Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          TTvKBRBq/dZ+GqLOJdn2ll+058yzQ+vH4wUND2fZ5ag=
Subject key identifier:   84:E9:76:01:0D:9C:51:C1:76:65:C6:79:50:74:0D:5C:3E:3A:6F:9E
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       35745370A5BD3E5661F0DE659A6A3F4E73480D19
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:26 +0000
ROA not before:           Thu 16 May 2024 17:00:26 +0000
ROA not after:            Thu 15 May 2025 17:05:26 +0000
asID:                     270760
IP address blocks:        2804:70fc:b000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:74:53:70:a5:bd:3e:56:61:f0:de:65:9a:6a:3f:4e:73:48:0d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:26 2024 GMT
            Not After : May 15 17:05:26 2025 GMT
        Subject: CN=84E976010D9C51C17665C67950740D5C3E3A6F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d6:ec:a6:9f:a9:74:cd:3b:07:66:ca:a0:5e:
                    75:85:e4:a3:93:9f:aa:af:13:21:07:ea:d9:51:da:
                    75:a2:c2:36:6f:74:81:29:f3:67:84:7d:48:ec:dd:
                    78:08:0a:fe:1d:79:01:45:99:8d:ea:db:dd:bd:79:
                    cb:b3:8d:07:a4:b0:ee:f4:f2:e6:bb:58:4e:6e:2e:
                    c7:af:7b:83:30:20:79:85:aa:6b:d7:90:78:ff:5e:
                    c7:ab:b3:6e:8f:3e:23:04:cb:97:78:20:3e:fc:1a:
                    3f:36:1e:8c:36:3a:bc:36:37:6b:e0:bb:f1:49:69:
                    40:49:a6:0b:cc:03:5f:37:3b:75:b0:17:02:d5:92:
                    91:37:d9:8e:2e:a7:b7:d0:c3:31:94:d3:55:29:bc:
                    2b:f3:a3:64:b7:dd:b0:77:25:7a:ee:83:4e:01:8e:
                    0b:d5:21:3b:44:f9:ac:a3:5f:df:d4:4d:90:d3:4d:
                    5d:f8:d4:e8:b4:96:5b:1b:a2:28:c2:35:25:f3:12:
                    68:15:13:26:80:bc:e3:7c:fa:16:10:f2:11:28:65:
                    bf:df:59:80:ee:aa:ff:f3:2b:20:e4:2b:19:5c:1d:
                    23:24:c8:70:7a:b5:69:9f:ed:48:95:16:f3:01:3c:
                    7d:64:a8:37:ea:20:1c:3d:8d:8b:d7:a6:3b:ff:ae:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:76:01:0D:9C:51:C1:76:65:C6:79:50:74:0D:5C:3E:3A:6F:9E
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a623030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:f2:d2:f7:3f:08:8e:97:70:b7:b0:b2:b0:e0:54:1f:4b:ae:
         9e:34:b5:9a:7c:a7:06:59:fc:ce:c6:69:a5:92:56:22:f9:b6:
         76:9d:a3:69:89:be:14:c8:f4:17:b8:c7:82:46:b2:be:d3:0b:
         f5:a1:94:75:49:e2:b7:2b:03:c7:fc:dc:d8:cc:2b:d6:61:19:
         60:68:a6:b3:81:a1:2b:f8:25:f2:76:a5:48:f2:ee:a9:7a:31:
         80:64:c4:9f:50:78:c4:a4:75:72:df:e6:f7:01:9d:77:41:68:
         aa:3c:6f:7b:de:2e:4e:92:d9:e1:39:e1:c1:bd:9e:8c:c6:bf:
         96:bd:91:7b:1a:71:81:fa:ec:3f:5e:df:9d:93:71:6d:40:0d:
         5c:a9:b8:05:d3:84:d5:95:5a:ff:ef:77:ec:5b:32:c1:d0:4c:
         8f:96:bd:44:9e:9e:a7:25:12:01:f7:8d:83:b7:6e:f0:f9:b7:
         e0:f1:e2:bc:6d:7b:c5:08:16:7a:5f:fc:61:d4:45:e8:b8:b0:
         47:27:05:6b:6b:e2:64:d8:85:27:bb:c3:15:0f:c1:3b:ef:da:
         f7:bb:29:25:55:99:68:53:fa:21:53:23:7a:a8:b3:b1:b0:10:
         da:30:76:d0:81:ab:be:88:e6:99:9c:e0:44:c4:7c:c9:da:fa:
         a2:ef:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----