Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33322d3332203d3e20323639303234.roa (raw, json)
Hash identifier:          LU774Oiz1JjcQPcFf/wErLRS/DSwURZxPXvJUuOGT0o=
Subject key identifier:   63:92:2A:21:C3:71:19:6D:C3:D9:0D:3C:E1:1B:BA:F0:15:D7:6E:9A
Certificate issuer:       /CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
Certificate serial:       1AE92EF00B0113A174867184DE0923E2DBB4FEC8
Authority key identifier: 1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
Signing time:             Mon 07 Apr 2025 19:53:10 +0000
ROA not before:           Mon 07 Apr 2025 19:48:10 +0000
ROA not after:            Mon 06 Apr 2026 19:53:10 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:2e:f0:0b:01:13:a1:74:86:71:84:de:09:23:e2:db:b4:fe:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56
        Validity
            Not Before: Apr  7 19:48:10 2025 GMT
            Not After : Apr  6 19:53:10 2026 GMT
        Subject: CN=63922A21C371196DC3D90D3CE11BBAF015D76E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:85:01:c4:b5:fa:79:07:66:73:32:79:c6:
                    84:42:03:95:09:b6:2d:cd:d5:fb:d6:19:99:34:e4:
                    3a:39:3c:3f:b4:77:45:35:1c:31:cd:2b:09:7f:21:
                    80:45:43:32:8d:8c:d8:d2:2b:02:55:50:08:28:13:
                    8a:4f:17:ae:e5:1f:6a:60:42:b3:3c:63:8d:c3:96:
                    72:a9:f8:d1:91:f9:67:83:0f:2e:35:58:62:bf:81:
                    f7:56:92:cc:d0:23:03:69:34:cc:56:84:2b:a5:ae:
                    a5:83:dd:f7:7e:22:22:f9:d3:7b:44:e5:19:89:43:
                    cb:b0:d1:a8:8f:92:37:77:ca:69:28:58:f5:3d:8c:
                    54:10:01:84:99:77:8b:b2:c2:94:bc:65:38:ef:34:
                    48:8e:02:1e:12:33:be:7c:8c:de:a9:aa:35:26:76:
                    2c:ce:e1:a2:3a:c8:aa:34:a3:28:14:f2:26:ee:0b:
                    a8:33:e5:ec:4b:70:08:13:a5:4d:70:f7:da:c4:da:
                    ce:ba:4b:90:98:5b:b1:65:ac:da:a0:b4:d8:44:da:
                    2b:5e:87:c3:8c:57:43:bb:17:d9:0f:c1:34:29:ce:
                    15:d7:f6:10:96:44:32:9d:06:c2:5e:18:1d:50:db:
                    c7:13:2d:22:e9:af:b7:69:96:17:71:19:c3:76:9a:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:92:2A:21:C3:71:19:6D:C3:D9:0D:3C:E1:1B:BA:F0:15:D7:6E:9A
            X509v3 Authority Key Identifier:
                keyid:1B:4D:DE:92:21:2F:23:E9:B9:7D:6B:C6:4E:C6:8E:CA:3A:4A:CC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4DDE92212F23E9B97D6BC64EC68ECA3A4ACC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:fa:a9:2f:99:17:ca:7d:a5:e6:2d:94:ea:3d:da:8f:e7:
         67:f7:af:30:b4:72:a7:19:43:71:e0:5d:8c:14:dd:ba:5b:9e:
         03:e5:c8:7f:3b:0c:c6:f5:5f:b3:20:e7:04:0f:62:ec:3b:4c:
         f8:14:18:53:59:f1:48:92:ca:88:95:a1:fb:2a:f6:61:5b:51:
         29:46:9c:bd:f8:f4:f6:bf:f8:e2:9c:17:cb:bd:d4:b9:88:c4:
         f7:4c:3b:c3:da:5f:72:01:f6:dc:12:35:36:80:a5:92:6d:44:
         02:ea:8d:89:83:c5:f5:a6:15:b4:4c:05:2b:59:67:d3:d7:34:
         8b:e0:44:50:a5:44:f0:53:e8:46:15:4a:91:f9:02:2d:dc:50:
         b5:1e:9c:b3:66:9f:77:2a:b0:dd:32:88:74:c9:b1:cd:bb:96:
         91:04:22:48:cc:da:d3:dd:82:83:e7:85:3f:af:10:44:8d:01:
         f7:f0:c3:f3:f7:9c:35:b3:9e:2f:cc:04:7c:80:e7:54:42:9f:
         a5:de:dd:d3:30:b0:1b:a5:49:d0:f1:1a:f0:07:3c:77:58:d7:
         4f:bf:1b:09:96:f5:65:fa:a7:c7:f0:5a:44:d1:05:04:7f:84:
         b1:d1:62:0a:c0:dc:27:9f:1f:0f:12:8a:62:7b:3e:5d:ab:ba:
         12:69:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----