Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          atYQmRBh4Dt+h23vqyaJqYHHpKbZcpi0hMY5XO5eO1I=
Subject key identifier:   2A:99:4E:E4:A6:8E:CB:53:BB:29:E7:9E:1A:6D:39:A5:E9:E7:8B:74
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       366C11949CA4931DAAA7ED109D8DF2F39DCF16D5
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:10 +0000
ROA not before:           Mon 27 May 2024 21:08:10 +0000
ROA not after:            Mon 26 May 2025 21:13:10 +0000
asID:                     269508
IP address blocks:        2804:65b0::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:11:94:9c:a4:93:1d:aa:a7:ed:10:9d:8d:f2:f3:9d:cf:16:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:10 2024 GMT
            Not After : May 26 21:13:10 2025 GMT
        Subject: CN=2A994EE4A68ECB53BB29E79E1A6D39A5E9E78B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:d8:20:26:fd:3e:98:9e:0a:86:41:10:c8:
                    fd:79:ac:b7:8b:8d:4c:df:87:bb:89:9c:f1:32:ba:
                    ba:f7:9a:c7:f2:76:dd:e8:03:32:22:98:0c:a0:60:
                    ff:f9:f6:fb:d3:0c:7b:f9:00:e0:bb:0e:01:f3:27:
                    d9:a3:c4:1a:e2:97:4e:0e:57:a3:75:e4:7c:96:d9:
                    5e:b3:cb:42:ad:1d:43:91:d3:93:03:e5:b8:7b:01:
                    a3:2d:68:74:1e:6d:5c:2a:ab:cf:ce:b7:0b:b0:0f:
                    2a:31:58:f2:37:3f:7d:5f:f0:1f:da:2c:c8:8f:2d:
                    2e:94:48:eb:25:2c:df:1a:dd:c7:0f:cb:91:57:41:
                    40:83:7b:9a:70:15:ef:a9:b2:9c:d2:15:a3:2e:6d:
                    fd:ec:17:a9:c1:3c:de:7a:8f:25:2e:9a:4d:8e:2f:
                    bf:93:de:c6:5b:22:4e:b9:35:a7:21:3b:26:6d:24:
                    f5:59:12:54:c5:0f:2a:2c:3c:94:1d:7a:26:67:1d:
                    01:ec:f2:3d:08:a9:4e:32:50:dd:99:76:50:76:4a:
                    04:b8:05:e4:2d:d0:51:01:42:5b:49:27:52:43:8d:
                    36:d2:27:9f:0c:51:33:20:8f:2d:c0:a0:a1:4f:a1:
                    e4:7f:b4:3c:f2:4b:56:f6:7d:3e:de:ab:2d:a4:c1:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:4E:E4:A6:8E:CB:53:BB:29:E7:9E:1A:6D:39:A5:E9:E7:8B:74
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:65:10:6c:d2:70:01:7c:88:03:04:41:42:77:4d:97:2a:6f:
         98:b3:8c:48:0d:3b:42:b8:9c:94:66:28:52:14:74:17:40:d3:
         f2:de:69:74:23:91:61:a0:01:ad:6f:ca:6e:9a:89:e8:33:41:
         79:f2:99:85:71:f7:31:39:22:8d:c8:a0:f6:ad:cb:8d:f2:76:
         38:8c:63:04:83:b0:46:1a:29:86:a6:aa:ab:65:7b:5c:0c:ae:
         c5:0b:f5:bb:bf:de:de:1a:94:33:21:25:14:4b:d5:a4:6d:5b:
         76:64:18:d8:57:e5:a9:f1:a4:96:ea:e9:16:b4:14:14:f0:cf:
         a6:49:e9:26:5b:9f:9c:37:5e:cb:2e:93:21:56:f7:bf:0d:b1:
         a3:5c:14:a6:8b:4c:77:e6:c2:f8:91:74:d9:c1:39:d2:e0:b9:
         f8:62:eb:d7:c6:d5:5e:72:92:b4:0c:68:f4:88:0c:56:d5:9c:
         c1:5d:63:74:9f:1f:11:0d:b0:8a:0a:80:2f:d4:7c:e8:e8:73:
         3b:13:5d:6d:87:56:f5:61:97:8a:6c:93:ed:ad:3f:c6:e9:a6:
         69:6d:d8:44:94:e9:71:3b:69:17:11:5b:c0:a3:20:73:d8:9d:
         6b:fd:e1:af:1b:20:3c:b9:76:ff:b4:7a:60:d4:4e:e0:d7:54:
         20:ed:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----