Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a363030303a3a2f33352d3335203d3e20323636323735.roa
File:                     323830343a333533383a363030303a3a2f33352d3335203d3e20323636323735.roa (raw, json)
Hash identifier:          Dn1Xuw2l3DJ+qUhNeItzUbuKEgFpGkULaDP7xtdxPGU=
Subject key identifier:   7F:E2:AF:C9:37:B4:12:24:0B:9C:B1:4B:E2:4F:AF:70:1C:E9:C7:2E
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       266BEC9757F81354342E154E218409568F90CBB0
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a363030303a3a2f33352d3335203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:58:01 +0000
ROA not before:           Mon 29 Jul 2024 13:53:01 +0000
ROA not after:            Mon 28 Jul 2025 13:58:01 +0000
asID:                     266275
IP address blocks:        2804:3538:6000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6b:ec:97:57:f8:13:54:34:2e:15:4e:21:84:09:56:8f:90:cb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:53:01 2024 GMT
            Not After : Jul 28 13:58:01 2025 GMT
        Subject: CN=7FE2AFC937B412240B9CB14BE24FAF701CE9C72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:66:20:a4:82:47:8d:2b:b3:7a:12:5a:d7:
                    d0:e7:8b:65:dd:e5:fc:c8:bf:72:d0:7c:41:14:70:
                    39:4d:8f:fe:3d:82:76:6f:36:d1:07:2b:4d:50:2b:
                    8c:b7:95:e1:36:d5:9e:ad:0c:35:81:75:63:33:2a:
                    99:d3:72:49:ff:f8:4b:91:ef:d4:91:63:c6:1d:35:
                    1c:56:7f:ce:35:59:04:8d:09:46:63:f9:2d:f8:7c:
                    66:a8:3b:5c:5f:0e:a9:c2:83:84:91:66:67:58:b2:
                    2a:dc:0a:cb:ce:ea:46:10:53:47:ab:48:ad:e6:64:
                    94:cf:ee:65:8e:f9:32:b4:3c:f5:d5:d7:9b:99:42:
                    54:40:0b:da:20:b4:8c:85:6d:a9:40:4a:23:99:09:
                    e1:2f:f6:35:9e:03:fe:16:2d:77:49:93:a0:84:02:
                    a2:12:46:64:16:a6:8d:6f:79:f4:52:cb:29:ca:d1:
                    bf:49:df:b1:fe:2b:75:40:54:8f:44:82:ff:3d:eb:
                    f6:2f:e9:38:35:22:d2:b1:2a:5d:3a:26:c9:13:68:
                    46:5e:09:db:53:fb:b9:f7:e0:c9:8c:ab:8b:fe:39:
                    7b:3b:19:78:6f:de:7c:2f:01:6f:90:05:ba:d4:f2:
                    52:ff:50:01:99:4d:4c:ae:9a:c3:20:db:2b:c1:48:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E2:AF:C9:37:B4:12:24:0B:9C:B1:4B:E2:4F:AF:70:1C:E9:C7:2E
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a363030303a3a2f33352d3335203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         93:f4:d5:9c:af:9b:5f:97:56:30:7a:8f:48:c5:a6:b0:c9:3d:
         58:1d:fb:2e:ba:6c:9d:c4:5b:5b:88:01:82:a3:a7:3b:7f:f6:
         20:8f:e3:e0:7a:e9:cd:ce:4f:73:f8:0a:7a:f7:c1:23:5e:26:
         47:ff:76:c2:ef:46:a0:7f:47:dc:a3:2e:37:1f:b8:df:4f:23:
         51:fd:52:c0:f3:71:1a:9d:31:98:a8:15:65:53:60:99:2d:4d:
         78:16:b8:6a:24:33:09:8d:d7:26:4c:82:d7:f4:79:9d:2e:47:
         ce:50:51:e2:eb:7a:16:eb:79:b0:b5:95:5d:97:81:17:c0:12:
         49:04:fe:68:37:cc:20:8f:4a:02:15:69:3b:26:e0:ff:32:54:
         84:50:16:be:a9:34:7d:66:c4:2f:77:69:e8:e3:4c:ad:d6:f2:
         47:7a:d1:4a:4c:9c:17:7f:b5:19:bb:c0:68:0c:a2:3b:ae:37:
         2e:f7:fc:50:0e:b8:d5:84:7d:ff:ff:ea:92:b7:f8:32:e0:1d:
         30:ec:a5:da:14:ac:22:cd:ad:ac:6e:4e:6e:dd:25:6c:76:fd:
         fb:39:fb:de:23:17:d6:76:c0:4c:74:6e:fa:4e:89:8f:92:f4:
         e4:d1:1e:09:c7:58:d9:1a:48:34:14:92:e5:dc:60:0d:29:08:
         4a:a2:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----