Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          /VXH3QoeEL7kTUMH5WlpoWdX62KFpnEnAfKLK9rAnN8=
Subject key identifier:   AF:CD:3B:29:1C:72:2D:55:FA:42:86:B4:5B:AE:9C:12:3B:90:3E:BE
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       147D4DEEC67028DBDAB5010297003CAFB794308F
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:26 +0000
ROA not before:           Thu 16 May 2024 17:00:26 +0000
ROA not after:            Thu 15 May 2025 17:05:26 +0000
asID:                     270760
IP address blocks:        2804:70fc::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:4d:ee:c6:70:28:db:da:b5:01:02:97:00:3c:af:b7:94:30:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:26 2024 GMT
            Not After : May 15 17:05:26 2025 GMT
        Subject: CN=AFCD3B291C722D55FA4286B45BAE9C123B903EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:77:a9:a9:d4:e3:a8:e3:eb:6e:b1:39:c0:
                    0b:cc:24:f2:21:73:da:ec:5c:ef:54:ee:82:76:6f:
                    16:1c:8f:66:ef:04:07:e8:0a:28:43:bf:08:42:ed:
                    dd:6e:ff:36:36:54:8f:cd:e6:85:d9:52:3a:f2:0a:
                    3d:75:a2:a6:21:ac:5b:7e:e8:99:b0:8a:14:b2:41:
                    6e:34:a8:cc:83:38:f6:c1:fd:d0:8a:12:8c:9b:5d:
                    9c:4e:06:88:af:10:b6:c3:da:11:f8:6f:56:4e:7a:
                    b9:3e:47:6d:f1:8a:2e:0f:a7:5c:9c:fe:19:e2:2e:
                    fa:84:eb:a1:0e:22:ff:44:9e:68:41:bf:01:ec:43:
                    33:27:cc:e9:98:14:8b:51:55:81:d7:b3:84:a9:7e:
                    3e:e4:63:36:ae:e1:24:c9:c0:3f:96:d0:d9:3b:a9:
                    76:27:10:b7:08:83:78:c6:2d:39:ef:41:a9:33:34:
                    d7:cd:71:ce:e2:ed:39:d8:76:c2:18:ef:6c:88:15:
                    a9:aa:81:e9:15:16:cf:c2:03:5b:71:9f:10:af:fa:
                    34:d9:85:aa:33:20:5e:7f:05:0d:13:f0:45:ca:dc:
                    1e:ea:b8:2f:e3:24:82:53:8f:91:e1:eb:b2:2b:b5:
                    67:15:fe:9c:b1:5b:e7:96:d2:26:97:7c:e2:41:37:
                    29:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CD:3B:29:1C:72:2D:55:FA:42:86:B4:5B:AE:9C:12:3B:90:3E:BE
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:c8:b0:11:82:99:97:d9:f9:ca:f1:5d:9b:6f:70:e5:63:
         da:a4:8d:af:ac:a5:c4:d6:e7:33:3a:fb:71:18:7f:08:e5:91:
         ec:e8:21:d8:2a:48:f1:c9:6f:27:90:04:ac:71:7a:0f:46:f4:
         a9:3c:1b:b6:c4:91:d1:43:ca:bb:f3:0d:fe:0c:40:6e:09:29:
         ad:18:21:fe:e5:72:5e:a3:68:7f:65:59:d0:1b:e2:b7:18:c3:
         fe:8b:d0:07:ae:5b:89:38:80:d4:c9:4d:3f:2b:3c:e8:93:7e:
         56:b7:85:b3:3e:aa:af:46:28:ba:f2:d1:8d:18:25:81:67:40:
         c7:15:ce:35:ee:42:67:de:84:6d:2c:48:ac:f1:da:c3:c2:63:
         59:75:bf:6a:d8:33:5e:c3:5b:22:fc:b4:09:76:6e:e6:fd:a4:
         74:3e:95:1f:75:b0:9b:2f:8c:a7:c5:b5:af:cf:07:ce:d1:33:
         f2:2b:19:8b:d4:3d:b2:87:26:31:a2:b3:f3:fd:d3:64:5a:99:
         7a:ca:0e:25:47:04:28:84:af:c7:fb:5f:86:5d:a9:b0:c7:c0:
         5c:28:58:52:d5:e3:4b:fb:47:1b:2c:8a:d5:1f:8c:68:e8:28:
         e9:94:7a:c6:d7:81:ce:f9:da:33:f6:24:5e:59:e6:e0:3c:d7:
         e7:cb:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----