Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/323830343a353464383a3a2f33322d3332203d3e20323638363733.roa
File:                     323830343a353464383a3a2f33322d3332203d3e20323638363733.roa (raw, json)
Hash identifier:          TeVbLiO4UY+kwO4JprWzaM8bZnCBoCKiwVaDjsr1wzQ=
Subject key identifier:   5B:32:2F:CB:6B:79:DE:4F:E5:6D:67:FA:02:44:C7:7A:CC:BD:3E:54
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       53E2C301853684B53116C50D72FE0B002E403F13
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/323830343a353464383a3a2f33322d3332203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:10 +0000
ROA not before:           Wed 03 Apr 2024 23:18:10 +0000
ROA not after:            Wed 02 Apr 2025 23:23:10 +0000
asID:                     268673
IP address blocks:        2804:54d8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e2:c3:01:85:36:84:b5:31:16:c5:0d:72:fe:0b:00:2e:40:3f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:10 2024 GMT
            Not After : Apr  2 23:23:10 2025 GMT
        Subject: CN=5B322FCB6B79DE4FE56D67FA0244C77ACCBD3E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:b5:ab:c3:40:fe:db:1d:85:60:f1:7b:ac:
                    8c:75:1f:48:39:a4:b4:6f:e4:1e:af:28:fb:f0:b2:
                    dc:84:aa:cb:23:49:a7:d1:32:7b:f7:8a:a2:2a:81:
                    1d:fd:95:7f:51:3d:15:b8:40:9e:cd:89:6c:3d:e6:
                    a6:ef:a2:c6:f7:0e:ae:ca:dd:d1:57:0a:2e:7d:9e:
                    3f:7b:6a:89:18:f9:9a:68:38:5b:49:21:45:97:22:
                    88:70:77:c0:37:15:91:44:cb:f1:2d:3e:8e:0d:dd:
                    1a:ee:3f:a8:a6:64:f0:d0:5e:be:33:a8:a6:c1:12:
                    fb:9b:12:e8:5b:3c:a9:28:22:bd:27:91:51:3f:a9:
                    6c:e2:d6:f0:b0:e4:af:2c:c8:ce:99:0b:e8:e2:cd:
                    64:3f:a6:10:c2:9b:eb:a3:37:6a:cc:8c:fb:f3:19:
                    dc:99:c1:54:64:99:06:03:96:a4:6b:53:44:45:02:
                    62:ee:aa:cb:75:5b:47:9b:55:8a:e7:3e:e3:ba:e1:
                    a9:af:d6:dd:58:8b:ca:8c:7a:0b:0e:39:f6:ad:35:
                    ce:34:1d:26:0c:9e:e8:8e:d1:29:8c:0e:3f:31:ab:
                    0e:ea:9d:cd:a6:bf:6b:ec:7a:cb:17:b2:8b:f8:4b:
                    fb:61:40:0c:be:41:27:5b:ec:f6:f5:7b:fc:d8:81:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:32:2F:CB:6B:79:DE:4F:E5:6D:67:FA:02:44:C7:7A:CC:BD:3E:54
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/323830343a353464383a3a2f33322d3332203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:44:90:27:e2:d2:4f:52:a8:75:b6:f1:ac:5a:ee:fb:95:00:
         7a:d7:bb:8b:9f:3a:76:e6:64:fc:45:cd:a3:6a:36:5f:20:fb:
         c7:12:b7:3a:2b:4b:05:60:af:56:50:1f:c3:2d:7f:6f:ab:1f:
         e6:9c:dc:24:aa:2a:02:ce:8e:e6:63:10:c7:30:33:ab:48:d2:
         09:10:77:ce:dc:a6:8a:4e:5f:7c:f5:c1:e1:28:e1:ae:c9:e9:
         60:e9:7a:80:a9:64:a2:08:b1:ad:0d:5f:a1:93:38:73:16:0b:
         bd:d2:9e:86:76:e8:41:59:14:40:ce:27:95:84:a2:05:bf:d1:
         54:aa:55:0b:7f:69:48:7c:fa:b3:d7:d3:bb:e2:ce:40:7d:fe:
         14:fd:4d:17:cc:21:69:c1:e6:27:32:d2:00:05:88:99:ce:7d:
         85:00:4e:47:48:5a:cb:60:81:64:d8:6c:41:82:d9:64:54:c3:
         4f:84:08:26:14:9a:47:2d:01:0a:74:01:cf:98:79:4a:c3:31:
         10:83:99:1d:8c:fe:00:e2:7b:b8:78:59:7f:db:5a:6c:eb:08:
         56:3f:c6:f4:84:d9:64:93:af:2b:16:e6:f3:6a:e3:9a:f0:03:
         98:40:ef:45:9c:7c:e6:97:1c:34:48:b7:df:de:73:9f:97:51:
         e8:fe:aa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----