Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3336203d3e203532393332.roa
File:                     323830343a323862303a3a2f33322d3336203d3e203532393332.roa (raw, json)
Hash identifier:          d7ob17QsUDG9c6pfh+PC2WfHjZTKtoSQzl4+xQ5JpDg=
Subject key identifier:   A1:AA:6C:3D:7B:38:E5:0D:28:F5:81:1C:BD:48:23:A6:6A:F9:AC:9F
Certificate issuer:       /CN=5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02
Certificate serial:       2709BB0AD0CF12FFCB44E11CD951D366E8E92589
Authority key identifier: 5C:3C:E0:5C:8F:3B:57:14:D5:7B:95:6D:17:6C:AC:2B:DA:EA:BD:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3336203d3e203532393332.roa
Signing time:             Tue 20 Aug 2024 12:18:40 +0000
ROA not before:           Tue 20 Aug 2024 12:13:40 +0000
ROA not after:            Tue 19 Aug 2025 12:18:40 +0000
asID:                     52932
IP address blocks:        2804:28b0::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:bb:0a:d0:cf:12:ff:cb:44:e1:1c:d9:51:d3:66:e8:e9:25:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02
        Validity
            Not Before: Aug 20 12:13:40 2024 GMT
            Not After : Aug 19 12:18:40 2025 GMT
        Subject: CN=A1AA6C3D7B38E50D28F5811CBD4823A66AF9AC9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:69:e0:fa:84:3f:c6:99:57:8f:e5:4e:20:
                    72:8b:3c:0c:1a:15:11:cc:77:36:f8:24:11:c0:03:
                    70:22:d8:b2:76:c3:04:eb:d3:f7:e8:63:f1:1f:d3:
                    50:cb:9f:e3:b1:ca:0d:c7:9b:7a:e9:2d:6e:18:61:
                    e8:ff:82:c4:db:b0:9c:54:88:d4:65:19:dc:51:23:
                    1a:0d:8f:d0:a1:1d:15:ea:99:49:99:95:e1:c7:2f:
                    51:20:23:91:52:d7:53:44:62:48:89:da:ee:b7:ba:
                    3b:eb:67:2e:64:44:75:1a:a2:9b:29:b6:3d:16:68:
                    ee:bb:72:e8:a6:b7:8a:4f:80:28:59:ad:0a:08:2c:
                    ef:64:95:52:f1:e4:c4:73:29:6b:49:2f:97:27:cd:
                    99:77:2c:57:e8:7b:01:a4:1a:0b:84:c1:fb:8c:c4:
                    11:e4:59:5d:b6:c7:d9:36:b8:2e:6b:60:b7:ea:0c:
                    80:25:69:fd:e6:fe:82:c0:15:b5:1c:c4:be:bd:21:
                    46:c6:61:63:67:88:f7:a8:1c:b8:c2:53:83:73:1b:
                    01:35:bb:cd:ba:4f:a9:b5:f8:9d:f7:14:2d:9d:c6:
                    43:a7:e6:29:57:06:99:93:f2:44:62:d7:83:22:10:
                    49:bb:cc:4c:7d:51:70:9a:48:f6:7e:53:72:f6:61:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AA:6C:3D:7B:38:E5:0D:28:F5:81:1C:BD:48:23:A6:6A:F9:AC:9F
            X509v3 Authority Key Identifier:
                keyid:5C:3C:E0:5C:8F:3B:57:14:D5:7B:95:6D:17:6C:AC:2B:DA:EA:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C3CE05C8F3B5714D57B956D176CAC2BDAEABD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33322d3336203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:f4:6f:5a:11:9a:57:36:1e:49:76:45:a1:06:e3:47:9b:
         10:dc:ed:d7:75:7a:72:66:67:ec:97:29:47:9c:09:8b:6c:27:
         38:d8:a9:aa:84:4e:af:49:da:18:cf:a5:c6:5e:56:26:fb:76:
         c4:62:57:80:4c:72:29:f2:df:c1:7f:40:17:a7:7a:5b:4d:2d:
         09:b2:20:20:de:d1:b9:65:a8:b4:1f:11:53:97:5f:ea:a5:8a:
         de:f0:a7:d4:6d:c4:8c:9a:83:b3:64:75:18:97:92:2c:70:2a:
         26:d6:4a:b7:6c:90:7b:c5:cf:2b:95:7a:81:9b:28:3e:91:f1:
         0e:d6:14:38:7d:94:be:c0:99:80:d0:c1:84:25:5f:f1:53:4b:
         60:3d:b0:af:77:ff:2f:ca:79:fe:77:6f:f2:4e:6a:98:6c:22:
         89:5b:1e:8c:3c:98:53:c4:08:62:3c:33:d0:4a:2b:12:a7:0e:
         89:e2:ad:59:9b:67:46:b2:7c:e4:95:88:34:01:ee:58:9c:27:
         ef:28:13:15:3d:d3:ac:fd:86:97:c2:8a:57:2e:ee:ff:9a:19:
         bd:05:52:8f:a2:ea:56:2f:33:87:fa:b9:3c:07:5a:e9:c8:cf:
         71:c1:de:64:43:99:0a:a8:43:55:18:7e:72:ee:51:1d:d1:a0:
         ac:76:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----