Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33332d3333203d3e20323639353038.roa
File:                     323830343a363562303a3a2f33332d3333203d3e20323639353038.roa (raw, json)
Hash identifier:          JZkeL90TbtuFN+JDkKMg8F4yvECh6yDz+GuRsgsy85I=
Subject key identifier:   E2:23:FD:42:01:0B:D2:6C:04:FC:5C:CA:51:FF:A6:6B:9E:F7:B9:C2
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       586E583DB8588EA359CD7CA4CEE6D246D446CFA0
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33332d3333203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:14 +0000
ROA not before:           Mon 27 May 2024 21:08:14 +0000
ROA not after:            Mon 26 May 2025 21:13:14 +0000
asID:                     269508
IP address blocks:        2804:65b0::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6e:58:3d:b8:58:8e:a3:59:cd:7c:a4:ce:e6:d2:46:d4:46:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:14 2024 GMT
            Not After : May 26 21:13:14 2025 GMT
        Subject: CN=E223FD42010BD26C04FC5CCA51FFA66B9EF7B9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:71:1e:81:3b:9c:c0:5b:f1:92:db:54:1f:
                    de:de:90:99:5a:f9:7a:11:40:ad:40:4c:b5:62:41:
                    78:d4:04:f2:21:d5:c7:0c:37:91:33:ea:4a:30:bf:
                    25:18:6a:6f:55:02:00:9b:21:ad:27:16:35:6f:04:
                    2f:ef:0e:44:33:3f:bb:c0:9f:dd:89:a5:c0:02:c4:
                    7a:c8:9d:a5:19:9e:31:d5:a9:23:02:82:90:f3:3a:
                    fe:ae:16:c6:7b:fb:a7:03:18:f3:5e:70:b7:ff:77:
                    b0:a3:5b:75:1b:81:a6:1a:44:0f:5d:e6:ee:10:eb:
                    c5:85:88:5e:9d:92:61:a5:be:98:23:30:6e:76:9c:
                    3d:89:3f:47:06:6f:b6:b5:fa:bb:b5:48:f9:1d:c3:
                    45:37:75:ba:33:92:eb:c1:a0:59:6c:9d:df:21:c7:
                    81:ce:11:01:f3:90:e5:65:2f:19:7c:c4:2b:f9:74:
                    29:76:f1:d6:ee:2f:0f:91:03:91:fe:65:4a:58:cd:
                    27:33:91:fa:88:1a:0b:1c:df:ad:10:73:7e:55:80:
                    4f:5b:63:aa:50:12:41:e8:66:4a:c0:21:52:36:75:
                    6d:65:e6:d3:53:f3:fd:8a:bc:a8:29:47:6b:02:80:
                    69:6b:f5:91:cd:54:0a:1d:c2:20:92:9b:f5:92:40:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:23:FD:42:01:0B:D2:6C:04:FC:5C:CA:51:FF:A6:6B:9E:F7:B9:C2
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33332d3333203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:58:e0:99:08:e4:cb:b5:77:a7:c4:a7:06:1b:37:2e:81:
         d1:fd:cb:bd:07:2e:c6:8d:d9:31:ab:52:f8:f9:a2:c3:88:42:
         03:a6:7e:03:2e:df:3c:86:ef:90:ae:fc:fc:95:59:d9:a1:8e:
         e2:6e:c9:84:3c:19:9a:d5:d7:ae:18:6d:c1:14:c9:86:b7:27:
         d3:cf:d0:05:55:a0:26:32:b5:01:7c:67:d3:0b:44:90:c3:2e:
         f4:76:37:37:b8:fc:02:2e:7c:a8:db:2a:4e:aa:24:6a:2f:e0:
         43:71:fc:24:82:b6:7c:33:4d:ee:f8:9a:79:ac:70:43:1d:7d:
         50:57:09:01:bc:90:5a:d0:22:1b:38:c4:bb:bf:f9:5e:a8:e7:
         89:2c:56:0e:b4:b5:59:59:d3:64:ca:b8:fa:da:c1:9e:4c:31:
         58:65:ae:4a:d8:3f:86:63:34:93:5f:a9:9c:ff:cc:5e:b2:f2:
         76:53:d2:3b:2b:23:40:3c:21:96:95:99:61:3f:d9:b6:a8:86:
         12:2d:db:a8:fd:08:f6:7f:55:eb:d9:62:2a:fa:a0:2c:59:fc:
         29:5d:3c:45:22:3f:0c:90:2d:ec:07:0f:f9:c2:dc:66:25:2e:
         03:c3:1c:ab:f0:bd:ea:8c:25:f4:c0:cf:1b:a7:d3:f7:3b:84:
         b5:ad:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----