Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33332d3333203d3e20323732353636.roa (raw, json)
Hash identifier:          8LAx0FefxnJTFqzoTLiyiPvJcIugbDb+slC1QF3WjMk=
Subject key identifier:   17:AF:FA:9D:C7:44:4C:EF:28:0F:3A:99:59:D0:95:41:28:A6:F4:D7
Certificate issuer:       /CN=20EE33C957E1A859D49A5E411C799465085E928F
Certificate serial:       581D7955F24D015119311F0A13CC812C5BA2C875
Authority key identifier: 20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa
Signing time:             Tue 23 Apr 2024 22:16:34 +0000
ROA not before:           Tue 23 Apr 2024 22:11:34 +0000
ROA not after:            Tue 22 Apr 2025 22:16:34 +0000
asID:                     272566
IP address blocks:        2804:853c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1d:79:55:f2:4d:01:51:19:31:1f:0a:13:cc:81:2c:5b:a2:c8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EE33C957E1A859D49A5E411C799465085E928F
        Validity
            Not Before: Apr 23 22:11:34 2024 GMT
            Not After : Apr 22 22:16:34 2025 GMT
        Subject: CN=3082010A0282010100CC7E91B8B9283C00CD0FA3DE6FE0E02937179FFE3F795A55D2C14E05CB5A62E23AA319935F462A697D4EDE52E9B15678672E23DF90755870FD477C34DAF50FF66C7AE07FE7228376FD67F2BAFBADD11353E4BD6DA9CC4C98AD6CFB075653ABEBB1171093086ADBDFDD583E8ACB8129C3B5CE0406C2CDB3E69EBE347E8286C0A546AB6AF5BCDEC229E980ACBE73E947558F5C63790FD6ED03B77B0F3F713B166B040187A29DF98CAB7DECE1BB494AC6BA5338E63D64499F212A5098F6C7B9008AB33AFA66EFCA699DCEFD6453314D150A65844D70B7EA54029265F403AA16A3F20A5B0201C13F0390AE2B80901424ED54AB7680165A1F657F3393B90EACF115C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:91:b8:b9:28:3c:00:cd:0f:a3:de:6f:e0:
                    e0:29:37:17:9f:fe:3f:79:5a:55:d2:c1:4e:05:cb:
                    5a:62:e2:3a:a3:19:93:5f:46:2a:69:7d:4e:de:52:
                    e9:b1:56:78:67:2e:23:df:90:75:58:70:fd:47:7c:
                    34:da:f5:0f:f6:6c:7a:e0:7f:e7:22:83:76:fd:67:
                    f2:ba:fb:ad:d1:13:53:e4:bd:6d:a9:cc:4c:98:ad:
                    6c:fb:07:56:53:ab:eb:b1:17:10:93:08:6a:db:df:
                    dd:58:3e:8a:cb:81:29:c3:b5:ce:04:06:c2:cd:b3:
                    e6:9e:be:34:7e:82:86:c0:a5:46:ab:6a:f5:bc:de:
                    c2:29:e9:80:ac:be:73:e9:47:55:8f:5c:63:79:0f:
                    d6:ed:03:b7:7b:0f:3f:71:3b:16:6b:04:01:87:a2:
                    9d:f9:8c:ab:7d:ec:e1:bb:49:4a:c6:ba:53:38:e6:
                    3d:64:49:9f:21:2a:50:98:f6:c7:b9:00:8a:b3:3a:
                    fa:66:ef:ca:69:9d:ce:fd:64:53:31:4d:15:0a:65:
                    84:4d:70:b7:ea:54:02:92:65:f4:03:aa:16:a3:f2:
                    0a:5b:02:01:c1:3f:03:90:ae:2b:80:90:14:24:ed:
                    54:ab:76:80:16:5a:1f:65:7f:33:93:b9:0e:ac:f1:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:FA:9D:C7:44:4C:EF:28:0F:3A:99:59:D0:95:41:28:A6:F4:D7
            X509v3 Authority Key Identifier:
                keyid:20:EE:33:C9:57:E1:A8:59:D4:9A:5E:41:1C:79:94:65:08:5E:92:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/20EE33C957E1A859D49A5E411C799465085E928F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE33C957E1A859D49A5E411C799465085E928F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/1/323830343a383533633a3a2f33332d3333203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/33

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:6e:0c:52:0d:4e:14:d4:01:70:ad:f1:82:21:3b:19:61:
         33:e5:f9:cb:19:9c:b4:d5:aa:f2:29:49:f9:96:2a:ce:76:c0:
         2f:e6:5f:a2:2a:2a:4f:da:9e:4e:42:63:72:52:83:a8:22:cb:
         cc:c6:a4:0d:e5:87:f6:15:75:e6:ea:de:e2:b6:cd:d8:f7:86:
         b5:e2:2e:c7:e9:f5:09:f5:3e:a8:c0:21:e8:82:32:2a:78:df:
         17:a4:ba:09:17:a5:2b:d5:b9:1f:e1:67:bf:ef:e4:7b:22:e3:
         09:2b:a4:77:1c:cc:a2:61:d7:bd:1c:7b:68:39:8e:4c:7f:0b:
         bc:ef:63:9d:c8:69:eb:f8:0c:cb:93:10:c5:9a:1b:e4:be:cd:
         3e:72:2e:97:5c:a0:e3:56:09:38:74:9a:68:a7:b2:a1:56:51:
         52:93:b5:0a:62:f1:aa:55:1d:fc:d2:e9:29:9d:e6:02:e7:8c:
         e4:25:99:03:ac:37:1d:5b:a1:b8:fc:5f:eb:32:88:6a:39:19:
         53:c2:99:06:06:7d:31:eb:78:bc:5c:87:ea:f1:fd:18:cb:ac:
         49:72:f2:d0:28:2b:4e:28:07:3a:bf:fc:9e:53:4f:a2:8d:0d:
         2c:71:2a:16:f7:db:14:3b:6b:a0:8a:24:88:bc:26:7d:12:75:
         ce:ac:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----