Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          FxNsXtYNmFxDn/NUaLWfN59F0FWUkfOtCTjE8RsL90E=
Subject key identifier:   66:52:A9:29:D4:20:BE:5A:2F:55:34:DD:6E:02:30:9C:D5:B4:9D:A5
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       7DE5B56E6FB56F9347608443FA8F0D7CD1E790C2
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:28 +0000
ROA not before:           Thu 16 May 2024 17:00:28 +0000
ROA not after:            Thu 15 May 2025 17:05:28 +0000
asID:                     270760
IP address blocks:        2804:70fc:4000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e5:b5:6e:6f:b5:6f:93:47:60:84:43:fa:8f:0d:7c:d1:e7:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:28 2024 GMT
            Not After : May 15 17:05:28 2025 GMT
        Subject: CN=6652A929D420BE5A2F5534DD6E02309CD5B49DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:0c:5b:c3:99:ed:06:df:8d:b3:28:1f:d3:
                    e4:37:64:41:c6:da:e7:62:85:30:8b:cc:95:49:80:
                    6b:15:1b:54:7e:d8:c8:cb:d6:ad:13:6d:02:16:64:
                    60:c9:b2:02:18:20:a1:fc:c7:86:04:cd:27:07:2e:
                    55:37:87:04:51:f8:c4:b3:aa:a3:0e:04:23:92:b8:
                    c4:5b:6e:15:2e:54:98:58:29:fa:eb:ad:89:07:e7:
                    b5:43:8f:57:8e:8a:8c:95:61:3e:d7:b8:01:c5:f8:
                    13:62:ef:02:82:88:0f:13:26:60:49:0a:aa:64:15:
                    e3:f4:3a:b9:23:bb:2e:24:1c:86:9f:b7:91:b3:86:
                    03:d3:4e:b8:4d:f1:81:27:ce:79:e2:be:63:42:6e:
                    f3:9b:f0:bd:25:c5:34:d6:02:ba:ce:7c:d2:d3:b4:
                    51:52:ad:44:07:27:cf:d7:3f:22:09:d7:3f:36:d8:
                    ae:7e:5d:2e:9d:9f:d8:e3:ec:aa:2b:20:2a:7e:56:
                    66:b5:df:2e:e2:a6:85:bb:e0:a9:92:87:9a:43:61:
                    e8:97:b1:69:57:6c:a4:9f:0e:15:4c:72:12:75:06:
                    d4:c1:c5:ac:e3:a2:85:89:ac:a0:ff:8e:da:a4:cc:
                    96:1b:b9:99:db:09:2c:14:39:61:9c:f7:f6:e4:b4:
                    86:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:A9:29:D4:20:BE:5A:2F:55:34:DD:6E:02:30:9C:D5:B4:9D:A5
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:84:d4:b1:0c:dc:02:4f:d0:1e:07:b8:b1:c9:d0:ce:a9:9f:
         ee:a3:5e:20:8a:87:0e:52:15:4d:f3:7e:e4:4b:48:f5:6d:07:
         36:eb:ea:63:bc:bc:ef:39:47:4c:fc:1a:f9:12:5f:2a:8a:33:
         5b:d2:d6:5e:de:c0:de:11:32:ab:94:84:7e:75:61:97:07:04:
         e5:b6:33:0e:af:5a:88:9c:dd:dd:db:80:ca:4e:da:b1:27:67:
         f5:21:ad:f7:bd:82:98:a4:9a:0c:cf:d3:95:a3:84:4a:12:47:
         5f:17:46:73:a2:4d:38:89:8b:1b:de:d6:1a:97:a7:f3:f7:e0:
         d1:13:4b:7d:02:53:90:40:5a:3f:9f:ec:83:93:fd:03:d8:ac:
         0c:29:dc:5e:d8:bb:c8:87:05:06:da:18:4d:8d:a6:29:13:8d:
         48:c5:e7:c0:36:fd:36:b9:de:f1:f1:f7:d2:a0:d1:77:f7:11:
         34:95:f4:23:6e:47:7a:d4:62:b6:98:13:ed:6f:9e:e2:e8:53:
         7b:b1:a8:6f:ba:cd:e6:4d:83:53:53:56:8f:ab:d8:29:94:0b:
         14:2b:47:04:97:c0:a0:91:ed:21:b7:60:28:2d:79:5a:a6:ca:
         3e:c8:1e:ba:79:18:68:45:83:37:ee:1e:38:d7:27:14:f1:6b:
         e7:07:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----