Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a383030303a3a2f33332d3333203d3e20323634333234.roa
File:                     323830343a323632343a383030303a3a2f33332d3333203d3e20323634333234.roa (raw, json)
Hash identifier:          8zK0slmFpJ01TLUe0X7fz72/cPi3oeQlKImC4LHGE+o=
Subject key identifier:   66:E6:DA:4D:D8:31:C3:2F:5A:C2:FF:CA:EF:87:17:3F:27:F4:6A:16
Certificate issuer:       /CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
Certificate serial:       637E1766240347FC5D939CA5CA3CD1F795D4058A
Authority key identifier: 50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a383030303a3a2f33332d3333203d3e20323634333234.roa
Signing time:             Wed 19 Jun 2024 18:52:58 +0000
ROA not before:           Wed 19 Jun 2024 18:47:58 +0000
ROA not after:            Wed 18 Jun 2025 18:52:58 +0000
asID:                     264324
IP address blocks:        2804:2624:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7e:17:66:24:03:47:fc:5d:93:9c:a5:ca:3c:d1:f7:95:d4:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
        Validity
            Not Before: Jun 19 18:47:58 2024 GMT
            Not After : Jun 18 18:52:58 2025 GMT
        Subject: CN=66E6DA4DD831C32F5AC2FFCAEF87173F27F46A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:c3:5a:4c:19:cd:ed:9f:0b:87:80:af:46:
                    2c:c4:23:79:3c:d9:57:ab:3f:b6:fe:01:49:3f:c1:
                    91:09:1e:19:dc:22:4f:4c:85:95:7e:30:cb:cb:44:
                    2b:df:2b:b6:cf:99:7e:8f:1d:cf:0d:35:ea:1d:9a:
                    d2:23:6e:fb:27:da:57:da:e5:cc:ef:9c:36:0c:62:
                    8c:cf:45:00:0b:b5:14:44:c3:17:ae:82:b0:5e:41:
                    18:38:ae:fa:d0:38:7e:f3:80:6b:d9:13:6e:89:8f:
                    bc:4d:12:aa:1e:75:a0:16:8f:ab:83:5b:5e:60:f3:
                    86:da:75:40:97:db:7c:f8:3a:8b:01:a1:45:57:5e:
                    31:b0:1b:93:c3:8b:9c:92:90:2a:3a:d2:0a:28:c7:
                    b9:27:7e:3e:a4:1f:e3:5b:3f:d1:ed:ff:7c:6a:a1:
                    c6:67:5c:d5:4c:c8:9a:53:eb:07:c6:f9:3b:f2:d3:
                    a6:42:a5:3e:ab:12:ac:5d:c8:da:d9:2e:40:b6:db:
                    8c:55:5a:41:a4:00:db:5a:db:20:5c:27:36:49:a9:
                    14:2b:42:86:ea:15:be:fa:9e:eb:73:2b:5c:b2:d3:
                    ca:96:32:9a:33:dc:77:0a:83:f4:3b:ca:34:d7:75:
                    e9:4e:0d:86:53:27:2d:4a:26:42:e4:d6:80:f9:93:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:DA:4D:D8:31:C3:2F:5A:C2:FF:CA:EF:87:17:3F:27:F4:6A:16
            X509v3 Authority Key Identifier:
                keyid:50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a383030303a3a2f33332d3333203d3e20323634333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2624:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:d6:a9:80:a4:c9:71:45:17:6e:8e:52:29:7f:14:1f:bb:
         41:88:f1:0d:fd:0a:d8:12:28:ce:5d:d1:e4:c7:2a:90:59:f7:
         55:17:23:d5:5b:95:d6:a6:7a:c2:6f:7c:a9:3e:05:ce:fe:e2:
         ee:bf:db:25:a4:78:83:3d:ac:ac:9b:66:fd:9f:cb:2f:73:92:
         ed:2d:45:0a:aa:44:1e:77:cc:f0:83:b9:c7:8f:dc:c8:e3:31:
         3e:ab:92:9f:1b:d7:b5:0e:13:30:f4:0b:0a:5c:8d:83:ad:81:
         5e:0d:1b:a5:23:0a:3f:c5:9c:0f:49:da:30:70:8f:93:be:59:
         4f:a6:5a:ec:92:73:f2:1d:41:31:77:bc:92:54:3a:ad:c3:4d:
         e5:77:0b:0d:03:54:74:db:ec:76:4b:ef:a8:9f:90:95:a9:7a:
         c0:24:3b:f2:08:ac:12:3d:d0:33:b0:00:38:fc:44:6f:cc:3f:
         9b:5d:b2:f6:1e:f1:cb:f9:c0:b9:69:e5:d7:fe:b4:c8:f8:62:
         f2:8f:ef:5a:f4:4a:1a:33:2b:3e:90:d2:61:b9:ef:75:f7:a7:
         53:40:da:46:d8:92:fa:0e:dc:17:53:ad:78:8f:ab:11:4e:c8:
         6b:7d:24:7d:14:b7:2c:09:47:0b:6a:f5:97:d5:18:49:07:26:
         6e:98:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----