Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa
File:                     323830343a356663633a3a2f33322d3332203d3e20323639313234.roa (raw, json)
Hash identifier:          Py0DEIpYglk6nr+su86HH345163nzud7YLBX3+MN0DQ=
Subject key identifier:   3F:62:31:5B:D7:34:9F:D9:52:11:F3:65:20:EA:0E:14:61:9A:E0:69
Certificate issuer:       /CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
Certificate serial:       5A7DB25A61F38071E0D02E02421C2F71031DE755
Authority key identifier: 56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa
Signing time:             Mon 12 Aug 2024 20:42:30 +0000
ROA not before:           Mon 12 Aug 2024 20:37:30 +0000
ROA not after:            Mon 11 Aug 2025 20:42:30 +0000
asID:                     269124
IP address blocks:        2804:5fcc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7d:b2:5a:61:f3:80:71:e0:d0:2e:02:42:1c:2f:71:03:1d:e7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56891D77A40DCA11B2F69E869F836BA9899D2D6B
        Validity
            Not Before: Aug 12 20:37:30 2024 GMT
            Not After : Aug 11 20:42:30 2025 GMT
        Subject: CN=3F62315BD7349FD95211F36520EA0E14619AE069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:f2:5a:8a:dd:c3:e8:67:7e:ea:2f:23:05:
                    60:dc:f0:01:7c:a7:08:37:12:50:ca:83:c8:c6:85:
                    e5:d4:39:00:db:eb:9a:ed:7f:54:c8:ff:e1:4b:67:
                    ff:3a:45:02:c3:83:89:7a:ca:9d:0b:97:44:b5:1f:
                    1f:fa:44:6c:cd:f1:0a:7e:91:f4:ef:3c:12:f0:0d:
                    cf:12:a4:06:54:72:fd:9c:9e:3b:b9:ce:1d:00:82:
                    a0:42:13:72:68:8b:e7:96:d9:cd:92:a6:5c:af:d0:
                    b0:b1:f8:d8:d2:1d:e3:1f:e5:34:fa:7a:9a:e7:ee:
                    6a:ff:05:47:4d:57:05:47:17:6b:04:cd:18:0a:4b:
                    bf:43:9b:0a:84:e5:51:9f:63:18:df:e5:15:ab:19:
                    14:44:e5:b6:b5:2f:7f:b3:aa:7a:02:87:4d:56:ad:
                    a3:1e:09:b8:42:be:05:83:17:66:2a:34:0e:a7:22:
                    4e:0e:3e:2e:d0:94:64:86:5b:0c:35:47:c8:39:96:
                    8a:1d:05:bb:0e:48:5d:f8:4c:e0:26:29:79:38:f5:
                    76:45:27:60:d6:f2:45:ff:64:01:d2:2c:21:ab:81:
                    28:55:83:d1:ca:46:1b:36:40:a7:96:8b:44:c7:f0:
                    41:f6:ac:e1:f0:39:67:87:4b:90:ac:a6:71:f4:1c:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:62:31:5B:D7:34:9F:D9:52:11:F3:65:20:EA:0E:14:61:9A:E0:69
            X509v3 Authority Key Identifier:
                keyid:56:89:1D:77:A4:0D:CA:11:B2:F6:9E:86:9F:83:6B:A9:89:9D:2D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56891D77A40DCA11B2F69E869F836BA9899D2D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hhLBfUN7XpjcTWKMxoeFMSv5YBZnH8uPiEvUwftVXU/1/323830343a356663633a3a2f33322d3332203d3e20323639313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:d2:12:0f:dd:6f:20:b0:eb:e4:bb:15:57:9d:1a:4f:3b:ae:
         f5:16:aa:04:c8:a5:67:82:e5:06:f7:7a:16:eb:15:0e:1a:33:
         0d:16:83:e5:1f:f3:c5:0d:7d:93:8f:6b:6e:1d:88:15:c9:50:
         26:c5:9f:50:ce:20:ff:c7:1d:1d:6e:d0:cb:b9:aa:8e:3e:87:
         8d:38:18:36:b0:fa:84:75:b3:79:7e:61:2f:bd:df:70:52:85:
         35:9b:30:72:cf:84:21:ee:0c:5f:de:a6:89:17:1d:90:cc:f7:
         27:2c:6d:d5:65:10:48:39:b7:4b:b4:7c:3e:9e:a1:8b:7b:a0:
         a8:48:c8:f2:7f:d3:46:5c:4f:c0:d8:bf:a1:e3:da:6b:55:a4:
         d4:56:85:46:a7:4a:d2:32:f1:48:3c:e0:65:51:18:b7:67:97:
         c5:ec:e0:5e:a3:68:4b:9a:1b:0c:43:c8:30:e0:5b:56:a9:45:
         d0:9b:43:1d:84:bd:a9:2c:31:28:53:73:97:fd:8e:e5:97:e6:
         0c:e8:f1:5b:f3:9d:ad:3e:e0:67:01:7d:15:ba:ae:2b:e0:fa:
         1a:58:a2:d9:c4:c5:56:2d:a7:36:42:a4:99:f3:92:d8:95:3e:
         16:2b:83:b9:c7:4e:f8:d4:ed:57:99:30:77:b5:94:8c:05:c3:
         b0:68:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----