Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
File:                     323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (raw, json)
Hash identifier:          W/1cAwdKeCb6slJti4wLrRZ7+sD5FnB4a9xhTeaeUE8=
Subject key identifier:   55:59:E2:6C:41:24:BE:97:42:FE:77:E8:EC:B8:B0:04:5B:5F:2F:14
Certificate issuer:       /CN=5D18B697A5B088EC543EE5DA1B461A1DD606BE88
Certificate serial:       53C5C80CC08FF28816041FCC6F23F3AEA6151143
Authority key identifier: 5D:18:B6:97:A5:B0:88:EC:54:3E:E5:DA:1B:46:1A:1D:D6:06:BE:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa
Signing time:             Thu 04 Apr 2024 17:35:53 +0000
ROA not before:           Thu 04 Apr 2024 17:30:53 +0000
ROA not after:            Thu 03 Apr 2025 17:35:53 +0000
asID:                     266304
IP address blocks:        2804:35c0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c5:c8:0c:c0:8f:f2:88:16:04:1f:cc:6f:23:f3:ae:a6:15:11:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18B697A5B088EC543EE5DA1B461A1DD606BE88
        Validity
            Not Before: Apr  4 17:30:53 2024 GMT
            Not After : Apr  3 17:35:53 2025 GMT
        Subject: CN=5559E26C4124BE9742FE77E8ECB8B0045B5F2F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:74:c4:8f:54:01:f0:dc:27:86:7c:5e:dc:
                    ca:f6:c6:6c:16:17:04:f8:e1:6a:6b:20:a4:f9:53:
                    18:3c:ec:3d:b1:f5:59:db:6f:54:35:bd:ed:a6:02:
                    0e:4a:f4:68:6b:bc:62:85:5a:97:3c:6a:0a:aa:3f:
                    72:e8:9a:fb:75:6b:3d:63:b2:f5:7b:dc:55:ad:49:
                    3f:a6:f4:62:9c:74:86:ee:7a:e3:e3:86:a7:a3:0c:
                    a7:01:37:81:09:a1:bf:4c:fc:0c:c0:28:25:59:2e:
                    ff:73:67:92:6e:27:b2:b2:42:8d:4d:b1:3b:ee:a6:
                    7a:65:b9:4c:6d:aa:66:94:f7:9f:e5:d9:e6:3c:7c:
                    7b:e9:69:8a:bb:65:7e:83:3c:0f:d1:53:5f:15:f0:
                    6d:d2:a9:7e:f3:41:15:e0:18:38:23:b1:ad:54:70:
                    28:6d:f1:dd:aa:33:6a:39:b3:42:22:00:4c:16:87:
                    a6:95:c7:4e:8f:40:c7:84:5a:b5:60:ae:23:58:5c:
                    c1:a6:d2:8f:f3:af:c5:1b:16:34:70:3c:bd:6f:e5:
                    6d:68:23:c3:af:3b:92:da:87:12:5a:dc:7c:04:48:
                    7b:7e:9b:f8:47:31:b0:7d:ef:45:45:5b:fc:de:0a:
                    09:d1:92:c1:2d:af:65:5d:8d:3e:3c:4d:6e:cf:33:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:E2:6C:41:24:BE:97:42:FE:77:E8:EC:B8:B0:04:5B:5F:2F:14
            X509v3 Authority Key Identifier:
                keyid:5D:18:B6:97:A5:B0:88:EC:54:3E:E5:DA:1B:46:1A:1D:D6:06:BE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/323830343a333563303a3a2f33322d313238203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:44:67:f9:21:51:5b:18:5c:e6:68:0a:12:19:61:e7:d8:
         57:44:e8:b5:c4:90:6e:bd:63:42:87:9d:50:fa:2b:cd:82:a7:
         70:53:6f:bb:3c:a3:eb:26:43:bd:71:ec:c2:60:4d:e1:4d:f2:
         02:7d:a2:09:8a:df:cf:74:9e:fb:e3:11:bd:19:99:f5:04:10:
         70:ea:59:bc:24:dc:5c:5a:7c:eb:62:ac:a7:0b:ce:ee:9e:30:
         a1:8f:de:4c:ee:a0:a8:bc:af:e2:f3:56:16:83:ef:b0:20:c9:
         ae:16:c0:e4:8e:d7:69:f4:5d:35:a2:a9:91:ad:db:08:cb:48:
         11:c8:51:32:a4:ac:be:02:a3:db:08:5f:c1:89:50:71:47:90:
         54:6a:64:71:df:25:8d:e7:27:56:ff:44:c5:02:28:cc:7d:0c:
         71:d9:a4:21:c0:4a:04:f9:2a:a9:b6:f8:3a:c5:2b:22:c2:8e:
         1a:40:d1:9e:64:93:e9:ca:ea:b6:20:c7:62:55:d4:05:b5:8c:
         30:82:5c:c1:32:af:a2:45:59:f9:4e:b7:6e:41:8e:ad:45:de:
         31:4a:4c:61:65:a5:72:5d:c0:cd:0b:db:ad:3a:d8:db:18:3a:
         cd:48:85:bb:76:45:45:46:a6:b0:67:87:fc:53:0b:2c:a1:f4:
         bf:9a:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----