Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a3a2f33322d3332203d3e203238313635.roa
File:                     323830343a3334303a3a2f33322d3332203d3e203238313635.roa (raw, json)
Hash identifier:          6Dz/6l2G8xRqJoDDITSIJIS2CxdsQApUpxQDAEUTez8=
Subject key identifier:   7E:78:59:49:81:61:6F:E0:A2:2A:2E:67:73:28:10:59:7A:63:51:54
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       77D2BD43CAD6012ED67BFD88F7C171C54EF166DC
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a3a2f33322d3332203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:39 +0000
ROA not before:           Wed 31 Jul 2024 22:20:39 +0000
ROA not after:            Wed 30 Jul 2025 22:25:39 +0000
asID:                     28165
IP address blocks:        2804:340::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d2:bd:43:ca:d6:01:2e:d6:7b:fd:88:f7:c1:71:c5:4e:f1:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:39 2024 GMT
            Not After : Jul 30 22:25:39 2025 GMT
        Subject: CN=7E78594981616FE0A22A2E67732810597A635154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:1e:e3:db:c6:67:f0:a3:3b:51:e8:47:ee:
                    21:11:2a:b5:e0:4a:06:c9:af:b4:12:0c:2a:19:3a:
                    13:24:26:0c:c8:e3:47:5c:ae:90:d0:f2:0a:e1:a4:
                    f7:81:80:22:c9:1e:e6:2a:df:66:4f:7e:47:35:ed:
                    dc:52:fe:ee:16:ea:61:c8:77:26:80:7f:65:15:70:
                    af:f0:5d:8a:d2:6a:9f:6f:db:8e:64:25:3d:46:42:
                    09:63:98:f9:a0:ab:d3:46:10:08:e7:de:f1:6f:22:
                    08:04:6a:ea:51:0e:5a:a1:db:9a:e0:07:3c:55:63:
                    9f:73:59:eb:6f:65:7c:ef:2b:39:74:f8:87:59:78:
                    b0:1c:c7:39:1e:f2:87:8e:41:f1:74:3b:96:10:78:
                    f5:92:d0:46:9e:e3:fb:01:5e:b9:88:c7:5f:c4:13:
                    d1:c9:d4:0c:20:86:bc:bb:76:9d:ae:52:c2:59:ba:
                    30:77:a4:08:7c:63:63:10:04:c0:66:4f:d1:18:a9:
                    8f:98:1e:af:78:71:04:e0:a2:2f:ff:1c:e9:4e:0e:
                    06:4c:ad:ff:15:89:46:6b:1e:49:0a:69:7b:38:b7:
                    1d:b7:ee:7c:94:34:4f:c4:df:eb:e2:a5:43:7f:fe:
                    04:87:0c:2d:18:f6:0d:b4:91:d2:35:97:2a:31:0b:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:78:59:49:81:61:6F:E0:A2:2A:2E:67:73:28:10:59:7A:63:51:54
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/323830343a3334303a3a2f33322d3332203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:340::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e8:67:9f:da:4d:7b:5b:34:9f:b2:14:4b:f5:ff:b2:22:97:
         1a:e0:8c:3b:e8:8c:e7:2b:e2:d4:5c:60:28:e1:a2:15:c6:88:
         94:04:e7:b7:bb:c2:07:7c:0e:7d:b3:64:3b:91:14:bf:fd:b7:
         97:64:d1:8c:ba:2d:d0:81:ae:7e:b4:9a:19:bd:76:fd:bf:2e:
         f7:f4:aa:30:d5:cf:db:d2:c6:3d:41:a5:d3:63:dc:71:89:ed:
         13:70:02:78:d9:aa:3e:3a:b8:9b:4c:d4:b5:2b:6a:72:19:a6:
         89:bf:e5:ac:6f:a5:9c:e7:ed:a5:9e:a1:61:22:0c:0c:d5:b5:
         32:40:20:14:e4:11:7e:55:a6:09:5e:97:f2:2f:2f:6b:52:9c:
         66:d4:4b:e9:6e:f1:86:aa:b8:49:1c:b9:68:c7:aa:05:dd:75:
         93:4f:a0:aa:57:8a:11:90:80:f2:a8:5b:41:89:0f:af:dc:4a:
         35:95:3e:b6:99:a4:c1:e1:e6:19:ae:f5:91:65:ef:44:40:b5:
         5e:a0:75:da:36:b3:15:6e:23:1f:22:1f:57:f3:8a:96:40:e6:
         a0:b2:d6:87:88:87:2c:88:d1:74:d1:e0:cc:3c:a6:28:34:e9:
         bf:19:b5:34:16:d2:3c:85:59:d3:c8:54:ec:43:3a:56:2d:f3:
         cd:29:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----