Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33342d3334203d3e20323638323239.roa
File:                     323830343a346466303a3a2f33342d3334203d3e20323638323239.roa (raw, json)
Hash identifier:          Jo2OE6426bLZ7OcGwP4GAkaL2y0+lDJnywMPMkV20XY=
Subject key identifier:   E5:C6:A8:46:44:5E:B8:80:6C:1D:A1:45:B6:26:73:EC:1E:0D:EC:5E
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       277D46DE340A2059F98216995380AA1ACF896D8D
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33342d3334203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:24 +0000
ROA not before:           Wed 03 Jul 2024 21:05:24 +0000
ROA not after:            Wed 02 Jul 2025 21:10:24 +0000
asID:                     268229
IP address blocks:        2804:4df0::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7d:46:de:34:0a:20:59:f9:82:16:99:53:80:aa:1a:cf:89:6d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:24 2024 GMT
            Not After : Jul  2 21:10:24 2025 GMT
        Subject: CN=E5C6A846445EB8806C1DA145B62673EC1E0DEC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:cc:68:f7:ba:57:61:95:5f:77:3a:66:a2:
                    a4:e9:54:47:d9:52:23:23:08:b0:2b:7e:93:5e:9c:
                    1d:b5:5c:34:3e:41:f5:17:86:98:c6:e7:fd:36:15:
                    77:52:01:51:57:43:ab:58:13:4c:0a:4f:8f:a5:1a:
                    8e:fa:f5:37:26:a5:78:aa:f8:a7:41:32:af:e3:51:
                    ec:83:55:8f:f6:ff:87:3e:cc:e9:59:3c:7d:79:00:
                    4a:bb:3a:1f:de:79:2e:e6:c7:53:7e:6d:28:7f:6e:
                    dd:2f:16:54:87:c4:ad:37:e3:61:12:68:09:db:c3:
                    ba:40:81:b4:dd:cf:dc:05:d7:72:d9:3c:b6:2b:90:
                    ca:1e:7d:8f:d5:d5:33:69:53:df:34:2c:75:f2:bb:
                    d1:21:e5:ad:cf:6e:9b:32:5e:57:f3:15:5c:1f:f0:
                    a8:ee:53:a7:b4:41:ed:c3:7d:6c:94:06:a0:6e:3c:
                    84:48:a6:d3:e3:5f:8e:35:9d:06:eb:3d:41:56:a0:
                    4f:7d:db:e7:05:e7:8d:77:33:a0:b7:59:f3:fc:cf:
                    c6:ad:8f:2b:9a:71:f0:fd:96:6c:9c:20:57:08:84:
                    05:f9:57:e3:5a:c8:0d:d1:30:08:17:89:a9:a0:1f:
                    e1:99:d7:5a:dc:e6:82:3f:3f:29:55:15:e6:18:7b:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C6:A8:46:44:5E:B8:80:6C:1D:A1:45:B6:26:73:EC:1E:0D:EC:5E
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33342d3334203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df0::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:f8:4a:f8:f8:fe:59:ca:1e:34:8b:ee:b0:8b:24:29:ef:3e:
         f7:7b:26:87:98:68:f1:af:a7:2b:6f:de:8d:27:c6:34:df:e4:
         1a:44:c9:1a:00:54:90:ff:4e:c6:dc:9f:b4:36:76:37:d0:f7:
         50:fa:2d:51:62:f8:50:67:d6:2d:f2:4d:29:bb:d8:4b:fd:48:
         19:d2:34:a6:9f:12:d6:71:93:c2:3f:4a:60:3d:76:b0:5c:56:
         31:f7:5c:ca:a6:e6:07:5c:00:89:31:39:b6:02:34:7a:ab:4e:
         30:aa:ec:b3:6b:ad:ec:ef:bf:93:69:17:d6:8f:70:d7:7a:0a:
         76:f8:42:ae:b3:f5:18:a5:1c:70:c5:a4:dd:37:29:7f:ea:7c:
         cf:e3:d3:01:33:14:0d:b9:d8:fc:8d:28:b2:33:a9:15:34:2f:
         9e:46:93:8b:3a:08:b4:4f:fe:08:aa:59:24:22:25:ae:9b:84:
         d4:52:97:35:d2:e0:44:a4:1c:88:cc:82:bf:a4:ca:d9:29:cb:
         87:b7:91:25:93:26:76:e3:1c:cb:35:e0:7f:a3:57:92:5c:1e:
         34:3c:a5:a8:68:a0:a2:ab:dd:55:85:67:2e:7d:0f:2f:90:dd:
         c0:a4:f4:a6:6c:b3:8d:03:0e:ed:53:8d:ab:f5:b3:09:33:77:
         f5:ca:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----