Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa
File:                     323830343a383265383a3a2f33332d3333203d3e20323732313634.roa (raw, json)
Hash identifier:          YHaiX/qxuTMT3ShwVPn53X2hI+suWbff74hJj848sw4=
Subject key identifier:   5C:CF:C9:7C:49:8D:95:C6:A6:38:53:E2:3B:7F:61:BC:99:21:3D:D4
Certificate issuer:       /CN=629EB94E5FE3D6ECEC348D54D25E7937A5852C65
Certificate serial:       21E239031B1B8921AE92B3E88B5E88EF74ABB585
Authority key identifier: 62:9E:B9:4E:5F:E3:D6:EC:EC:34:8D:54:D2:5E:79:37:A5:85:2C:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/629EB94E5FE3D6ECEC348D54D25E7937A5852C65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa
Signing time:             Wed 10 Jul 2024 14:01:05 +0000
ROA not before:           Wed 10 Jul 2024 13:56:05 +0000
ROA not after:            Wed 09 Jul 2025 14:01:05 +0000
asID:                     272164
IP address blocks:        2804:82e8::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e2:39:03:1b:1b:89:21:ae:92:b3:e8:8b:5e:88:ef:74:ab:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629EB94E5FE3D6ECEC348D54D25E7937A5852C65
        Validity
            Not Before: Jul 10 13:56:05 2024 GMT
            Not After : Jul  9 14:01:05 2025 GMT
        Subject: CN=5CCFC97C498D95C6A63853E23B7F61BC99213DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:d3:98:f1:05:fd:92:b5:0b:13:bc:68:0c:
                    56:74:b7:32:e8:62:20:39:25:c8:2e:93:36:25:49:
                    17:64:46:a6:0c:56:38:56:70:86:55:9c:74:51:7f:
                    75:af:42:0a:d2:35:cd:1e:b9:0a:1e:66:a2:95:f2:
                    6d:6b:7f:4e:89:7b:7e:85:98:93:14:eb:94:7d:85:
                    5c:f4:28:db:53:e1:26:03:70:7e:ca:a0:91:0e:08:
                    94:53:a8:66:d5:1e:f8:fb:9f:a4:ba:d2:84:ac:3c:
                    14:77:ef:e1:64:57:97:6b:e4:9a:3f:26:ba:c5:dc:
                    cc:c7:c4:b4:91:77:90:f3:6e:bf:51:8e:24:e3:91:
                    37:56:20:27:21:1a:1a:23:19:87:b1:00:5f:cc:a0:
                    89:fb:74:3f:6f:4c:a4:80:df:1c:9c:c2:6c:ae:af:
                    44:28:1b:1e:a7:11:45:b3:49:1a:6d:40:32:1f:ea:
                    6f:30:b4:22:6f:81:09:59:d3:6f:ef:23:13:eb:d5:
                    df:9a:5c:8f:92:49:d4:3f:b4:d7:a8:8d:a2:cd:70:
                    1e:e1:2e:cb:a8:55:e7:a4:c7:25:fd:1d:f9:33:86:
                    fd:70:54:35:6d:03:fa:b7:82:b4:2f:6d:f8:b7:95:
                    14:c0:7e:4c:48:80:08:65:11:fe:5d:e6:4c:11:80:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CF:C9:7C:49:8D:95:C6:A6:38:53:E2:3B:7F:61:BC:99:21:3D:D4
            X509v3 Authority Key Identifier:
                keyid:62:9E:B9:4E:5F:E3:D6:EC:EC:34:8D:54:D2:5E:79:37:A5:85:2C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/629EB94E5FE3D6ECEC348D54D25E7937A5852C65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/629EB94E5FE3D6ECEC348D54D25E7937A5852C65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a3a2f33332d3333203d3e20323732313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e8::/33

    Signature Algorithm: sha256WithRSAEncryption
         a8:21:ba:46:37:18:1e:2a:ab:34:72:eb:40:ea:44:32:4e:57:
         69:0b:cd:8c:fc:46:6f:1c:fe:03:dc:38:d1:07:42:83:38:f7:
         74:4a:25:42:5c:f1:95:62:b3:de:2e:39:57:4e:0a:28:a4:85:
         be:e8:7f:92:48:a8:56:fd:a3:de:91:1a:1b:8d:54:2b:dc:a1:
         78:ed:0d:f0:95:8d:c6:3f:69:53:2f:fb:1d:fb:dd:6f:bb:1a:
         c7:7c:7d:c8:ee:17:a2:ae:d5:42:d9:ae:5d:14:ad:d8:a9:7b:
         92:63:97:2c:50:e3:cb:13:5c:fe:49:63:45:4d:54:b1:1e:76:
         65:59:ac:ec:67:db:3c:9b:e4:1d:e7:d0:70:76:fb:1f:47:3a:
         65:09:fe:de:f0:68:01:86:e2:4b:29:a9:96:cb:90:09:64:cd:
         04:c4:c7:0c:54:fa:ae:78:4d:68:6b:26:1f:30:25:74:d0:fe:
         4f:0c:8c:45:9b:3d:4b:fb:ab:8d:c8:9e:f6:dc:22:0e:91:fd:
         4d:7d:03:3a:40:ed:13:1e:32:e8:3f:11:09:28:ec:03:d5:67:
         06:06:4f:ab:48:3f:90:54:55:b5:8c:83:ed:b0:98:e8:da:c2:
         b0:24:40:84:dc:4d:b2:87:ff:48:40:e4:56:3e:05:52:73:f0:
         0b:69:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----