Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33322d3332203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33322d3332203d3e20323734373236.roa (raw, json)
Hash identifier:          G7WTKHcwo/jL5ntmo9p04PimclmIy9rQ2mqyfciPta8=
Subject key identifier:   A6:E0:49:8F:5F:8D:A6:C6:12:96:E9:54:94:FA:85:97:E4:9A:D6:70
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       48D79769982C22DF20A083E3DD76C98B7D86023E
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33322d3332203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:25:28 +0000
ROA not before:           Sat 12 Apr 2025 00:20:28 +0000
ROA not after:            Sat 11 Apr 2026 00:25:28 +0000
asID:                     274726
IP address blocks:        2804:92a8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d7:97:69:98:2c:22:df:20:a0:83:e3:dd:76:c9:8b:7d:86:02:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:20:28 2025 GMT
            Not After : Apr 11 00:25:28 2026 GMT
        Subject: CN=A6E0498F5F8DA6C61296E95494FA8597E49AD670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:64:6b:6b:f5:b2:29:99:17:7d:54:b4:bc:
                    03:54:d2:15:3a:45:21:ed:81:3d:7e:8f:ae:73:93:
                    9e:62:1b:d9:e9:99:65:7c:f3:d9:1c:b9:78:13:f2:
                    da:3a:07:c3:09:e4:f0:81:60:85:f4:96:38:2a:0c:
                    5e:2f:14:2f:48:38:58:1c:20:63:51:f6:6e:4d:9f:
                    ef:5e:e5:b9:ea:6d:96:6c:03:78:4e:46:73:89:50:
                    6d:f0:63:0f:73:32:9d:8b:b2:c3:73:37:9c:92:7e:
                    f5:09:42:e3:33:d3:3f:19:f0:04:e4:63:00:0f:72:
                    34:02:0d:e3:9d:24:f1:8a:a0:8c:49:9d:6f:72:98:
                    ba:86:7e:d1:5f:f7:72:2f:05:cf:5f:9b:c2:ba:db:
                    e2:2b:bc:d5:48:fb:b7:f7:55:f1:4a:88:12:a6:bf:
                    68:70:4d:07:8e:59:cc:94:69:17:f9:d3:6b:c0:73:
                    f8:3a:a0:4c:4f:17:24:56:9d:37:39:d9:4d:14:1f:
                    5f:85:e0:3b:04:bb:1b:86:02:a5:2c:1a:19:2c:d4:
                    40:6b:52:a8:ec:93:73:b8:98:61:87:48:03:ef:fb:
                    1c:64:fc:ef:54:9c:e5:f2:2b:60:05:a1:14:a6:d3:
                    9c:d0:d7:18:b9:d6:4f:51:b4:6e:6a:0a:7f:1c:0b:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E0:49:8F:5F:8D:A6:C6:12:96:E9:54:94:FA:85:97:E4:9A:D6:70
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33322d3332203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:f7:19:5e:ed:33:e7:f7:6f:5d:81:ff:c5:7c:d1:9b:8e:
         64:d2:a9:2d:53:2a:1f:d3:a8:1d:f3:77:88:56:2d:c0:81:dc:
         c6:7a:22:e6:ca:f6:77:86:22:23:09:43:2d:c7:78:ac:37:d5:
         58:08:48:7b:be:89:d5:af:09:32:af:5e:94:bb:49:a8:5c:a0:
         6a:c9:02:52:5d:88:82:b2:72:72:b6:00:d5:21:25:09:2a:6f:
         7b:47:e0:2d:72:2d:82:f4:61:03:28:35:67:df:e7:6c:5c:47:
         30:b4:56:9a:05:ec:2b:ee:48:dd:77:ba:46:a4:6e:2e:a7:72:
         c9:ec:a2:a9:63:0e:c0:f6:53:2c:5a:b1:63:b8:15:b8:59:44:
         dc:93:d1:d5:7f:73:71:7c:84:58:da:1b:9e:1b:23:09:2a:22:
         db:fc:c1:07:bd:2c:ea:0b:5a:11:45:b7:8a:57:3e:b8:d5:d1:
         36:94:54:6b:02:5f:82:f2:5b:17:8b:bf:ea:18:f5:24:9f:1d:
         7b:c5:53:fd:be:43:36:69:10:ed:e0:ae:31:f2:0c:ac:df:03:
         91:90:4a:61:1f:94:38:2f:33:1d:16:3e:69:60:6a:ca:57:e4:
         e2:f0:7c:96:15:36:16:4b:d8:ab:94:40:e1:7e:9f:aa:e3:70:
         35:28:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----