Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33352d3335203d3e20323634353030.roa
File:                     323830343a323039383a343030303a3a2f33352d3335203d3e20323634353030.roa (raw, json)
Hash identifier:          qGGpVQIbZPTXTDN9ypGnng+lYiy7ML/3N3fJVX5pij4=
Subject key identifier:   9A:27:0F:D5:BB:54:19:CF:D4:3C:B3:D7:43:B6:35:90:AC:40:A3:7D
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       0DA5DEB69B959198D7F19B60597C1EF5D42EEF53
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33352d3335203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:48:51 +0000
ROA not before:           Tue 30 Jul 2024 17:43:51 +0000
ROA not after:            Tue 29 Jul 2025 17:48:51 +0000
asID:                     264500
IP address blocks:        2804:2098:4000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a5:de:b6:9b:95:91:98:d7:f1:9b:60:59:7c:1e:f5:d4:2e:ef:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:43:51 2024 GMT
            Not After : Jul 29 17:48:51 2025 GMT
        Subject: CN=9A270FD5BB5419CFD43CB3D743B63590AC40A37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:7b:19:d6:7e:b9:78:23:45:fe:f1:79:95:
                    c7:e3:1c:0c:13:c9:61:00:02:1a:ff:f3:43:e0:15:
                    c3:84:ea:44:48:fa:c1:26:f7:9e:de:55:0f:9b:63:
                    3b:09:2d:50:06:4f:17:4a:4e:ee:bb:b6:63:d5:2c:
                    97:33:c5:af:65:b1:64:ce:9f:cb:74:49:04:4f:d7:
                    03:2a:7b:fb:97:c8:82:9a:62:86:e5:39:0a:c7:57:
                    a9:68:97:f9:b9:03:1e:00:b6:8a:2b:11:96:e0:53:
                    e6:a0:44:db:c1:90:ef:6a:9a:c2:a7:f5:14:3b:11:
                    dc:55:84:3c:da:aa:75:ea:e6:92:51:f3:cf:5a:04:
                    52:8b:63:f7:40:0e:90:e5:a7:62:23:95:98:d6:63:
                    8c:d8:91:d1:a9:8c:79:7d:c2:8d:91:f4:1e:de:20:
                    25:e3:e7:7f:c7:5f:2c:e4:43:70:00:40:62:37:d8:
                    42:8f:45:79:d9:ab:34:3a:4a:56:b4:5a:f5:8e:20:
                    f2:d9:a3:c5:b6:e1:8f:9f:e9:b1:64:a2:64:74:21:
                    3d:6f:9c:02:6c:6a:27:1e:f3:71:41:64:72:bb:b3:
                    8d:24:8b:b9:83:a6:5e:7f:9f:b2:4d:de:77:3f:93:
                    9b:a1:72:fd:fb:e6:33:96:99:60:3c:fe:42:19:20:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:0F:D5:BB:54:19:CF:D4:3C:B3:D7:43:B6:35:90:AC:40:A3:7D
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a343030303a3a2f33352d3335203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         00:9b:f5:d4:10:d0:8a:d5:07:3b:0f:53:b0:27:6a:19:2a:73:
         be:6e:64:dd:21:7b:cb:2b:00:fd:27:13:d3:77:d2:2b:6f:cf:
         db:0d:ef:1a:ee:ef:1e:5d:76:c0:6a:d9:7a:02:2b:84:b9:19:
         6b:ee:e7:29:3d:c3:13:12:03:49:a5:1b:bc:9b:cd:0f:9f:3f:
         90:e0:d6:72:5a:93:55:7f:46:3b:45:4f:3e:46:10:9f:aa:cf:
         0f:88:9d:2d:a8:6d:45:a4:84:53:fe:92:ca:90:6b:82:a6:ff:
         ba:9f:21:1b:70:5a:53:c8:24:96:cb:12:ae:92:d2:0b:72:19:
         5c:a7:90:8c:76:54:a3:7d:fb:af:46:1c:ca:3d:2e:cc:45:50:
         50:ee:53:86:41:6b:51:b7:bd:44:42:bd:7d:44:f9:16:d0:98:
         57:2f:99:9c:20:e4:cc:02:e2:26:bc:41:4f:29:5b:b5:85:52:
         e7:6f:dc:12:70:01:10:70:b7:b9:be:b1:60:11:2a:bf:36:89:
         b3:b7:99:c5:b4:5b:be:ce:a2:6e:96:5c:2d:b1:69:b8:e8:92:
         80:75:ce:08:30:5c:c8:7d:3b:8d:67:5c:0c:45:eb:b3:2f:6a:
         64:12:ea:17:57:ae:aa:b1:82:38:ae:71:5d:5b:3d:60:dc:0e:
         dc:04:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----