Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/323830343a336239633a3a2f33322d3332203d3e20323636313630.roa
File:                     323830343a336239633a3a2f33322d3332203d3e20323636313630.roa (raw, json)
Hash identifier:          E3HA9V4gHHLNqFkyo/8RW3jJQrEKF2RMGI49Rfe8RY8=
Subject key identifier:   5D:53:32:7B:3F:06:BA:48:52:13:5E:40:50:BB:91:60:61:AE:77:BF
Certificate issuer:       /CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
Certificate serial:       1DE4DBAB7042BE1B33647F43B34FBBCBC024BE11
Authority key identifier: 51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/323830343a336239633a3a2f33322d3332203d3e20323636313630.roa
Signing time:             Mon 29 Jul 2024 16:01:18 +0000
ROA not before:           Mon 29 Jul 2024 15:56:18 +0000
ROA not after:            Mon 28 Jul 2025 16:01:18 +0000
asID:                     266160
IP address blocks:        2804:3b9c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e4:db:ab:70:42:be:1b:33:64:7f:43:b3:4f:bb:cb:c0:24:be:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
        Validity
            Not Before: Jul 29 15:56:18 2024 GMT
            Not After : Jul 28 16:01:18 2025 GMT
        Subject: CN=5D53327B3F06BA4852135E4050BB916061AE77BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:8c:22:2a:89:4b:cf:73:8e:e7:8f:1a:fd:
                    ce:94:b9:4b:a5:9b:cc:0c:f7:7e:fe:79:d6:81:cc:
                    ce:89:51:85:4e:e8:a4:8f:a8:dc:b2:b8:7c:4c:05:
                    e6:46:7a:e9:70:ad:55:43:75:d3:5c:97:e3:25:69:
                    52:ce:0c:eb:52:cb:85:6a:21:56:3d:06:97:90:ad:
                    d9:d5:36:5a:6d:93:78:ab:19:2f:e9:0d:cb:46:e3:
                    8b:d4:75:07:ba:82:72:14:a1:24:35:98:89:be:c8:
                    92:be:6d:97:98:bc:eb:c5:d2:27:06:e0:52:60:19:
                    0b:41:26:94:22:85:b8:c4:83:c6:06:53:41:93:9c:
                    6d:75:f6:3b:e7:78:fe:d8:28:4e:94:ad:8c:61:2f:
                    30:10:ed:2f:52:9a:42:e8:a1:f7:83:ad:e2:b4:9f:
                    cb:47:7a:37:11:b1:08:75:56:42:1c:37:ab:f6:18:
                    3a:4e:d2:4b:7b:19:bf:dd:e2:d3:21:ee:85:e8:a9:
                    c7:1a:30:f5:80:68:77:c9:db:ef:e7:87:42:16:d6:
                    2c:8a:81:72:21:80:be:cd:90:48:07:19:0d:83:8c:
                    4c:ea:4a:16:5c:15:0a:1c:48:ab:cf:f2:8a:75:e3:
                    b0:85:39:fd:5a:7c:20:d6:b0:ef:bc:e0:ef:63:b4:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:53:32:7B:3F:06:BA:48:52:13:5E:40:50:BB:91:60:61:AE:77:BF
            X509v3 Authority Key Identifier:
                keyid:51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/514E4DA72AE5239524C79C4BF5A78B447815F2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/323830343a336239633a3a2f33322d3332203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:e9:d1:b2:6f:82:8e:27:88:66:55:80:f3:2f:f0:4e:bb:
         81:72:0b:ba:05:ff:1d:eb:60:fe:9d:49:b9:84:f9:c5:ac:25:
         ad:0f:84:28:b2:18:80:a6:5f:18:32:74:b9:58:82:36:22:ac:
         8f:08:f8:d1:f2:c3:a2:d8:87:bf:9b:9c:60:c3:6b:a3:a6:1e:
         10:4a:c0:52:53:fb:50:71:60:68:47:72:0a:a0:69:33:b6:23:
         e2:7d:d5:70:fd:94:c0:67:e7:f5:78:38:0f:ae:dd:0f:10:d2:
         d2:5b:77:36:f2:ea:5c:8f:3b:f8:6f:91:bf:06:8f:e9:18:28:
         74:d9:85:d6:55:94:3e:e7:a6:a5:1e:76:aa:86:a3:99:92:5a:
         58:f6:78:c6:61:59:d2:6e:1e:86:74:51:2c:32:68:ad:ad:ad:
         af:fd:9d:57:c2:2d:83:10:01:7b:42:fd:c7:01:f2:23:42:8b:
         2f:44:9d:81:bb:08:20:e4:4e:0c:67:b2:26:fc:52:1d:88:ef:
         23:1c:0d:44:74:d9:f0:db:d5:0e:cd:26:38:db:64:4c:81:d1:
         73:b5:1b:f8:47:be:45:6d:37:2b:99:dd:70:15:3e:75:f9:6f:
         18:87:02:e4:d2:a8:60:25:a1:68:b5:7a:48:a7:85:4a:c1:03:
         77:0c:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----