Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3332203d3e203532393332.roa
File:                     323830343a323862303a3a2f33322d3332203d3e203532393332.roa (raw, json)
Hash identifier:          KcHQ3tbD+paozlHHC5lbr7raVu66fBfc/2oOv6GPGp4=
Subject key identifier:   15:E5:F6:8F:EC:4B:87:37:34:8A:18:DC:35:7E:57:1B:61:11:80:CA
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       73C3B2B331FBBD1BAC576BB7E67E6FFEE93590B3
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3332203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:57 +0000
ROA not before:           Wed 08 May 2024 18:15:57 +0000
ROA not after:            Wed 07 May 2025 18:20:57 +0000
asID:                     52932
IP address blocks:        2804:28b0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c3:b2:b3:31:fb:bd:1b:ac:57:6b:b7:e6:7e:6f:fe:e9:35:90:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:57 2024 GMT
            Not After : May  7 18:20:57 2025 GMT
        Subject: CN=15E5F68FEC4B8737348A18DC357E571B611180CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:a6:d4:f1:f3:0b:7e:37:d5:6e:b8:b8:4b:
                    56:2f:27:dd:36:db:4c:79:a6:34:44:ab:cf:8a:96:
                    f8:03:c1:80:a9:63:f9:72:0b:b8:9c:ad:69:9c:88:
                    2e:dc:d6:02:38:cd:e8:a4:7c:03:89:1d:85:6c:d1:
                    2a:87:ac:49:b7:28:33:02:50:26:59:5b:61:f2:10:
                    13:c8:a9:f7:2e:49:ac:f6:ac:6a:ca:41:6e:f1:1f:
                    37:34:3c:62:be:ef:26:6c:36:f0:56:1f:4f:7d:f5:
                    53:43:4e:12:80:ce:52:2b:24:aa:64:4d:5a:7a:67:
                    93:53:59:5a:c0:41:b6:eb:25:ee:1c:c4:b5:dd:78:
                    f2:7f:75:a8:e5:70:e8:50:2c:88:dd:bb:16:a0:92:
                    be:f4:3b:f0:9c:fb:3e:84:7f:80:27:6b:61:db:d1:
                    ed:a8:31:54:ad:2d:d5:27:66:6f:29:f6:7a:76:ad:
                    67:56:ab:7c:41:45:76:79:36:37:03:d3:4a:88:de:
                    53:a7:b1:34:b3:dd:ea:4b:f0:eb:fd:73:60:9f:48:
                    8e:e7:1a:bd:cf:34:ed:fd:2f:8f:c1:73:dc:2f:c7:
                    af:48:7f:3d:b4:e4:eb:12:0d:52:1e:4f:65:05:7e:
                    70:4c:7d:81:1a:0d:77:e1:19:0b:e5:22:08:8a:26:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:F6:8F:EC:4B:87:37:34:8A:18:DC:35:7E:57:1B:61:11:80:CA
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3332203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:2a:a2:13:db:3a:d4:a7:73:14:26:e5:68:46:25:c2:bf:58:
         c1:b1:1e:de:80:93:63:14:f9:c8:54:e9:0d:d1:0f:a4:54:08:
         03:37:58:61:24:88:91:67:70:b3:37:05:c9:f0:2e:a3:ca:22:
         27:85:4c:44:c0:3e:44:f6:72:e0:27:64:fa:b3:a2:7c:e8:63:
         ec:b7:7d:66:f4:63:95:fd:c1:e8:1a:78:65:b2:21:17:cc:69:
         0e:a2:61:22:46:54:d5:2f:ec:86:87:1b:0f:9c:76:a8:56:c2:
         ee:b5:cf:22:bb:ce:cc:df:fc:5f:c5:3d:db:0c:29:77:54:a9:
         03:71:cf:ac:5d:c2:95:0d:8b:24:2b:96:36:69:b8:59:68:63:
         39:14:cb:06:42:df:7d:18:d9:ef:eb:60:ab:be:57:00:7a:0f:
         e0:4f:84:09:ca:1f:33:7e:e4:ef:0c:54:1f:04:a1:a6:9f:a7:
         90:9b:d5:42:1d:22:51:f2:aa:3f:ac:7a:2e:82:10:62:0b:91:
         58:d3:41:c4:c1:46:95:16:2b:76:62:c6:fb:2d:35:da:49:50:
         a1:7c:92:9b:a7:af:5b:b6:94:05:88:7c:58:2a:0d:36:9e:ac:
         8a:af:ec:ed:d9:1f:c0:c3:6c:80:6f:f7:d4:a4:2d:46:62:0a:
         b3:55:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----