Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33332d313238203d3e20323638393933.roa
File:                     323830343a356463633a3a2f33332d313238203d3e20323638393933.roa (raw, json)
Hash identifier:          7DB2Qw31gR1hJF9VHq/nwiKI+gJaw60d++XJVJMYPC0=
Subject key identifier:   88:AD:B1:76:2A:68:21:7D:72:0F:6B:B2:0A:16:28:C1:14:8C:74:A1
Certificate issuer:       /CN=D61EEF13AA878691CFE0FC11E6527B09A4080979
Certificate serial:       42988F4C0A29C28A78E05E6DC0669F88CE05A479
Authority key identifier: D6:1E:EF:13:AA:87:86:91:CF:E0:FC:11:E6:52:7B:09:A4:08:09:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61EEF13AA878691CFE0FC11E6527B09A4080979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33332d313238203d3e20323638393933.roa
Signing time:             Fri 19 Jul 2024 20:20:28 +0000
ROA not before:           Fri 19 Jul 2024 20:15:28 +0000
ROA not after:            Fri 18 Jul 2025 20:20:28 +0000
asID:                     268993
IP address blocks:        2804:5dcc::/33 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:98:8f:4c:0a:29:c2:8a:78:e0:5e:6d:c0:66:9f:88:ce:05:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D61EEF13AA878691CFE0FC11E6527B09A4080979
        Validity
            Not Before: Jul 19 20:15:28 2024 GMT
            Not After : Jul 18 20:20:28 2025 GMT
        Subject: CN=88ADB1762A68217D720F6BB20A1628C1148C74A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:7f:c7:01:4f:92:6d:0c:b8:95:1e:80:24:
                    a2:2b:6b:a3:bd:fc:68:fb:53:5b:90:1d:d7:06:59:
                    62:23:e8:ea:82:72:96:eb:25:b1:90:87:be:b8:69:
                    63:66:2d:b7:4d:f4:0e:f9:2e:0c:ad:f2:10:1d:98:
                    07:8e:f5:80:7b:31:24:5f:e1:d2:1f:6e:40:15:65:
                    6d:77:f3:e6:c9:37:f5:30:c9:f4:7c:95:8b:27:31:
                    af:e0:bb:bc:8b:b6:d8:5b:82:9c:80:7b:e9:b5:5e:
                    c2:4a:72:3b:54:ed:a0:98:66:75:46:0c:0b:ee:1e:
                    7e:92:6c:07:34:4e:f1:ec:e5:7d:5c:a2:aa:2b:5e:
                    e9:3b:c5:79:de:9e:30:36:d3:ac:70:53:61:1b:6c:
                    be:1a:a5:6a:be:ac:6b:8a:33:0f:cb:fd:0f:41:02:
                    74:c9:91:71:19:7f:9b:66:98:78:83:ad:a4:85:66:
                    07:b2:3d:18:0d:16:6b:eb:4c:76:1f:05:7c:82:9a:
                    6a:4b:7d:7d:b2:99:1b:03:e2:67:bb:a2:2b:1e:63:
                    16:90:67:c3:05:06:65:f6:e0:82:80:9a:cd:9d:2d:
                    ae:f1:51:de:cd:3c:b3:ae:77:03:35:dc:8f:9c:96:
                    58:47:30:5a:c9:f4:95:f0:31:fb:87:c6:32:ac:c2:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AD:B1:76:2A:68:21:7D:72:0F:6B:B2:0A:16:28:C1:14:8C:74:A1
            X509v3 Authority Key Identifier:
                keyid:D6:1E:EF:13:AA:87:86:91:CF:E0:FC:11:E6:52:7B:09:A4:08:09:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/D61EEF13AA878691CFE0FC11E6527B09A4080979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D61EEF13AA878691CFE0FC11E6527B09A4080979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33332d313238203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dcc::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:91:90:ea:f2:9d:e3:f9:36:d2:95:09:89:9d:9a:af:86:9e:
         ee:05:93:04:d4:16:72:dc:09:a8:be:c2:36:38:9a:c9:84:d9:
         cf:50:83:69:d7:c9:ef:9a:e8:91:a5:dc:ff:ca:f6:3b:33:08:
         c9:8e:2c:d5:7b:4f:0e:83:27:eb:d1:d1:9b:71:a5:5c:3c:09:
         da:3e:ea:cd:c9:4a:95:5a:40:ee:dd:42:57:10:68:b8:e6:d4:
         6e:1f:ab:34:39:ea:07:50:2d:59:55:d0:60:7b:1f:c6:70:65:
         0e:a6:94:bc:ea:0e:c1:f9:81:ba:4d:9e:3c:7f:97:16:c5:9a:
         f5:dd:14:2c:db:ab:5d:73:69:85:d6:af:1a:30:f3:2e:40:cb:
         7d:f1:77:81:67:51:77:ed:f0:14:d8:f3:bf:8f:27:f7:9b:2a:
         01:db:6a:0e:58:03:dd:2e:89:5c:e0:d4:a4:9f:75:ca:0f:bf:
         78:65:c6:13:13:dd:63:95:8b:21:42:c9:e4:32:c3:1c:1d:fa:
         32:60:68:cc:e9:4c:5a:5f:93:b0:c4:9c:9f:be:dd:dd:8f:c8:
         3e:a6:11:9e:8d:28:a8:a2:0d:b7:e7:57:b8:be:c0:07:77:a2:
         58:26:c2:bb:6b:1e:8d:cd:0d:5f:2d:29:73:3c:0e:4e:bc:6c:
         e7:a0:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----