Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
File:                     323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier:          tns2BhvViT1E4XMcIg/rYu/IPT77P3bXuyeGTlkh+Rw=
Subject key identifier:   C1:FC:8E:12:C1:C3:4F:F6:0D:B1:9E:2F:AA:42:F4:B0:FC:24:7E:B5
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       0C2B51EEC4BECA421DA2EC6CA193CEE17049720A
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        2804:28b0:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2b:51:ee:c4:be:ca:42:1d:a2:ec:6c:a1:93:ce:e1:70:49:72:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=C1FC8E12C1C34FF60DB19E2FAA42F4B0FC247EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:b3:3e:34:2f:d0:d5:92:13:81:93:00:14:
                    5a:71:86:7c:ea:a4:2f:7d:95:87:e6:90:49:88:97:
                    05:21:d0:92:83:8a:f6:37:f4:6f:35:b6:cd:54:69:
                    e4:c4:c9:14:ef:a8:e4:d1:7d:44:58:38:62:91:d8:
                    d4:36:85:05:e2:d3:20:d0:a9:f8:3a:e8:5b:70:0f:
                    12:55:2b:6f:10:7f:d4:52:10:3e:3a:2d:db:ef:24:
                    56:c9:5f:19:a3:6a:dd:da:3a:9c:18:b9:c0:05:b5:
                    1d:fd:37:94:df:d4:6e:1f:7b:62:cf:46:25:61:cb:
                    b0:9d:7a:d8:0f:e3:3c:f8:40:fc:81:25:71:cd:1b:
                    1c:bd:6e:4d:37:79:fd:6c:5f:14:b3:2d:d8:7e:11:
                    84:19:fd:97:9a:0d:80:f8:df:fa:21:05:d2:77:65:
                    c3:72:82:ed:03:2e:f8:4d:5f:f4:a8:76:05:46:07:
                    07:42:6d:aa:32:9d:c5:6d:8c:84:45:f0:c0:6b:70:
                    60:b4:4c:21:5b:ba:c8:3d:e0:23:81:6d:47:b6:e4:
                    b6:2d:4a:c4:29:57:3c:23:d1:43:9d:7a:59:49:89:
                    3b:47:84:7d:e0:24:c2:f7:a8:3e:43:a1:f7:f8:d1:
                    18:13:11:81:a6:66:7d:ca:ed:67:43:f4:ec:ff:a3:
                    2d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FC:8E:12:C1:C3:4F:F6:0D:B1:9E:2F:AA:42:F4:B0:FC:24:7E:B5
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a633030303a3a2f33342d3334203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c7:22:1b:9e:e1:45:54:a4:07:2a:53:a7:95:41:d0:d3:e8:b2:
         2f:de:96:2a:25:2f:ab:b8:7d:97:c1:26:7f:2e:ed:af:da:12:
         83:7c:0a:60:25:43:bf:a0:8c:67:cc:8b:72:80:3c:50:59:8e:
         c3:fb:30:ad:31:38:15:62:31:2c:ec:1a:24:eb:6b:0b:0f:3d:
         61:4a:5b:05:32:3e:33:e6:4b:2d:2e:95:ff:64:97:bf:76:15:
         4a:3f:a6:08:86:30:ae:72:3c:b6:2e:55:4e:2a:73:75:dd:cd:
         ef:be:55:5a:f1:3b:f0:f1:b0:ba:7e:19:0a:8d:6e:27:60:26:
         a0:dd:16:7c:66:7b:2d:d3:16:b3:6c:a4:62:81:13:c6:46:da:
         a3:0c:c8:4e:6c:f0:d3:eb:2b:69:5a:45:62:65:e1:11:fa:a0:
         96:49:ba:07:36:57:cf:5b:48:07:de:ec:6e:0c:2b:80:52:3a:
         c6:cf:4e:bb:43:ad:df:95:7c:64:6f:33:a6:9b:42:4b:ee:c0:
         5f:53:3d:8c:32:22:c2:d7:c0:bf:17:5d:fb:4b:67:89:fe:6e:
         4e:0f:b8:c9:99:04:7e:f7:de:7e:98:7e:e9:f9:3c:dc:33:49:
         2e:3c:83:ee:89:28:6b:9b:f4:86:61:eb:47:7c:13:e5:24:e6:
         8f:29:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----