Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a363030303a3a2f33352d3335203d3e20323634353030.roa
File:                     323830343a323039383a363030303a3a2f33352d3335203d3e20323634353030.roa (raw, json)
Hash identifier:          /lDTE1gTW4+fKXmicAaPPKGYqcFgO+uzr+O7uQmvTJ0=
Subject key identifier:   FA:6D:18:79:93:19:DC:42:2E:EC:D9:2A:64:D4:F4:9F:54:51:4E:E1
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       53115247DF103A255A6A5B8898DA5386E0F95DA4
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a363030303a3a2f33352d3335203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:48:46 +0000
ROA not before:           Tue 30 Jul 2024 17:43:46 +0000
ROA not after:            Tue 29 Jul 2025 17:48:46 +0000
asID:                     264500
IP address blocks:        2804:2098:6000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:11:52:47:df:10:3a:25:5a:6a:5b:88:98:da:53:86:e0:f9:5d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:43:46 2024 GMT
            Not After : Jul 29 17:48:46 2025 GMT
        Subject: CN=FA6D18799319DC422EECD92A64D4F49F54514EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:fd:10:6e:a5:27:92:f9:94:00:ce:94:68:
                    14:a8:45:f6:6d:a0:e4:c2:e8:4b:9c:05:21:1f:1f:
                    47:85:06:36:22:0d:0b:a8:32:47:6a:98:7d:a5:5d:
                    bf:cd:bd:4d:10:3a:31:47:23:11:0e:95:e4:72:29:
                    fc:ca:95:29:a9:37:e2:1b:e6:fd:b0:b3:89:c0:94:
                    dd:27:f6:f6:fa:30:6b:47:79:23:29:19:de:af:8e:
                    3f:93:3a:d5:92:b9:04:05:9b:d7:3c:bd:d0:53:87:
                    e3:8f:08:61:1e:5e:93:d5:7d:b5:b7:01:b6:8a:ed:
                    63:d3:1b:d0:0d:53:72:9e:fe:87:31:7a:e7:8e:fb:
                    88:14:75:8a:c2:f6:55:7f:6a:ad:59:07:f8:70:89:
                    27:23:1a:48:05:b7:b1:91:26:84:5a:ad:7d:6b:84:
                    f8:3b:82:b7:01:f2:be:22:54:24:64:a8:09:01:ee:
                    d4:99:1e:0f:78:4e:6e:85:93:f4:dc:bc:3c:50:63:
                    fa:ce:4d:c0:19:62:78:32:d8:cd:1f:99:1a:fc:78:
                    88:18:3c:a6:64:e1:32:05:18:12:a3:4b:b1:6a:1a:
                    53:84:27:6c:2d:2f:a2:8b:18:6a:9d:6b:73:3a:86:
                    17:ea:5c:d9:8b:bd:b3:ff:e5:c5:6c:7f:0c:ee:7e:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6D:18:79:93:19:DC:42:2E:EC:D9:2A:64:D4:F4:9F:54:51:4E:E1
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a363030303a3a2f33352d3335203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:ec:35:81:10:ab:a1:85:0d:08:0d:81:8e:c2:ce:56:a5:
         58:71:83:37:a5:33:a5:73:18:ac:dc:f0:e1:2e:8c:2a:38:4f:
         cb:74:5f:f7:23:e0:c3:52:ac:bb:5c:ac:57:14:94:c9:d9:25:
         26:0c:4a:c0:81:25:58:53:0f:e8:95:19:dc:32:87:09:ff:c3:
         33:3d:40:80:b1:8f:21:09:eb:0b:b2:7d:9a:9d:eb:f0:ba:e4:
         60:23:90:c6:16:c3:2b:f0:e1:54:f0:26:ed:62:a5:85:ae:e6:
         cb:9c:49:dc:b6:9d:b5:83:43:81:40:4e:c4:a4:cb:8d:d0:67:
         2d:5d:f4:87:3c:6e:d0:ba:2a:f7:c0:2e:84:38:d1:87:ba:a9:
         d6:25:39:eb:a4:9d:a8:e1:57:fb:51:c5:bc:20:f6:b9:0b:cb:
         53:ab:67:5f:71:4d:5b:65:14:b8:08:1b:4d:15:ca:36:bc:fa:
         56:5b:84:d9:24:56:ad:2a:61:b5:18:61:a9:f4:f0:25:4d:3c:
         4d:72:d4:f4:c3:17:bc:29:6b:da:57:0e:a5:b2:2b:a3:33:83:
         47:3c:30:90:88:b5:43:14:4f:ab:7a:55:9d:4d:8e:5e:3f:16:
         2f:65:de:7d:ae:ab:eb:3f:35:b6:91:d0:06:8c:7d:ed:8a:9b:
         85:b9:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----