Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33332d3333203d3e20323634353030.roa
File:                     323830343a323039383a3a2f33332d3333203d3e20323634353030.roa (raw, json)
Hash identifier:          cErXAQv6Fs4ZLDV2tKfWoHjQeo2i5v2JGz0Kttc97Ro=
Subject key identifier:   07:80:89:E2:1E:C4:60:FE:42:B8:82:30:F8:15:F1:6D:C6:8A:75:81
Certificate issuer:       /CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
Certificate serial:       0103FA9AF8823E5A8A0C10374B4FFCFE2C6456DF
Authority key identifier: 5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33332d3333203d3e20323634353030.roa
Signing time:             Tue 30 Jul 2024 17:41:01 +0000
ROA not before:           Tue 30 Jul 2024 17:36:01 +0000
ROA not after:            Tue 29 Jul 2025 17:41:01 +0000
asID:                     264500
IP address blocks:        2804:2098::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:03:fa:9a:f8:82:3e:5a:8a:0c:10:37:4b:4f:fc:fe:2c:64:56:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD3911137575EB93CE8365D8A4CD0551A4D9BE6
        Validity
            Not Before: Jul 30 17:36:01 2024 GMT
            Not After : Jul 29 17:41:01 2025 GMT
        Subject: CN=078089E21EC460FE42B88230F815F16DC68A7581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:3e:53:18:74:01:7f:76:00:c3:c7:84:81:
                    89:3f:85:fa:b6:4c:0d:e7:ac:4e:28:75:75:54:ff:
                    0f:02:f3:c6:7b:ea:56:46:22:4f:46:a1:2c:9a:0e:
                    5a:5a:cf:28:78:91:1f:5c:86:0d:8b:f4:0f:25:69:
                    eb:2c:71:9c:30:a7:ec:51:7b:d5:1e:6e:17:aa:e3:
                    72:59:39:43:b3:73:af:a3:e0:85:72:ce:95:c8:a5:
                    fc:96:5c:08:ed:c1:49:30:9b:e1:5f:47:33:f2:d4:
                    34:0e:d4:ce:b4:02:1f:cb:e9:98:af:29:21:29:28:
                    2d:65:30:37:d9:0e:4a:57:6e:41:45:13:b3:35:0e:
                    9e:b9:98:d8:66:bc:77:70:a3:45:ba:8b:59:4e:a9:
                    1d:46:33:5a:8a:e7:6a:48:1d:5c:96:2c:6f:a4:00:
                    70:5a:49:75:29:99:8d:f8:98:4d:73:3a:a9:4e:1a:
                    5e:bb:65:48:51:78:37:0b:38:29:23:41:cb:0f:31:
                    d1:d7:4c:c3:dd:4e:1b:8b:ad:f3:d0:74:aa:38:89:
                    cf:c3:4a:8b:38:f2:22:07:c2:07:53:d7:9d:0b:4a:
                    68:5b:68:b9:b7:08:10:d3:8c:59:43:e1:30:f7:a4:
                    89:6d:c3:95:87:8e:44:e1:aa:6e:bb:72:49:a5:55:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:80:89:E2:1E:C4:60:FE:42:B8:82:30:F8:15:F1:6D:C6:8A:75:81
            X509v3 Authority Key Identifier:
                keyid:5B:D3:91:11:37:57:5E:B9:3C:E8:36:5D:8A:4C:D0:55:1A:4D:9B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BD3911137575EB93CE8365D8A4CD0551A4D9BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33332d3333203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:ba:a2:91:0f:d8:62:f4:21:2d:c0:0f:d1:2b:cc:74:5c:94:
         9d:43:77:71:4d:1f:6d:ab:d6:aa:8a:79:37:96:52:d6:d3:d5:
         86:b5:bc:ae:77:7b:9c:ff:88:f9:db:28:4e:f8:f5:de:34:ce:
         22:c2:6e:70:cf:1d:c5:51:23:42:98:92:17:41:34:8f:8f:b3:
         3f:f3:e0:ab:36:95:77:f3:6a:94:2e:1c:b2:0a:ee:26:c2:21:
         0f:a8:02:40:ca:7c:fc:78:ed:cf:6a:fa:cb:c6:0b:fd:40:d4:
         2e:f6:df:6f:79:7b:b1:34:d6:05:9e:75:fe:29:19:1c:b9:c2:
         16:98:8d:49:e6:c3:48:26:7a:83:63:d9:12:fa:04:52:d4:0d:
         d8:ed:0c:5e:20:48:e0:07:bf:f5:54:9f:eb:35:e6:02:d2:8e:
         de:77:e5:7e:42:f4:b3:92:4a:d3:81:46:51:bc:00:c5:61:d3:
         ad:8b:f1:cd:9c:8e:86:6b:e9:df:18:22:fb:8f:1b:d2:0c:88:
         1b:40:4f:20:c9:30:38:3d:0a:59:40:4a:d6:23:99:de:34:05:
         8f:b4:a8:33:37:f4:41:67:d0:88:2d:12:95:c6:45:b1:6d:40:
         27:27:ed:ff:10:ba:13:22:eb:7b:ee:86:8d:85:64:a2:4e:7d:
         3a:e3:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----