Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/323830343a373232303a3a2f33322d3332203d3e20323730383334.roa
File:                     323830343a373232303a3a2f33322d3332203d3e20323730383334.roa (raw, json)
Hash identifier:          /jPdsIMCAvFzNtgFfunkhBkIo+YyXhf5Ghh5REeuXJw=
Subject key identifier:   31:92:8A:A8:C2:3A:E7:B4:3B:1D:DA:F3:96:9B:7C:E0:2A:22:00:1F
Certificate issuer:       /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial:       3AE27CEB1104837C3C7BB3611F1BF202179C6085
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/323830343a373232303a3a2f33322d3332203d3e20323730383334.roa
Signing time:             Thu 04 Apr 2024 12:47:31 +0000
ROA not before:           Thu 04 Apr 2024 12:42:31 +0000
ROA not after:            Thu 03 Apr 2025 12:47:31 +0000
asID:                     270834
IP address blocks:        2804:7220::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e2:7c:eb:11:04:83:7c:3c:7b:b3:61:1f:1b:f2:02:17:9c:60:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
        Validity
            Not Before: Apr  4 12:42:31 2024 GMT
            Not After : Apr  3 12:47:31 2025 GMT
        Subject: CN=31928AA8C23AE7B43B1DDAF3969B7CE02A22001F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:b1:23:77:5f:41:e8:bc:90:6d:7f:17:58:
                    2b:4f:78:c4:47:3e:bd:6b:a0:56:8e:42:57:3f:4e:
                    35:08:94:d6:00:b2:29:e1:13:0c:97:5b:9b:e1:c4:
                    5c:64:0f:b8:cb:22:f9:21:4c:68:31:59:98:fd:36:
                    69:4f:5e:49:b5:98:0b:18:6e:08:bd:55:4a:b3:f1:
                    ef:39:d7:66:55:fe:06:49:74:0d:b5:6e:05:f9:8b:
                    37:e7:c9:08:e3:08:64:a5:9b:a4:21:98:2e:ac:0d:
                    00:cb:25:6a:0c:a0:bf:11:5a:f3:6e:23:5f:bc:ed:
                    8a:90:b1:ea:54:09:85:4a:6e:f1:af:55:cd:16:b2:
                    29:a5:09:e6:0d:da:66:0c:b3:5f:eb:db:98:f9:a3:
                    95:59:31:4a:aa:a4:6c:5e:6b:b7:79:80:12:67:fc:
                    68:c3:af:77:78:7a:22:f8:d1:0e:d9:de:aa:0a:60:
                    fd:6b:e0:f6:09:4f:69:a6:cf:6f:3a:52:d9:10:89:
                    1f:a4:7d:bd:14:ed:ab:2f:f9:98:68:03:8c:16:97:
                    0e:58:e8:f0:91:a4:99:9f:e5:7b:a0:d4:9f:fa:d2:
                    60:63:77:b9:8b:0e:03:71:39:8d:d6:c5:7f:b6:d5:
                    d8:92:db:13:bf:d5:d5:06:ca:05:d9:0d:d8:d2:3e:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:92:8A:A8:C2:3A:E7:B4:3B:1D:DA:F3:96:9B:7C:E0:2A:22:00:1F
            X509v3 Authority Key Identifier:
                keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/323830343a373232303a3a2f33322d3332203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7220::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:f1:71:b7:a1:b8:de:08:7b:d5:29:a8:f7:d5:c2:e2:e9:
         68:e8:c9:19:5b:db:ce:4a:5c:91:c7:27:ea:6a:3e:01:22:73:
         22:c9:61:83:c8:b2:32:97:02:0c:2f:0d:e1:b6:97:52:37:c9:
         48:66:e2:ae:fd:dd:57:29:06:50:f7:f9:10:48:6e:d5:65:5b:
         80:fa:c0:72:be:d5:06:29:18:e9:5e:a8:3b:5e:ed:4c:93:45:
         67:b5:03:81:99:4b:1d:55:cb:cd:46:5d:c9:6a:b9:b3:6f:2a:
         52:c4:0a:af:a3:45:52:39:dd:22:23:b0:7f:03:6a:2a:d6:54:
         3d:6d:94:7f:6a:fe:13:d9:51:9d:57:13:30:70:0a:bb:08:37:
         e0:d2:41:85:97:8a:06:e0:16:1d:8b:93:28:08:c7:3c:d1:c4:
         c9:c8:3c:6a:0e:21:00:f2:af:6e:cb:82:5b:65:e6:29:52:8f:
         78:f2:00:06:0f:4c:4b:6b:9a:74:91:d9:d7:04:2b:1e:34:c0:
         22:45:8b:1c:f0:91:03:30:88:91:7b:60:f5:54:90:64:ef:41:
         9d:69:59:46:f3:b6:bb:d9:22:30:38:96:60:18:77:6c:ad:1e:
         35:0b:f8:e0:6f:92:27:1c:01:96:98:c4:aa:d5:6e:d3:5b:74:
         9a:2c:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----