Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa
File:                     323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa (raw, json)
Hash identifier:          H/bM2AQ/sDeqo0IYO1hKZyxyauBGB5yX2lj+CtJEVeE=
Subject key identifier:   ED:DC:1B:0B:7F:E5:3D:DC:1F:66:0F:EA:C1:A5:D6:D2:43:1C:8E:66
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       72B2973EB7D3F83521165F757CCB9FBA16F9519F
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:26 +0000
ROA not before:           Wed 31 Jul 2024 22:20:26 +0000
ROA not after:            Wed 30 Jul 2025 22:25:26 +0000
asID:                     28165
IP address blocks:        2804:340:2000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b2:97:3e:b7:d3:f8:35:21:16:5f:75:7c:cb:9f:ba:16:f9:51:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:26 2024 GMT
            Not After : Jul 30 22:25:26 2025 GMT
        Subject: CN=EDDC1B0B7FE53DDC1F660FEAC1A5D6D2431C8E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:5a:ef:a9:2e:54:f0:3e:22:23:07:d1:d3:
                    aa:69:e0:ec:3c:86:78:3b:53:c9:65:2c:f5:7c:cc:
                    94:6c:39:f8:9a:8b:e1:1f:e3:fc:c6:31:35:ad:8a:
                    4e:07:64:ca:7b:1b:3a:00:b9:da:5c:25:de:62:54:
                    57:c2:dd:7e:fd:2f:98:a6:6d:a2:be:f4:b1:08:60:
                    18:e9:50:c5:fa:fd:21:d9:dc:52:65:dd:57:ca:bf:
                    2d:8f:49:e2:39:91:77:64:fa:33:aa:d6:7a:b7:27:
                    39:90:51:04:d6:61:9f:90:71:be:2a:9e:c6:25:dd:
                    90:4c:0c:42:12:3e:e6:de:c9:69:f5:f7:39:26:27:
                    61:91:9e:6b:5b:a0:22:b3:57:96:83:34:ad:ab:16:
                    1f:f7:10:54:25:33:68:c7:88:43:14:91:5e:4b:0a:
                    03:21:e3:a9:99:5b:cf:ca:3a:8b:a4:5c:a5:e0:9d:
                    e6:cc:7e:13:d1:ab:08:43:ba:db:98:15:4b:8f:f2:
                    1e:c2:59:62:c0:0c:75:3d:de:3c:01:ad:d3:f3:0e:
                    b3:0e:cc:af:49:da:f7:23:a8:cf:da:ba:fe:43:f1:
                    9d:1c:e2:a6:3d:b3:cf:ea:63:c6:7d:17:8f:7d:1f:
                    8d:6d:b3:2f:91:07:bf:a3:fb:cd:53:e4:de:e0:31:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:1B:0B:7F:E5:3D:DC:1F:66:0F:EA:C1:A5:D6:D2:43:1C:8E:66
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a323030303a3a2f33362d3336203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:340:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:a1:55:49:1c:2c:8a:b8:74:74:b6:40:a0:75:13:62:46:
         7b:d0:81:04:a4:3b:d0:6d:c9:17:c9:6d:9f:75:41:8e:ab:59:
         a7:2b:7d:7f:6e:27:71:b5:44:be:7e:f5:be:37:c9:b2:f9:ef:
         ee:2d:c4:91:9f:30:fe:d3:e2:0a:c4:5e:00:72:23:e3:1f:83:
         67:01:02:3a:a1:90:4e:66:ba:58:29:aa:eb:38:6c:0e:96:cb:
         49:66:36:7c:64:c3:b4:8d:c2:0f:c7:94:08:33:b1:4a:ac:11:
         8a:1f:8b:40:20:b3:fd:ec:22:7e:d4:28:e1:be:1a:22:8f:91:
         02:64:03:1a:fd:12:fd:2f:b5:32:6d:6d:23:ea:37:9f:02:95:
         84:8c:8b:af:e9:70:6f:a8:a7:0b:e4:6c:54:dc:15:66:f5:20:
         c0:45:f7:ae:75:98:1e:3c:ff:12:92:d0:5f:e0:3d:02:f5:e8:
         65:ca:75:cc:fd:d2:a5:11:85:c9:81:ac:53:d3:56:51:c8:b4:
         e1:fc:ee:c8:71:c4:32:b0:b2:a1:52:69:c4:82:a6:5c:a4:7a:
         86:b8:d2:db:ce:11:a7:f9:fa:b8:49:00:0c:a2:82:d6:06:55:
         f1:2f:2d:e3:be:06:b7:09:38:b3:6a:d7:39:1e:82:81:b1:75:
         ad:86:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----