Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3334203d3e20323636393532.roa
File:                     323830343a343564343a3a2f33322d3334203d3e20323636393532.roa (raw, json)
Hash identifier:          +hObkJQ8S3w1GM7M6/9dVhxtV8sL1YTlyflv/dmbihA=
Subject key identifier:   5E:A1:84:C7:E4:2F:B7:00:50:2C:AC:D2:3C:8D:A2:C1:B2:BE:4C:44
Certificate issuer:       /CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
Certificate serial:       5177640FAE4BB24CA6042973F563832E1CC39055
Authority key identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3334203d3e20323636393532.roa
Signing time:             Sat 20 Jul 2024 15:49:41 +0000
ROA not before:           Sat 20 Jul 2024 15:44:41 +0000
ROA not after:            Sat 19 Jul 2025 15:49:41 +0000
asID:                     266952
IP address blocks:        2804:45d4::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:77:64:0f:ae:4b:b2:4c:a6:04:29:73:f5:63:83:2e:1c:c3:90:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
        Validity
            Not Before: Jul 20 15:44:41 2024 GMT
            Not After : Jul 19 15:49:41 2025 GMT
        Subject: CN=5EA184C7E42FB700502CACD23C8DA2C1B2BE4C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:4d:8f:9d:14:dd:57:ca:04:00:f5:ff:a1:
                    8e:78:be:8b:b2:ce:f2:65:d3:d9:1b:16:94:2b:1c:
                    d9:15:86:d9:97:b4:ff:bd:da:dc:90:3b:b4:3c:1d:
                    e6:55:45:70:8d:bc:ab:7a:d0:06:d7:b4:20:cd:16:
                    3d:dc:38:67:a1:a9:d5:46:d7:be:98:b4:95:19:8e:
                    9a:c6:20:ce:ba:84:92:de:56:f9:2f:68:9c:3e:11:
                    72:95:e0:46:be:6a:ab:4a:43:2b:86:5c:b8:d4:61:
                    c2:62:ee:1e:7d:2b:1f:0f:b4:14:0b:b1:f6:bb:f9:
                    89:e9:2b:8a:6a:db:ce:1f:7f:56:34:e0:be:c2:c4:
                    43:dc:1a:9c:0c:45:a1:2d:0e:7a:7c:5f:ff:7c:57:
                    a5:50:6b:af:a0:3f:7d:90:a2:77:6a:0e:57:bd:da:
                    72:68:1e:5e:af:ab:2a:d6:8f:53:32:1b:4f:a2:8d:
                    90:d5:1d:d4:2b:88:d1:ef:f5:53:2d:b4:f6:45:3c:
                    18:ef:75:16:ef:8f:0e:98:ae:5c:37:e5:b2:86:c2:
                    1b:dd:fc:e0:3d:e2:0e:f9:a4:bb:0b:2d:82:6c:4a:
                    ab:77:73:e5:69:20:3c:ba:6f:de:ed:ab:ab:7d:87:
                    cd:f5:09:8c:dd:0c:f5:2a:85:50:c0:ef:5d:95:9a:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A1:84:C7:E4:2F:B7:00:50:2C:AC:D2:3C:8D:A2:C1:B2:BE:4C:44
            X509v3 Authority Key Identifier:
                keyid:F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3334203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:74:26:7a:02:87:8a:a0:04:e7:99:45:bd:0e:fd:8c:06:6e:
         31:cf:85:8d:57:05:7d:f5:78:b3:73:f4:3d:4b:c8:a7:b4:5b:
         6f:04:c8:3e:1d:2d:48:78:82:da:80:86:04:b2:14:21:b5:e5:
         f7:c1:db:af:59:2f:03:16:87:8c:4e:5a:2d:92:83:21:6c:ae:
         f1:a8:14:e1:e7:4c:84:af:af:50:d2:e9:1b:31:3f:3d:57:37:
         02:9a:90:09:5d:2f:e8:10:ae:b7:30:9f:f4:01:6a:88:ac:40:
         bb:46:04:c9:58:93:8c:43:5a:f9:93:34:ed:84:b0:d8:9f:c9:
         0f:05:7f:6d:10:30:e0:6a:92:d6:11:6e:57:6d:ef:1b:68:ec:
         c2:47:00:84:d3:65:63:1c:ca:94:20:28:07:1d:4a:b9:a2:f9:
         ac:89:76:e4:c0:da:54:9e:e3:71:3e:6b:59:07:d3:ad:b4:e2:
         c2:92:db:68:fb:6f:af:ca:dc:ac:da:d0:e9:f8:d5:eb:4a:92:
         1c:bf:aa:e3:4b:ba:a0:ab:c6:e4:75:d4:71:7e:17:73:3f:2a:
         42:ae:31:87:f0:ea:f3:fa:34:a4:f1:77:7b:ab:b3:75:56:c6:
         e8:1f:a5:68:d2:47:36:36:cf:0e:74:60:5d:8f:aa:e3:e0:83:
         ee:17:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----