Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa
File:                     323830343a323566633a3a2f33322d3332203d3e20323634333136.roa (raw, json)
Hash identifier:          yoWGWK0ezrUwJOzpp35IH0TTZy7w14XQWED4qY8RjT4=
Subject key identifier:   D5:99:14:FF:02:B7:EC:39:14:37:6B:8C:70:3D:0D:45:C2:92:BD:BE
Certificate issuer:       /CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
Certificate serial:       6CFB994945BADF6E69E529A21D30C8A8E4F9D0FB
Authority key identifier: 0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa
Signing time:             Wed 15 May 2024 18:24:06 +0000
ROA not before:           Wed 15 May 2024 18:19:06 +0000
ROA not after:            Wed 14 May 2025 18:24:06 +0000
asID:                     264316
IP address blocks:        2804:25fc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fb:99:49:45:ba:df:6e:69:e5:29:a2:1d:30:c8:a8:e4:f9:d0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
        Validity
            Not Before: May 15 18:19:06 2024 GMT
            Not After : May 14 18:24:06 2025 GMT
        Subject: CN=D59914FF02B7EC3914376B8C703D0D45C292BDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:20:6d:24:02:8f:f8:a8:aa:87:9a:d6:ea:
                    94:fe:03:31:a8:5f:e4:b9:78:9f:6b:a2:1b:75:b7:
                    f4:b8:98:66:41:61:b7:65:53:10:03:10:01:cd:ca:
                    a1:a5:f8:1a:01:a5:3b:66:49:01:31:2e:01:f3:6c:
                    8a:78:67:c7:43:ec:ae:92:6b:59:c8:cc:7e:1a:f0:
                    c7:82:57:b9:6f:54:fa:c9:66:1d:9f:6f:8c:21:31:
                    e7:8b:57:25:0f:d9:68:25:a4:c4:f8:6f:4a:ae:e8:
                    87:92:e8:df:c1:c4:a4:7f:ed:b7:7a:c4:c0:5e:96:
                    c1:c8:73:dd:b1:5c:a4:f4:a6:13:09:ea:a3:08:6d:
                    24:89:76:25:01:30:b1:c6:dc:9c:82:79:ff:12:06:
                    88:de:c0:0a:5f:66:12:0b:58:b6:37:21:52:ad:e2:
                    b8:00:f0:73:00:32:fc:a3:91:9c:74:ef:ab:c0:ed:
                    b8:18:51:db:2e:70:8b:c2:3f:a2:4a:34:46:a2:0e:
                    cb:dc:b3:57:84:4c:45:7f:bc:19:75:04:cb:2a:eb:
                    57:5b:79:e5:51:a3:e4:0b:f9:c0:5f:8d:09:88:81:
                    ba:a2:4b:08:a7:9a:b1:e5:46:3d:89:13:a4:20:3f:
                    e0:aa:db:15:e0:17:9b:c1:f6:7b:d7:8d:fb:f2:35:
                    9c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:99:14:FF:02:B7:EC:39:14:37:6B:8C:70:3D:0D:45:C2:92:BD:BE
            X509v3 Authority Key Identifier:
                keyid:0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/323830343a323566633a3a2f33322d3332203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:fa:fc:80:ae:76:59:bf:df:ca:1c:f9:28:bb:71:f7:7a:
         86:45:bf:ae:96:23:0d:97:5d:f5:9a:83:c1:fa:04:c4:58:f4:
         98:41:60:22:f3:c6:f5:76:53:6e:a3:79:ef:36:93:59:8e:5f:
         fa:9e:c3:6a:12:7b:b1:68:de:e2:d0:35:b2:2e:00:3b:21:51:
         5b:ea:e4:5f:9c:39:1f:c7:8c:83:8a:87:af:26:b7:56:14:c7:
         f0:4c:50:93:97:a9:77:d6:4a:07:59:7f:d5:ca:04:be:02:95:
         b6:d0:e6:5b:b9:38:33:49:d7:3c:9a:94:72:7a:22:83:0d:f1:
         51:ca:88:ef:98:18:90:e7:73:e6:e7:49:d8:84:31:0c:1c:81:
         df:89:46:16:3a:2e:de:5f:5f:0d:46:3d:49:70:65:e3:80:93:
         1c:b5:fd:52:7b:df:07:37:1e:73:a5:56:03:1d:7d:ca:fa:fa:
         fc:c2:96:14:a9:3b:7d:79:d2:e2:33:98:ca:e8:d3:5a:e5:76:
         8a:30:ae:07:36:39:7b:1a:02:f8:9f:a3:9c:41:c1:01:69:09:
         cc:34:fe:ec:58:93:a6:0d:d1:ea:a6:36:e3:c7:d6:e5:28:11:
         30:af:9e:30:a5:0e:f6:c7:8c:e8:a4:dd:0c:2b:9d:38:25:4e:
         d0:83:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----