Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          c7/Zmm5pA4MRn8KbSkmuBgUEZkkXQsF/mZWX+gBlNwg=
Subject key identifier:   BA:C4:73:2D:87:48:C3:B3:05:1D:A0:EA:4A:D6:04:C2:0B:7C:88:A9
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       0FFD399DDF75C479B6819EF2136AFB7666AD284A
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:24:08 +0000
ROA not before:           Tue 30 Jul 2024 12:19:08 +0000
ROA not after:            Tue 29 Jul 2025 12:24:08 +0000
asID:                     268678
IP address blocks:        2804:54ec:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fd:39:9d:df:75:c4:79:b6:81:9e:f2:13:6a:fb:76:66:ad:28:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:19:08 2024 GMT
            Not After : Jul 29 12:24:08 2025 GMT
        Subject: CN=BAC4732D8748C3B3051DA0EA4AD604C20B7C88A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:d7:ea:0f:92:5d:aa:7b:49:9e:27:3d:7d:
                    11:dc:f5:89:6f:15:81:c2:ab:05:04:bd:7a:a9:02:
                    d3:07:a9:d5:62:f6:f7:a5:c5:be:1f:6a:5f:87:d4:
                    1a:49:cb:76:7c:00:78:b8:70:72:3e:12:0a:ea:f3:
                    1c:ec:75:d9:a4:f5:13:52:0b:13:cc:a5:68:ad:dd:
                    94:67:7e:f4:53:74:63:bc:2a:82:3a:39:d8:9b:5d:
                    d6:30:09:aa:9e:32:64:8b:37:3e:19:f1:3a:f1:11:
                    66:cc:b6:8e:47:97:d5:b5:f7:36:d2:f3:73:ca:ae:
                    b4:39:a1:71:ab:5e:80:a3:32:df:5c:9e:d6:90:7f:
                    8d:1c:98:77:0f:3b:37:89:80:aa:87:fe:35:cf:9a:
                    67:41:f3:64:56:b6:ed:4e:2f:03:82:b4:af:92:45:
                    a0:66:c0:6a:f0:da:41:5b:53:f8:83:6b:b8:d8:4e:
                    63:06:51:35:a7:1a:a3:73:03:23:94:b9:54:6f:b6:
                    9c:fc:b5:1d:ae:5f:d3:3a:a1:15:9d:c9:c2:55:53:
                    6c:68:c0:e8:a9:61:a9:6a:2b:59:d1:98:49:70:42:
                    11:89:d4:c2:a5:36:c0:0b:c2:d1:e8:3e:fe:6f:4e:
                    f4:f3:37:76:6d:61:f2:3f:e8:b9:05:32:4e:a1:58:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C4:73:2D:87:48:C3:B3:05:1D:A0:EA:4A:D6:04:C2:0B:7C:88:A9
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bb:e2:b8:21:aa:82:59:72:6b:64:e9:89:53:73:3e:23:63:8a:
         4d:d1:23:46:fe:d3:29:d4:5e:52:90:b0:b1:87:6b:33:19:31:
         ff:b4:79:42:1e:7b:e9:18:71:52:3e:13:da:21:69:d2:c1:e6:
         0c:16:80:18:a2:f1:1e:06:47:d9:37:76:2e:61:e8:d0:fb:cf:
         24:4d:89:d4:5c:04:e7:21:0b:ca:0a:68:7c:c7:ac:eb:96:74:
         b5:ae:8e:bc:14:81:c1:b4:8a:df:3e:da:fe:f1:57:9f:c8:95:
         2c:2f:1f:ed:9f:6b:e8:bc:95:fc:87:44:8a:9a:d5:66:97:94:
         1b:07:17:00:41:13:d7:b3:57:10:c9:78:66:87:e2:72:84:6b:
         bd:ab:50:42:ad:9d:92:22:b3:f7:3f:1c:97:0e:05:0e:26:e3:
         0a:57:e9:f8:60:4c:9c:1f:90:12:38:46:f4:1e:5a:fb:53:65:
         1f:6a:e1:de:03:a5:1f:30:c4:af:cf:e4:ff:42:81:41:3e:bd:
         b8:9f:50:98:c8:16:be:11:8a:fa:33:97:5c:74:10:2e:2a:c7:
         fc:9e:bf:d8:df:4b:b4:26:90:8b:75:ec:8e:2a:5a:82:8b:14:
         63:72:0f:d6:2e:3e:60:ad:46:7a:8d:e5:7c:30:79:57:ce:ab:
         9e:24:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----