Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33342d3334203d3e203532393332.roa
File:                     323830343a323862303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier:          T6WQwTE1JuYYhPjb1YUtK5igpDrDJbHshqZA8AwKfqg=
Subject key identifier:   2E:1F:7E:5E:65:89:1F:9D:E2:FC:D9:13:5A:D6:6A:A0:A7:37:02:66
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       3DE292DDAB909AA31632B389B395378F18F11303
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33342d3334203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        2804:28b0::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:92:dd:ab:90:9a:a3:16:32:b3:89:b3:95:37:8f:18:f1:13:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=2E1F7E5E65891F9DE2FCD9135AD66AA0A7370266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:31:ba:bc:4b:1f:48:d6:cf:15:5a:19:51:
                    7e:d5:28:b5:cb:e8:1a:61:0e:58:63:3b:f6:12:46:
                    83:be:c3:e7:e2:73:92:33:f7:fd:52:8f:d0:09:a8:
                    3b:dc:d1:34:26:7c:b8:90:49:43:c4:b8:24:69:d3:
                    a0:ad:15:10:62:77:82:42:9a:3e:55:6d:98:23:0e:
                    d8:9a:ea:a9:95:a7:0c:68:0c:f0:2b:bb:3c:2f:56:
                    4f:14:b7:f0:84:77:75:f0:72:22:e5:f3:cf:7c:fc:
                    60:07:5d:0b:7b:b9:fa:85:36:30:e3:b9:97:bb:6d:
                    2b:67:6a:0a:e9:15:34:f1:64:85:7f:b3:f1:45:1e:
                    32:74:4b:9d:8b:22:1f:b0:09:9e:5e:44:ed:4b:64:
                    39:a1:2c:be:5e:fc:5e:9a:a9:97:d8:d6:99:93:b3:
                    6b:12:e9:b8:8a:89:81:65:d9:b8:18:81:91:55:72:
                    0a:fc:a0:9d:03:1b:4f:3f:74:79:25:01:87:80:8c:
                    59:99:19:43:aa:2f:69:14:05:a9:13:7a:43:10:57:
                    f4:26:8d:9e:d2:4c:38:26:6e:41:4f:72:66:8a:d9:
                    d5:01:89:59:86:59:3a:a7:00:41:01:0c:40:1c:24:
                    20:2d:a3:94:77:77:22:a0:5a:45:9c:bb:9f:30:4d:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1F:7E:5E:65:89:1F:9D:E2:FC:D9:13:5A:D6:6A:A0:A7:37:02:66
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a3a2f33342d3334203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:35:56:ca:f7:c3:b7:ce:2e:2e:cf:96:7f:04:f0:a3:e9:
         37:63:d6:53:e5:1d:37:98:c0:d0:d8:a7:66:8e:26:a6:d3:69:
         1b:9c:38:56:62:ae:f3:34:71:49:10:cb:5f:69:e5:ce:63:b4:
         59:4a:bc:22:9b:e0:f0:47:85:13:09:52:f4:e8:90:69:1a:76:
         f1:e8:f7:81:a4:06:74:56:54:a9:b3:25:6f:57:a8:cf:14:1e:
         21:39:ab:b2:73:dc:13:d9:4c:87:e6:03:e3:05:cc:82:41:a0:
         1c:ab:60:b4:80:99:3a:bc:f4:db:89:fa:37:26:3e:36:cd:b3:
         26:ac:c1:ef:63:79:5a:64:b0:08:57:92:4a:bd:b7:29:a0:13:
         de:60:b2:bc:3c:a7:c7:96:d8:0b:2e:1b:d4:ea:b8:d7:47:51:
         82:64:4b:41:3b:15:39:cf:82:fc:31:a6:39:67:72:ed:d9:96:
         fd:67:c0:8b:97:93:a3:40:80:b9:06:db:d2:19:ff:71:5e:11:
         bc:17:73:1a:ef:4c:9b:64:61:f3:bd:a3:29:ea:bf:d8:43:9f:
         62:c4:bc:b0:dc:d1:1f:5c:af:6a:a9:22:0a:6d:28:15:3e:f9:
         d3:f2:21:94:2b:40:a1:58:a7:20:ff:07:31:ea:08:ee:c4:29:
         b6:fa:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----