Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa
File:                     323830343a333465383a3a2f33322d3438203d3e20323635343837.roa (raw, json)
Hash identifier:          E4bWBjNBilKrlKduYtQtYFbLLaTd2ZWq4fBb5Z6I/wg=
Subject key identifier:   75:83:49:2B:82:7C:24:72:BA:93:B8:D8:81:C8:53:40:9E:8E:52:52
Certificate issuer:       /CN=671CDB5BA3E589C9E13943FA4E6FD60571C4E652
Certificate serial:       06B39AC93EC5AF0F5EAC12A00D029130D1A6E119
Authority key identifier: 67:1C:DB:5B:A3:E5:89:C9:E1:39:43:FA:4E:6F:D6:05:71:C4:E6:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/671CDB5BA3E589C9E13943FA4E6FD60571C4E652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa
Signing time:             Thu 16 May 2024 20:55:55 +0000
ROA not before:           Thu 16 May 2024 20:50:55 +0000
ROA not after:            Thu 15 May 2025 20:55:55 +0000
asID:                     265487
IP address blocks:        2804:34e8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b3:9a:c9:3e:c5:af:0f:5e:ac:12:a0:0d:02:91:30:d1:a6:e1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671CDB5BA3E589C9E13943FA4E6FD60571C4E652
        Validity
            Not Before: May 16 20:50:55 2024 GMT
            Not After : May 15 20:55:55 2025 GMT
        Subject: CN=7583492B827C2472BA93B8D881C853409E8E5252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:16:11:04:dd:8a:a8:7e:be:29:0e:9f:ca:
                    64:19:0a:c7:1e:0c:cd:eb:7c:51:9b:81:cd:cd:5f:
                    f4:fe:c1:c3:db:33:b8:60:10:ab:ff:1c:76:c8:6e:
                    ab:ad:b3:59:fc:07:58:f9:6e:67:03:3d:e6:d6:1a:
                    c5:05:07:fd:cf:13:a6:4e:31:90:3b:2f:44:f1:ce:
                    13:4f:04:0e:97:82:53:45:fb:96:8e:9c:67:6e:2c:
                    2d:b8:fd:48:c5:cc:d1:36:84:36:13:dd:25:ee:8a:
                    34:4c:f3:9f:72:a8:b8:a1:fd:eb:9d:ef:8c:f0:da:
                    30:34:45:e9:53:06:f9:98:46:20:56:0b:b7:e6:3a:
                    a0:26:8a:06:31:de:73:9b:0d:c2:fd:66:83:3a:a1:
                    a9:07:f9:ab:ec:68:8a:f0:8a:91:a0:11:da:5d:68:
                    b5:b9:fd:02:8b:7d:3b:fa:85:9b:20:de:61:53:88:
                    89:0b:ad:20:33:fa:3e:ce:f1:96:4a:77:9d:c0:73:
                    fd:02:27:62:08:76:8e:40:bb:8e:85:52:9d:43:15:
                    bc:92:58:1a:2a:98:98:01:91:1e:2c:08:e6:4e:21:
                    59:91:cf:6b:27:20:e3:96:3d:02:f7:af:2a:07:31:
                    e5:34:69:21:76:eb:20:37:17:3c:b3:f5:47:02:76:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:49:2B:82:7C:24:72:BA:93:B8:D8:81:C8:53:40:9E:8E:52:52
            X509v3 Authority Key Identifier:
                keyid:67:1C:DB:5B:A3:E5:89:C9:E1:39:43:FA:4E:6F:D6:05:71:C4:E6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/671CDB5BA3E589C9E13943FA4E6FD60571C4E652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/671CDB5BA3E589C9E13943FA4E6FD60571C4E652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3438203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:16:a6:bc:3f:0a:2e:e8:06:0b:19:9b:df:9f:85:cc:35:4b:
         f0:12:5b:04:1b:f5:ab:35:b2:5e:37:0a:da:27:92:8c:3d:06:
         54:49:b6:38:69:82:d2:b6:a2:dd:24:92:6c:7a:ca:01:4c:e2:
         65:9a:77:07:be:9c:59:7d:c1:ab:a2:ee:cb:ff:f6:26:9b:5f:
         4d:08:03:fc:88:dc:2e:e8:88:e8:e8:b5:25:58:8a:a5:17:f9:
         eb:b9:c8:0d:6e:3b:1f:41:4c:fe:26:8d:88:03:c5:bd:86:21:
         43:c3:23:14:30:5d:6b:c1:12:77:8e:01:90:b8:eb:3f:58:ab:
         9f:04:4e:87:18:f1:c4:9f:eb:f7:85:a6:34:dd:25:c7:a9:39:
         8b:fd:4e:5f:71:34:8e:51:9c:91:bc:12:01:8e:38:23:d8:aa:
         c2:05:ed:8d:e3:cf:3f:b9:7d:71:8d:e8:cb:0f:41:31:6a:ce:
         21:4d:9d:a6:f6:96:ca:17:fe:ea:a0:ca:6a:38:68:f7:7a:b3:
         05:ab:bd:ae:9c:26:38:b6:5e:f4:28:55:3b:24:6e:7b:f1:70:
         88:ad:7a:3e:b1:66:04:7a:99:78:ff:e0:cc:a8:e0:c6:d7:2b:
         b8:04:04:79:d4:de:91:fe:db:9a:67:5b:9f:ec:bb:d0:79:7c:
         12:50:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----