Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a3a2f33332d3333203d3e20323634333234.roa
File:                     323830343a323632343a3a2f33332d3333203d3e20323634333234.roa (raw, json)
Hash identifier:          SloT5/j27rDkxYPXsBX3g7cpzWDEcsAgGQk4IRIegIo=
Subject key identifier:   23:5B:8F:F4:1F:6F:1B:D8:62:A3:25:6B:30:15:0B:E0:23:5C:CF:F4
Certificate issuer:       /CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
Certificate serial:       36C490DDEA586692F82CD215D0655436567D35F2
Authority key identifier: 50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a3a2f33332d3333203d3e20323634333234.roa
Signing time:             Wed 19 Jun 2024 18:52:56 +0000
ROA not before:           Wed 19 Jun 2024 18:47:56 +0000
ROA not after:            Wed 18 Jun 2025 18:52:56 +0000
asID:                     264324
IP address blocks:        2804:2624::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c4:90:dd:ea:58:66:92:f8:2c:d2:15:d0:65:54:36:56:7d:35:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA
        Validity
            Not Before: Jun 19 18:47:56 2024 GMT
            Not After : Jun 18 18:52:56 2025 GMT
        Subject: CN=235B8FF41F6F1BD862A3256B30150BE0235CCFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:15:da:d4:56:e9:1e:ba:47:34:c1:1d:43:
                    ff:88:4e:88:05:55:85:11:f2:b2:a7:b5:b6:b8:84:
                    01:ff:ad:2d:0b:22:7c:cb:6e:5d:fe:27:b3:ef:a9:
                    02:57:1d:97:78:5d:aa:0d:b0:58:70:74:df:b7:cc:
                    61:42:a0:07:fb:0c:e7:3a:7c:67:34:83:cd:ef:2c:
                    8f:ff:8e:4c:10:e8:16:b3:5f:43:84:02:b3:a9:6b:
                    41:cd:0a:bb:58:11:bd:2d:7c:4e:79:c2:20:5f:88:
                    e0:0a:e6:3a:b7:81:eb:6e:93:f2:d4:c1:5f:35:55:
                    ec:de:a7:67:33:e8:b3:8e:de:5b:cf:a3:3f:64:85:
                    09:8d:19:1a:77:87:09:97:4d:97:d3:e8:57:9a:4e:
                    ce:ca:1c:e6:40:a0:a6:ff:2b:4b:04:ce:29:1c:4a:
                    7c:9e:1c:5e:f0:9b:0e:d6:c6:dc:dc:0e:d5:0f:2e:
                    cf:be:08:af:5b:40:64:72:18:62:8c:0d:15:77:ed:
                    90:bf:64:ae:a6:de:7b:81:a5:48:b9:50:f2:b0:72:
                    c8:4b:eb:ef:d0:1d:78:38:c7:0e:ff:0f:0b:aa:c6:
                    2b:d2:fe:19:4d:65:d0:85:2e:88:3a:be:63:b4:7b:
                    19:9c:b7:c3:67:5b:07:aa:a8:e4:fa:5a:6d:96:ac:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:8F:F4:1F:6F:1B:D8:62:A3:25:6B:30:15:0B:E0:23:5C:CF:F4
            X509v3 Authority Key Identifier:
                keyid:50:6C:C2:D7:2A:5B:16:63:F8:23:8C:0F:38:6C:1A:C7:CB:3E:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/506CC2D72A5B1663F8238C0F386C1AC7CB3E55BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/576djCFd1pRYFwZpyhgZiPRoHZTwJaZBjdzBcDA6nkur/0/323830343a323632343a3a2f33332d3333203d3e20323634333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2624::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:f9:65:2b:5b:b8:06:f3:69:cd:d9:9b:a4:26:01:18:d0:
         a3:c2:2c:67:9d:a7:ed:10:e7:46:cb:c6:58:4a:11:a3:d7:d1:
         44:b0:59:c0:95:3d:46:7b:c2:43:3d:da:6c:29:ed:4d:25:7d:
         4a:7b:87:ec:d9:ae:92:f4:ce:1d:d6:0c:22:be:39:93:c1:0c:
         1e:98:b2:6f:a8:20:4c:c3:f3:ce:49:b9:0e:ca:f4:32:16:ee:
         a6:9e:d0:4c:88:29:13:6d:e9:0b:6d:d1:17:5b:f7:5c:5e:0e:
         17:70:19:d5:d5:fb:53:96:7a:b5:e8:50:c2:91:63:77:d9:1b:
         22:14:4a:e0:d9:69:d5:97:80:98:9c:f0:d4:73:65:36:87:44:
         49:cc:8b:65:4b:e9:0d:60:cf:54:53:21:52:06:0e:d3:a7:9f:
         24:06:d8:ee:cf:25:a4:88:00:88:d6:61:68:23:2d:6d:f4:3f:
         be:fa:74:a0:62:cf:0e:95:ac:3e:06:a7:d4:11:9d:e5:f3:99:
         cc:c8:a8:e9:64:ea:1f:23:fb:14:d8:b9:4c:0f:89:42:b4:d8:
         41:27:03:ea:99:a5:b9:d5:61:9a:b5:26:dc:5e:d7:0c:b5:f3:
         d5:f0:2e:bb:4a:5a:57:d1:54:57:4c:ba:52:7a:da:09:da:c9:
         d7:db:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----