Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33322d3332203d3e20323639353038.roa
File:                     323830343a363562303a3a2f33322d3332203d3e20323639353038.roa (raw, json)
Hash identifier:          fzxgJet0u1HwjwAFYPuQgTmkmbWp5rXoJAsiQWkCt0I=
Subject key identifier:   92:2A:F9:6B:7C:E2:6B:C5:7F:3B:AE:11:24:96:6C:1F:64:13:3E:92
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       173DC6C48DB0CA9F09E122A394D2F4C6DD14D476
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33322d3332203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:12 +0000
ROA not before:           Mon 27 May 2024 21:08:12 +0000
ROA not after:            Mon 26 May 2025 21:13:12 +0000
asID:                     269508
IP address blocks:        2804:65b0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3d:c6:c4:8d:b0:ca:9f:09:e1:22:a3:94:d2:f4:c6:dd:14:d4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:12 2024 GMT
            Not After : May 26 21:13:12 2025 GMT
        Subject: CN=922AF96B7CE26BC57F3BAE1124966C1F64133E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:05:36:96:91:a8:5d:d6:44:f1:99:4e:2f:
                    df:82:df:07:1c:52:cb:66:30:ef:e0:65:b4:bb:e2:
                    8b:c1:8a:86:c7:8c:d3:97:d9:82:63:d4:77:52:86:
                    5c:0f:46:c9:90:58:61:df:e9:82:9a:fb:69:fd:19:
                    55:1a:2b:53:14:7e:6b:fe:e7:54:4e:fb:f6:14:f4:
                    5e:c4:b7:9b:74:fc:03:15:3a:48:fa:db:de:b8:cb:
                    9d:74:8a:ec:ca:a1:ab:fd:24:67:70:b2:22:9d:68:
                    12:d4:95:7c:5e:94:82:c0:df:fa:63:9a:db:65:6a:
                    4a:6e:33:ff:39:9a:94:61:16:df:a9:7b:b9:fc:cb:
                    ff:5c:fa:df:ca:67:64:a5:90:c3:91:28:50:4d:e5:
                    62:a5:1f:97:d6:5b:40:53:1a:9d:fe:9c:48:c8:90:
                    30:3c:f2:4e:1e:c3:13:80:d9:7e:ad:5c:e1:0e:85:
                    c8:c8:77:70:16:c9:56:2a:26:e8:f5:eb:da:a2:eb:
                    a5:76:db:63:56:fc:71:b0:71:2c:00:14:1a:20:49:
                    f6:39:48:2d:fa:97:0b:38:a9:20:c4:87:81:34:b4:
                    b5:f2:66:23:7c:f8:67:d0:2c:47:ed:0a:2d:c1:f7:
                    8f:47:62:5a:f0:f1:78:7a:e0:1d:74:ee:6c:14:13:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:F9:6B:7C:E2:6B:C5:7F:3B:AE:11:24:96:6C:1F:64:13:3E:92
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33322d3332203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:8a:e3:34:fa:5e:33:2b:20:cb:f4:9a:ac:d0:7a:3e:b0:
         24:f6:02:36:ec:95:10:00:53:5c:67:a0:e5:84:fd:a7:35:c7:
         90:bd:fb:2e:84:f8:9d:7d:24:be:ef:7a:ac:c2:50:ea:aa:ef:
         ae:7e:a0:af:04:f7:15:eb:14:dd:b5:34:9d:3d:e1:da:01:4f:
         a0:ac:75:d7:d5:8d:ab:7d:c6:f5:45:f4:8b:69:8c:e7:f3:ba:
         cf:c2:e6:d0:dd:50:79:b1:8c:84:28:0a:b7:dc:3d:05:ab:3f:
         cf:ec:e9:bb:ea:63:a1:cb:27:13:5e:c3:16:e6:93:5c:e4:7e:
         b0:0a:60:eb:64:6d:59:eb:56:4d:d3:13:99:e8:ab:34:7c:39:
         68:70:9c:2f:01:d4:ec:1e:f8:da:ac:d2:8d:a1:1d:5c:77:53:
         1d:41:90:bb:05:26:42:64:fe:07:18:96:c6:7b:35:32:be:fd:
         d5:35:4f:97:ef:8d:1e:f4:07:87:a0:98:30:d1:1f:ab:88:ed:
         c1:8d:8f:3a:dc:34:14:66:70:80:3e:b5:ed:9e:57:97:df:69:
         22:2e:55:f1:8d:96:3d:21:32:bd:41:da:ba:fc:ca:ca:03:6a:
         f6:e0:35:14:99:15:a6:cb:ff:c0:7a:46:1c:6f:18:66:01:09:
         8b:74:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----