Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/2/323830343a356436303a3a2f33322d3536203d3e20323638393638.roa
File:                     323830343a356436303a3a2f33322d3536203d3e20323638393638.roa (raw, json)
Hash identifier:          40Agv2LoB+oSdkV1gNmUmY7bQ6IAY6O5D7TMJC4OeyY=
Subject key identifier:   D4:1A:A3:F3:1C:7F:10:38:60:C0:C1:C7:2F:83:A4:23:5E:7A:6E:84
Certificate issuer:       /CN=6D88A75E3024E8FD7AA5DAA8100A045D3F0B3711
Certificate serial:       5E2D5382A5BF92CD0DD21A26B50DB4B86C32627E
Authority key identifier: 6D:88:A7:5E:30:24:E8:FD:7A:A5:DA:A8:10:0A:04:5D:3F:0B:37:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D88A75E3024E8FD7AA5DAA8100A045D3F0B3711.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/2/323830343a356436303a3a2f33322d3536203d3e20323638393638.roa
Signing time:             Thu 04 Apr 2024 23:42:43 +0000
ROA not before:           Thu 04 Apr 2024 23:37:43 +0000
ROA not after:            Thu 03 Apr 2025 23:42:43 +0000
asID:                     268968
IP address blocks:        2804:5d60::/32 maxlen: 56

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2d:53:82:a5:bf:92:cd:0d:d2:1a:26:b5:0d:b4:b8:6c:32:62:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D88A75E3024E8FD7AA5DAA8100A045D3F0B3711
        Validity
            Not Before: Apr  4 23:37:43 2024 GMT
            Not After : Apr  3 23:42:43 2025 GMT
        Subject: CN=D41AA3F31C7F103860C0C1C72F83A4235E7A6E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:d7:71:fd:f2:5b:be:a7:ce:2b:ba:dc:fd:
                    d2:9b:db:28:62:c5:1c:b3:c5:21:a2:ba:2e:d1:ce:
                    b7:ea:26:5b:f9:21:42:0d:68:12:71:70:6e:77:75:
                    11:8b:5c:19:b1:ed:5e:d8:f6:04:e6:52:e9:40:8f:
                    68:f2:d8:26:6e:55:20:c2:47:42:ef:b4:1c:62:12:
                    2b:65:7a:8d:a7:fe:cb:cc:ac:f2:2f:4b:75:b1:73:
                    80:cd:53:00:8f:4d:43:52:7e:1f:a9:55:bf:f7:d8:
                    da:8e:20:b3:4a:86:34:6b:c4:d1:0e:3c:6e:3d:39:
                    bc:c2:68:42:3e:28:c9:10:b8:5e:25:77:0f:fd:67:
                    d7:dd:8c:c6:4c:6c:c8:1e:b2:91:6b:01:91:9d:93:
                    62:d8:f4:72:c3:2d:58:fd:a5:b9:08:39:e6:73:8f:
                    3d:34:15:de:46:5c:9b:6c:dd:87:40:7a:e9:9b:42:
                    84:8b:0c:66:1b:4d:d2:56:fa:e0:d0:7d:2a:84:af:
                    fc:98:9d:ef:9f:8f:6e:20:38:be:05:05:c2:eb:67:
                    7d:5b:01:eb:31:1a:1f:d0:e5:13:63:26:c0:1a:aa:
                    66:87:6e:da:13:c5:52:44:94:a7:a6:e9:e4:7f:c3:
                    a2:e5:2c:83:03:9f:11:b8:3b:25:4a:16:7b:fb:e9:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:A3:F3:1C:7F:10:38:60:C0:C1:C7:2F:83:A4:23:5E:7A:6E:84
            X509v3 Authority Key Identifier:
                keyid:6D:88:A7:5E:30:24:E8:FD:7A:A5:DA:A8:10:0A:04:5D:3F:0B:37:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/2/6D88A75E3024E8FD7AA5DAA8100A045D3F0B3711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D88A75E3024E8FD7AA5DAA8100A045D3F0B3711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/2/323830343a356436303a3a2f33322d3536203d3e20323638393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:76:c9:bb:92:66:e9:3c:91:55:9e:91:91:4c:ed:ad:cf:48:
         9b:8c:28:c9:b3:bd:80:55:9c:dd:02:d0:a6:93:6d:0c:25:d7:
         42:d7:21:86:fd:19:f7:35:79:4d:dc:21:be:0f:eb:1d:6b:1f:
         cf:c8:49:58:9c:e8:5e:cd:35:c3:e7:1d:cf:cc:a1:d9:8c:41:
         00:96:ca:84:1e:21:c2:20:de:94:82:40:ab:27:3d:23:c3:e1:
         36:79:7e:a1:3f:3c:3c:a1:3b:b5:82:77:2f:c3:a3:17:37:1c:
         ee:56:88:89:1a:f9:b5:ae:56:1d:b7:1e:f3:b1:1c:a4:58:e0:
         10:03:6c:b0:66:c7:40:ba:f0:b5:f3:29:1c:c9:81:ae:b8:2c:
         9c:9d:cf:0e:56:62:c7:13:90:6c:95:db:b9:48:a4:6c:2e:4e:
         e1:8b:66:9a:6c:a6:3c:e5:80:f1:0a:75:50:31:b4:25:69:21:
         bf:0a:c6:f2:30:3c:ba:af:59:2d:e6:74:95:08:79:11:09:69:
         df:d0:05:ea:24:f7:a8:27:e7:f0:c8:ad:b8:5e:dd:cb:c7:2b:
         58:29:2a:74:36:f3:e8:92:ae:97:01:a9:46:c7:7a:2b:be:7b:
         eb:51:9c:dc:e8:c2:90:79:7e:64:84:63:c8:2f:ac:ff:6c:fb:
         b1:61:13:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----