Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/323830343a346665303a3a2f33322d3332203d3e20323638333535.roa
File:                     323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (raw, json)
Hash identifier:          eJbgyTTlsfFelC9CBY4NaBKaq3VvkgZuZividUaO004=
Subject key identifier:   1D:E5:FC:39:29:1C:F5:64:88:28:BD:F6:8D:CB:1A:A0:19:CA:41:E3
Certificate issuer:       /CN=62C6D96B0353576AEDABEF468623ACB8BB355EB2
Certificate serial:       3470F6D77407011AAD1C1EBC1CCDC112DDB0B66C
Authority key identifier: 62:C6:D9:6B:03:53:57:6A:ED:AB:EF:46:86:23:AC:B8:BB:35:5E:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/323830343a346665303a3a2f33322d3332203d3e20323638333535.roa
Signing time:             Thu 04 Apr 2024 23:20:47 +0000
ROA not before:           Thu 04 Apr 2024 23:15:47 +0000
ROA not after:            Thu 03 Apr 2025 23:20:47 +0000
asID:                     268355
IP address blocks:        2804:4fe0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:70:f6:d7:74:07:01:1a:ad:1c:1e:bc:1c:cd:c1:12:dd:b0:b6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C6D96B0353576AEDABEF468623ACB8BB355EB2
        Validity
            Not Before: Apr  4 23:15:47 2024 GMT
            Not After : Apr  3 23:20:47 2025 GMT
        Subject: CN=1DE5FC39291CF5648828BDF68DCB1AA019CA41E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:44:a2:18:83:2d:c8:4d:63:b7:0d:d8:62:
                    22:be:1e:28:a4:a5:da:5f:b2:5d:75:0c:10:e1:c5:
                    8d:9f:1a:46:bb:84:a9:77:06:15:91:b4:c7:de:13:
                    ff:44:3d:59:c4:4a:74:73:4b:4c:21:1f:04:fd:ac:
                    c4:41:d8:99:da:ee:ea:bc:78:59:82:be:84:be:08:
                    98:45:f2:ff:ea:65:6f:cb:5f:69:98:56:31:69:3b:
                    0d:be:13:6b:76:1f:d5:ab:d7:39:8d:66:3f:0a:3a:
                    e9:61:12:f9:2b:67:5b:9d:ea:df:ec:e5:ec:4d:cc:
                    85:5b:b1:2a:f9:83:8a:e2:b3:78:4b:1b:4a:02:b6:
                    09:db:37:a5:8a:7c:14:09:72:d4:c7:98:6f:97:ae:
                    1c:d4:9d:c5:8c:6b:fa:a3:ab:bd:f4:46:cd:1a:cc:
                    e4:ea:51:a0:6b:1a:7f:14:8f:64:a5:a4:84:b6:26:
                    b8:bf:f4:45:5f:3d:ba:8c:d5:c2:c3:f5:fe:44:87:
                    29:cd:20:59:e4:b6:1f:91:74:69:5d:11:53:ff:df:
                    6c:7b:f8:5a:7c:08:28:cb:fa:c9:62:b9:0f:1b:8e:
                    e0:e8:38:91:a5:31:a0:be:7e:b1:17:d2:7b:36:e8:
                    95:90:86:58:cf:4f:f4:01:b4:fe:c8:76:a2:54:62:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E5:FC:39:29:1C:F5:64:88:28:BD:F6:8D:CB:1A:A0:19:CA:41:E3
            X509v3 Authority Key Identifier:
                keyid:62:C6:D9:6B:03:53:57:6A:ED:AB:EF:46:86:23:AC:B8:BB:35:5E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/323830343a346665303a3a2f33322d3332203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:1c:d9:39:8a:0f:30:3d:6a:d2:33:62:1e:d8:70:41:ac:f2:
         f9:a6:04:0f:75:be:84:f9:9b:d4:61:8a:3b:8d:e5:40:bb:61:
         4f:a6:69:43:0e:68:1a:72:90:61:f8:40:05:e0:95:3c:be:20:
         78:4d:ac:3e:d9:07:d7:26:de:6d:5b:38:57:4d:1b:2f:75:5f:
         6a:fa:77:37:6d:ef:a3:77:80:97:7e:59:5b:bf:91:9e:f1:c8:
         d4:f4:74:e0:8c:d2:6e:09:ad:98:f6:6d:0d:a0:79:f2:cd:b5:
         ee:d3:cc:d6:c8:f1:14:75:13:61:6b:16:b6:53:3f:da:c0:85:
         3e:ce:0b:5a:bd:a9:74:5a:96:38:ef:ca:6f:0d:4d:c5:3e:b5:
         ee:66:60:f6:b9:17:ea:d3:d4:a6:e8:0b:94:6a:56:49:d6:8f:
         15:7a:46:8d:fc:17:3a:01:96:0b:ba:98:60:11:14:b1:51:17:
         9c:7f:ae:ee:bf:08:ae:48:3b:2f:b7:e6:b7:f3:1c:a5:22:17:
         3f:b0:2c:e3:25:50:32:1d:bd:67:56:7a:df:e7:39:b5:55:26:
         39:e0:b6:c1:07:f5:47:1b:53:cb:06:3b:92:37:5e:74:4c:c5:
         66:f1:13:a1:fa:c4:a3:c6:74:72:8c:75:98:b9:f2:4c:63:4a:
         28:13:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----