Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa
File:                     323830343a353465633a3a2f33322d3332203d3e20323638363738.roa (raw, json)
Hash identifier:          TdyDNYdk+AeeWbv//lz/nF0ngHiNlBe8E/A0myJN+Ho=
Subject key identifier:   98:72:3F:49:02:09:5B:9E:00:E9:A1:64:96:47:D5:4B:98:F6:86:7D
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       5E24312059599EDC93E57AB6340CA0814F3E15E1
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:41 +0000
ROA not before:           Thu 04 Apr 2024 07:15:41 +0000
ROA not after:            Thu 03 Apr 2025 07:20:41 +0000
asID:                     268678
IP address blocks:        2804:54ec::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:24:31:20:59:59:9e:dc:93:e5:7a:b6:34:0c:a0:81:4f:3e:15:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:41 2024 GMT
            Not After : Apr  3 07:20:41 2025 GMT
        Subject: CN=98723F4902095B9E00E9A1649647D54B98F6867D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:58:4d:e0:11:ac:47:50:d0:b1:3c:dd:b9:
                    58:8e:ca:81:fc:56:bb:b1:4f:4b:30:a1:88:eb:46:
                    01:12:81:b2:6d:a1:e8:82:9a:09:2f:dd:69:61:e2:
                    ac:79:7a:ac:a7:1b:e0:71:05:5d:69:51:bf:c3:43:
                    82:ad:e1:da:4c:f8:e8:0e:4b:da:71:d9:cb:17:2f:
                    72:67:eb:95:ea:a0:b8:53:6b:c1:17:79:c5:e9:0d:
                    0c:68:01:8c:a9:10:29:c0:52:51:e6:85:5b:c4:e0:
                    da:00:9e:80:70:05:98:6c:ec:b2:50:ac:3c:3b:9c:
                    34:ff:06:7d:bf:84:72:0f:d7:12:e2:81:43:4c:98:
                    e4:f2:94:17:b8:a1:16:87:66:e4:3d:5f:71:95:a4:
                    44:55:ff:2c:00:74:31:7f:7a:ac:c8:9f:18:68:8f:
                    13:f9:8d:84:25:4a:20:d9:b6:ee:21:75:9b:22:11:
                    b5:20:e6:87:6c:40:b4:62:75:58:d1:8e:a9:4c:51:
                    4a:68:1a:68:9b:b3:d7:43:f2:be:fa:0b:e0:c7:c5:
                    34:e7:0d:bb:b6:39:3f:71:1a:66:0f:58:2a:21:04:
                    4b:ec:7b:9d:8c:c7:54:4b:52:4b:37:af:51:c3:6f:
                    1e:f3:1d:2a:8d:e1:40:bc:e5:e1:a9:90:4f:58:64:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:3F:49:02:09:5B:9E:00:E9:A1:64:96:47:D5:4B:98:F6:86:7D
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a3a2f33322d3332203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:96:39:00:f3:2f:1d:97:4f:50:31:4e:e0:68:d8:39:42:c2:
         01:e5:24:6d:fb:cb:01:da:55:0d:9b:85:5d:35:e5:04:54:80:
         bb:35:3c:7b:5a:ef:60:7b:31:47:b0:21:0d:7f:23:35:50:65:
         8b:e8:f4:c1:13:78:c6:7f:eb:74:97:72:90:05:60:b6:45:bb:
         c4:15:d5:e9:30:97:76:28:cd:3b:a6:0d:c8:b3:61:94:27:a3:
         95:04:6c:48:7a:ab:d6:73:9f:6a:c7:31:b9:bf:c7:41:2b:eb:
         30:78:3f:27:4f:02:d6:38:d3:58:e0:9e:bf:21:ce:4f:24:75:
         bc:ef:8f:e0:ef:8a:d6:95:0b:ce:d9:b4:74:37:95:46:a8:30:
         04:e5:73:8e:50:e6:ec:31:98:83:65:5d:01:41:f1:47:ea:9a:
         0b:75:ce:a6:1f:71:b5:74:cd:21:7d:30:dc:0b:ad:9a:b0:64:
         a4:ff:dc:35:99:a6:43:61:fc:9f:13:61:7a:f5:bd:4e:9f:fd:
         2f:d2:30:27:46:e9:ea:f5:82:af:89:d4:45:b5:3e:82:82:fe:
         58:cc:bb:a2:b1:7b:d5:1d:36:7d:fa:06:2d:b3:a3:cd:ad:c4:
         5a:2e:3e:42:ba:a3:8f:7e:36:15:29:3e:a3:ea:49:33:97:6b:
         e5:f2:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----