Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d313238203d3e20323634313237.roa
File:                     323830343a323264633a3a2f33322d313238203d3e20323634313237.roa (raw, json)
Hash identifier:          nIGXJCgyuiJPdjl6ntiUx6WMHF5MIbo2y3Ynb5SdbnM=
Subject key identifier:   4A:7A:CB:06:52:C3:A4:B9:C8:B9:77:1C:FE:81:13:2A:0D:0E:48:5E
Certificate issuer:       /CN=AB528ABCEBD06A657080F8532041E15F1CC2F2B9
Certificate serial:       7F52888CEDFA7A1D52E144B25040430197906436
Authority key identifier: AB:52:8A:BC:EB:D0:6A:65:70:80:F8:53:20:41:E1:5F:1C:C2:F2:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d313238203d3e20323634313237.roa
Signing time:             Mon 27 May 2024 14:23:23 +0000
ROA not before:           Mon 27 May 2024 14:18:23 +0000
ROA not after:            Mon 26 May 2025 14:23:23 +0000
asID:                     264127
IP address blocks:        2804:22dc::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:52:88:8c:ed:fa:7a:1d:52:e1:44:b2:50:40:43:01:97:90:64:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB528ABCEBD06A657080F8532041E15F1CC2F2B9
        Validity
            Not Before: May 27 14:18:23 2024 GMT
            Not After : May 26 14:23:23 2025 GMT
        Subject: CN=4A7ACB0652C3A4B9C8B9771CFE81132A0D0E485E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:24:f8:30:6d:8e:f9:c0:82:b0:da:a7:29:
                    54:6e:e3:93:00:c7:21:cd:ef:ca:cf:89:c3:ca:30:
                    1c:64:da:10:fc:44:cb:c1:8c:ee:bf:55:c3:37:01:
                    f5:cd:77:3d:ac:f6:71:79:57:7b:4f:34:d6:7c:1b:
                    44:2b:2c:00:64:f1:13:be:55:aa:c6:b9:74:17:eb:
                    1c:03:5d:dc:de:82:00:87:18:a3:0f:80:a5:d6:3b:
                    50:13:f9:da:27:6a:12:a8:91:40:33:ab:f6:d5:b7:
                    03:5d:c2:64:50:14:b2:7f:2d:e9:dc:11:59:fa:c9:
                    13:40:e2:84:a0:20:54:a8:ea:1e:ca:0a:2c:cc:56:
                    8b:b2:9d:28:62:b8:c0:bd:39:6b:66:44:7d:66:43:
                    d5:01:88:42:97:da:69:26:fd:3d:34:ad:df:bd:6c:
                    7e:ab:43:b0:bc:eb:8e:6d:68:6e:d4:db:75:c0:66:
                    48:51:dd:45:37:1d:5a:2c:2a:9f:de:04:b3:3a:50:
                    19:b9:84:ee:9c:a7:eb:6d:19:a4:c6:1e:81:2c:d6:
                    3d:1d:c7:8c:af:34:17:4f:35:56:c8:5b:51:e5:0c:
                    9b:87:3d:b9:36:36:5a:72:4f:15:80:47:cb:68:7f:
                    e1:f0:5b:ae:f5:a0:96:36:da:ed:0d:27:5a:65:91:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:CB:06:52:C3:A4:B9:C8:B9:77:1C:FE:81:13:2A:0D:0E:48:5E
            X509v3 Authority Key Identifier:
                keyid:AB:52:8A:BC:EB:D0:6A:65:70:80:F8:53:20:41:E1:5F:1C:C2:F2:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB528ABCEBD06A657080F8532041E15F1CC2F2B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d313238203d3e20323634313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:db:1c:43:bf:b3:4f:bb:b0:e7:60:ee:48:2d:01:b0:a0:5e:
         53:9e:5e:ed:96:df:8d:b4:82:fb:82:d0:2a:67:38:59:6d:68:
         76:7c:2e:b7:3a:01:aa:78:bf:fc:49:f8:43:15:fd:45:3f:63:
         63:81:14:f7:0c:fc:33:f3:4d:8a:4b:f3:67:7a:da:d6:28:55:
         94:4c:45:0f:c1:a3:5d:e1:5d:4b:ed:ad:45:02:db:92:7e:8a:
         3c:3d:08:f7:40:e9:83:a1:ca:56:89:a3:cb:73:f5:43:36:b5:
         83:b2:f4:79:52:0d:cb:f3:64:b7:2c:7b:a4:20:a0:0f:b9:07:
         7a:96:cb:c8:bc:7c:f9:8f:c3:60:80:d7:16:97:b5:57:d2:e7:
         60:6c:bb:75:7d:d6:dc:00:ad:63:f9:49:6f:52:34:52:55:78:
         56:a6:aa:5e:0b:19:2c:af:51:7b:ed:f6:db:65:8d:dc:51:a1:
         40:04:42:76:db:1a:79:aa:54:c1:1b:f2:81:bd:04:69:b6:0b:
         bd:b2:be:60:58:d5:dd:1c:09:cd:e7:af:61:0c:0c:67:b1:f0:
         1b:1a:c7:e9:0f:43:06:20:a8:0a:8a:35:25:d7:ef:80:08:ec:
         07:ed:53:d0:fc:85:14:14:bf:11:9e:a5:e6:f3:c2:e2:3e:97:
         34:64:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----