Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33322d3332203d3e20323638373236.roa (raw, json)
Hash identifier:          Q69wNR+5Qx5t3ABM9r+PHXM8J37dql3jHj+vB5WWz1w=
Subject key identifier:   89:5E:41:5D:4E:C7:76:69:1D:AB:61:48:17:A9:54:84:75:37:74:6F
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       5F1E30D7E744836482AC813EDC9F93288366CB31
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:02:01 +0000
ROA not before:           Thu 04 Apr 2024 15:57:01 +0000
ROA not after:            Thu 03 Apr 2025 16:02:01 +0000
asID:                     268726
IP address blocks:        2804:59cc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1e:30:d7:e7:44:83:64:82:ac:81:3e:dc:9f:93:28:83:66:cb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:57:01 2024 GMT
            Not After : Apr  3 16:02:01 2025 GMT
        Subject: CN=895E415D4EC776691DAB614817A954847537746F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:01:12:91:74:f9:e5:d4:c8:f2:8e:0d:f1:
                    70:8f:98:a9:16:47:2c:70:a0:35:5b:5c:40:2b:21:
                    ef:21:6b:10:a8:b5:a7:c3:61:b3:3a:3d:ac:09:90:
                    27:38:bf:74:c0:65:12:bf:ce:14:3e:e3:04:35:0c:
                    0d:90:cd:b8:46:be:88:7c:6f:3e:d0:0f:c4:d5:d8:
                    00:30:9c:a7:07:37:a0:06:c6:59:40:90:4e:a1:09:
                    d2:dc:29:ea:02:3d:e3:67:1b:ff:b5:7a:55:df:9e:
                    f8:7d:fb:29:ad:c5:cd:7b:23:71:95:fc:87:bb:1b:
                    25:75:ce:ec:12:61:e6:16:89:ae:1a:81:72:62:4d:
                    8f:d2:4d:73:4b:77:c1:e9:85:2d:e4:61:e3:af:c9:
                    2a:a8:42:de:d6:cc:cb:c4:81:c1:29:ff:ce:09:81:
                    23:a6:12:61:e5:69:c1:62:b1:99:0d:a3:e8:91:4e:
                    e4:0e:4c:2a:68:44:7b:ea:d9:37:71:e4:fc:c6:ec:
                    35:e0:ec:0d:64:45:30:89:35:7f:2d:f7:c4:6f:48:
                    d3:52:dc:da:53:06:52:82:1e:9f:2c:7f:06:b4:f4:
                    ee:59:c9:cc:c8:5f:c0:dc:86:7e:84:a9:ab:f0:18:
                    84:19:14:2b:40:1b:c8:c7:39:75:2f:af:2d:7f:1b:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5E:41:5D:4E:C7:76:69:1D:AB:61:48:17:A9:54:84:75:37:74:6F
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33322d3332203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:5b:5f:a2:89:6e:52:d6:15:2e:69:89:4c:e3:46:ec:b1:
         4d:c1:0e:bd:8d:c5:6c:ba:4b:dc:79:b2:94:2e:bb:91:99:0a:
         d8:a5:53:a0:fc:1c:7b:ec:7e:7e:36:a0:8e:45:dd:3e:6e:fb:
         d5:6c:b8:bc:01:4f:94:5a:c0:72:c5:a3:7d:fb:29:c3:5c:df:
         05:98:17:84:fb:de:89:d7:15:2e:2e:22:0f:c8:73:c8:1a:2c:
         6d:51:0d:90:29:8f:35:79:f4:43:0f:5a:26:9b:d9:57:57:1b:
         a5:0d:8d:09:f3:e4:c8:ff:36:3e:70:3e:61:fd:54:e8:f2:07:
         1c:48:6e:f6:07:96:7d:b3:1c:35:ca:00:c3:dd:af:28:0a:61:
         d4:72:ad:51:7b:87:93:5d:e2:ae:8c:1d:20:9b:c7:6e:f8:61:
         0a:6c:a4:57:99:bd:c5:33:e1:12:55:74:59:4b:68:bc:db:af:
         e9:f7:d5:35:9e:3a:dd:71:4c:b0:1f:3e:4a:28:a3:a7:d5:c6:
         85:ab:e8:ae:8f:db:a7:e3:8e:c4:4f:82:78:45:e4:dd:fd:7a:
         f1:e7:93:33:6f:49:df:dd:9b:97:bf:e6:5a:dc:28:b6:aa:61:
         15:0d:f7:e6:81:e4:1a:74:e8:9c:7c:a4:b1:da:61:7b:60:f2:
         a0:87:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----