Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a653030303a3a2f33352d3335203d3e20323636323735.roa
File:                     323830343a333533383a653030303a3a2f33352d3335203d3e20323636323735.roa (raw, json)
Hash identifier:          LiP3YHFZCiNgfZXji3z05F9NJZdjUlTt5YHxv13pOZI=
Subject key identifier:   01:4E:D6:A3:20:22:84:65:4C:31:05:EA:DB:02:9F:C0:F6:75:C1:95
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       65C810974E7BC50D96EB298C32122B836CD7BEDC
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a653030303a3a2f33352d3335203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:58:04 +0000
ROA not before:           Mon 29 Jul 2024 13:53:04 +0000
ROA not after:            Mon 28 Jul 2025 13:58:04 +0000
asID:                     266275
IP address blocks:        2804:3538:e000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:10:97:4e:7b:c5:0d:96:eb:29:8c:32:12:2b:83:6c:d7:be:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:53:04 2024 GMT
            Not After : Jul 28 13:58:04 2025 GMT
        Subject: CN=014ED6A3202284654C3105EADB029FC0F675C195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fe:3b:9a:9a:2f:51:87:3a:fd:ff:a9:1b:2c:
                    da:fe:9a:e4:fe:ae:dc:54:fe:c6:d3:c3:9f:cb:37:
                    69:13:5b:53:8f:6b:e9:32:2c:24:b6:f5:d4:9a:0a:
                    7f:5d:14:04:95:0c:41:0a:40:63:39:21:55:87:36:
                    fc:7b:54:e9:7a:a3:5d:fc:4d:d0:d8:33:99:6f:15:
                    d8:cb:f7:66:da:93:c6:75:db:ae:26:b8:eb:4a:58:
                    e5:cd:ee:1b:b9:14:6c:84:0d:18:24:30:23:7e:6d:
                    ca:97:46:83:3d:d5:07:9b:b7:9a:23:36:ec:9d:e0:
                    30:e9:04:ea:26:81:21:b6:dc:e2:dc:8d:9f:27:23:
                    46:46:40:ae:0a:70:b9:95:59:79:3d:cb:d1:4d:97:
                    cb:cb:95:ff:41:3c:df:67:3e:87:80:a5:f8:8c:0d:
                    5e:e1:81:9f:ea:b0:9b:62:a5:e1:f9:8b:fb:40:4d:
                    e1:bd:4c:0a:8b:8f:7c:35:ad:6a:95:1d:96:7e:37:
                    b3:7f:5f:7d:28:90:02:8d:33:c7:17:a8:6b:f4:9a:
                    5d:fb:21:ea:db:a7:85:1f:72:6c:6a:00:28:21:51:
                    b3:50:d6:fc:7b:5b:e1:0c:87:8a:d1:98:a6:e9:a5:
                    1b:2c:da:d1:8f:46:0c:74:f0:df:3a:6a:64:1f:09:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4E:D6:A3:20:22:84:65:4C:31:05:EA:DB:02:9F:C0:F6:75:C1:95
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a653030303a3a2f33352d3335203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:33:c6:5b:62:ac:2c:15:1d:71:77:dd:9c:4d:2d:d5:dc:
         ac:3e:75:fa:92:35:6a:b9:44:7c:90:b3:6c:fd:b1:ea:2a:c7:
         01:bc:68:9e:5f:b7:7a:2f:ad:71:29:28:2c:1c:5c:69:c0:e8:
         25:50:0f:ac:16:5e:bc:1b:05:e4:99:e0:d1:9d:00:6a:0b:5f:
         0e:bf:db:30:8d:f6:e5:b4:df:fc:ef:40:bf:66:7b:84:41:53:
         9c:37:ea:87:d2:3d:95:9a:79:6c:68:56:33:75:91:69:61:a4:
         6e:60:ba:93:bb:35:9f:98:4f:83:a7:54:18:a1:c8:4b:ae:63:
         f7:3d:fc:fc:b2:8f:7d:b4:33:ce:53:d6:ce:47:98:3d:68:0f:
         e3:b8:18:c0:0f:6c:71:20:0e:f8:1c:27:fd:86:b3:dd:35:32:
         89:4b:e0:76:09:6f:67:3b:e2:06:aa:a6:08:01:e1:da:3a:6c:
         a0:5b:af:35:08:d7:97:f2:f7:c0:af:89:5c:f5:97:a2:cf:fd:
         9b:e2:16:27:dc:56:59:e0:39:85:01:bc:b4:77:b1:9d:23:e3:
         07:45:dd:25:62:f0:80:3a:2e:7b:b7:26:91:65:c4:96:09:8b:
         9d:e3:2c:db:b8:6d:f9:01:9b:33:6d:41:64:d1:1d:ab:fa:49:
         93:f6:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----