Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33342d3334203d3e20323634353030.roa
File:                     323830343a323039383a383030303a3a2f33342d3334203d3e20323634353030.roa (raw, json)
Hash identifier:          jNv4g7p4lv0mbwKDhrburJ5xS4PKabzfYuM7OMkEgQU=
Subject key identifier:   12:35:7D:22:86:75:FB:8D:C8:97:1C:61:F6:30:51:1F:0D:43:43:7F
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       556D86A0862A25B72D60026D47B003869CEA1732
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33342d3334203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:08 +0000
ROA not before:           Tue 30 Jul 2024 17:36:08 +0000
ROA not after:            Tue 29 Jul 2025 17:41:08 +0000
asID:                     264500
IP address blocks:        2804:2098:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6d:86:a0:86:2a:25:b7:2d:60:02:6d:47:b0:03:86:9c:ea:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:08 2024 GMT
            Not After : Jul 29 17:41:08 2025 GMT
        Subject: CN=12357D228675FB8DC8971C61F630511F0D43437F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:6b:b4:af:97:ec:2c:58:3d:a4:6b:95:b1:
                    c3:41:47:35:ca:54:20:32:40:93:21:d1:14:51:6c:
                    53:56:68:c6:2f:69:d6:fe:35:19:de:32:8e:78:7c:
                    97:f4:b7:ed:0c:f1:5e:e9:d7:62:3d:cf:e0:f7:3b:
                    95:32:b9:ba:ae:83:20:63:04:a6:27:47:b8:12:65:
                    cc:89:3d:87:90:1b:d8:4e:67:b9:6c:03:0d:80:50:
                    7e:33:d9:4b:ad:f2:5c:7a:3e:d3:f9:d9:8f:f5:da:
                    40:43:51:2e:bc:2b:9b:7b:ea:72:aa:51:ea:cd:8b:
                    0e:cd:20:fc:17:d7:ad:98:42:e0:5d:79:3a:e9:19:
                    ae:bd:1b:b7:74:32:20:82:4c:fc:7d:7f:f9:9b:ab:
                    2b:f1:8c:89:c9:fd:c3:d2:69:bd:43:ae:7f:c0:97:
                    97:3c:05:52:05:a8:fc:5b:9a:b3:57:84:43:ea:94:
                    f1:5d:b4:d6:b6:10:17:a3:ca:37:5f:da:8d:17:4b:
                    1d:10:ac:d7:ca:ad:89:b2:66:62:32:e0:54:ba:2c:
                    ae:5b:f6:be:bd:ed:18:f9:75:ce:57:1a:9b:3f:d7:
                    4e:fb:99:77:4e:09:e4:95:23:26:e8:13:ea:cd:a3:
                    86:d4:4f:9e:49:e9:09:0c:4e:a5:93:da:98:49:ce:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:35:7D:22:86:75:FB:8D:C8:97:1C:61:F6:30:51:1F:0D:43:43:7F
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a383030303a3a2f33342d3334203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:a2:c8:59:65:47:8c:aa:64:25:f9:00:90:7e:c2:1e:8e:89:
         91:3c:3c:06:a4:59:7c:9f:37:b7:8e:21:94:15:81:bf:97:51:
         25:28:2a:cc:da:7e:56:ea:22:4b:37:09:b4:05:b3:f0:ed:7b:
         07:fb:62:ac:40:4f:21:c9:a1:f2:5f:28:a0:3f:e5:f3:b3:2d:
         ad:65:92:a2:bb:c8:93:16:aa:01:a5:e0:06:02:98:c6:0f:7f:
         7b:9e:ab:f8:df:95:3b:fa:7f:49:3b:56:34:08:1a:68:47:1e:
         6d:27:21:e7:ae:79:ea:36:21:ad:50:a6:4c:cd:54:c8:ae:8c:
         24:49:1f:97:d8:f7:ea:73:aa:74:ba:95:ea:46:f0:af:95:f1:
         57:4d:17:1f:52:f8:32:e4:9e:2f:d7:67:6d:0d:ac:25:c0:fe:
         2e:7d:73:59:eb:f9:43:50:90:9c:72:13:c5:70:4e:96:33:a2:
         73:bb:7d:20:c5:1a:d6:b1:17:f4:6e:50:93:af:b6:d1:26:05:
         e0:1d:7e:12:63:85:b4:85:3e:77:00:dd:4a:5a:5c:23:e7:d8:
         8b:0e:5f:44:36:d0:92:86:19:b1:9a:d5:dc:8e:8e:c3:35:8b:
         69:cc:74:c7:f5:fa:df:0f:80:a9:2b:76:49:4d:a8:13:d1:e8:
         84:1f:26:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----