:b8:ce:f7:74:b8:8e:
         5f:9d:f3:6f:a6:86:f5:3c:f8:52:8f:48:58:7f:cb:6b:79:52:
         f9:98:ba:2e:bd:b3:11:d9:47:2c:b6:4f:6a:84:f3:87:ff:13:
         c0:b6:ee:f0:a7:c5:24:15:21:ec:cf:a1:93:77:c7:75:e4:16:
         17:6a:28:25:a5:74:15:61:53:55:14:6f:13:24:e7:49:4f:fb:
         23:18:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----