Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d3336203d3e20323638333634.roa
File:                     323830343a353030343a3a2f33322d3336203d3e20323638333634.roa (raw, json)
Hash identifier:          ngmbtPndHd25AAXqeaOPCZ+20JSUTElxUrimTTePaYY=
Subject key identifier:   B5:7F:C3:B6:B4:13:CC:A4:C9:CF:53:9D:A6:15:46:AC:AE:FD:1A:1E
Certificate issuer:       /CN=9B0CF4B403A02AA915DEB2A821B760D4F7AD1555
Certificate serial:       3DE2340A8D44C7008C7BA230CB0BE540BEDCFB8A
Authority key identifier: 9B:0C:F4:B4:03:A0:2A:A9:15:DE:B2:A8:21:B7:60:D4:F7:AD:15:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d3336203d3e20323638333634.roa
Signing time:             Thu 04 Jul 2024 17:44:55 +0000
ROA not before:           Thu 04 Jul 2024 17:39:55 +0000
ROA not after:            Thu 03 Jul 2025 17:44:55 +0000
asID:                     268364
IP address blocks:        2804:5004::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e2:34:0a:8d:44:c7:00:8c:7b:a2:30:cb:0b:e5:40:be:dc:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0CF4B403A02AA915DEB2A821B760D4F7AD1555
        Validity
            Not Before: Jul  4 17:39:55 2024 GMT
            Not After : Jul  3 17:44:55 2025 GMT
        Subject: CN=B57FC3B6B413CCA4C9CF539DA61546ACAEFD1A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:95:a2:d1:ca:ba:46:54:80:01:ed:63:d4:
                    3b:4c:21:2e:20:c0:4e:d4:06:16:ea:25:60:4e:cd:
                    d6:02:2d:f1:ac:a9:03:50:d5:f6:27:b2:7c:f3:a4:
                    7b:0e:03:25:14:a8:2e:10:0c:f8:5e:4a:4d:59:c5:
                    ac:c1:7c:c9:9a:3d:e9:c6:94:7a:3e:7c:08:df:b3:
                    75:b2:cb:19:71:fe:d9:33:52:3c:8f:19:ef:99:70:
                    71:71:41:64:a1:d9:fe:c3:99:c9:c9:83:0c:d9:97:
                    0a:0a:b2:c5:23:9d:42:ef:3e:f3:67:8a:4b:8d:e9:
                    78:88:67:8f:a4:61:87:36:c3:e6:49:24:ba:69:00:
                    ee:4a:f8:76:fd:48:85:77:31:19:39:67:71:d2:0d:
                    98:68:20:9d:63:28:2c:4c:62:db:1d:43:e8:1e:5b:
                    c8:c5:44:4d:e4:bd:d3:3d:27:eb:b8:6f:03:2a:9e:
                    f7:37:73:8d:aa:bd:91:39:f6:2a:8d:72:fc:97:61:
                    31:85:40:dd:89:bf:09:5c:35:66:c7:49:7b:9f:29:
                    20:7f:49:b2:4a:ef:72:e4:59:de:fb:7e:cc:dc:8d:
                    d9:03:dd:ad:47:75:17:30:ed:fb:8a:ca:4c:f2:24:
                    2a:30:7b:4a:63:59:42:65:41:49:e5:1a:11:8f:4b:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7F:C3:B6:B4:13:CC:A4:C9:CF:53:9D:A6:15:46:AC:AE:FD:1A:1E
            X509v3 Authority Key Identifier:
                keyid:9B:0C:F4:B4:03:A0:2A:A9:15:DE:B2:A8:21:B7:60:D4:F7:AD:15:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d3336203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5004::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:77:f3:ab:3b:54:f0:01:3d:e3:d8:ef:54:75:1e:90:d5:df:
         0c:22:69:4c:4d:e4:3a:3f:ad:4f:d1:36:0a:17:34:89:8a:ca:
         c6:b5:7b:d8:75:92:7f:56:ee:49:bd:50:9f:3e:25:97:86:eb:
         2d:6b:79:cd:d7:de:bc:c6:49:80:b8:16:64:73:89:fe:7e:f2:
         21:26:dd:83:65:a9:ad:f3:8a:89:6f:ff:37:e6:9d:1d:21:19:
         31:6a:82:dc:de:6e:28:98:da:8b:42:97:91:52:a4:d4:1e:95:
         76:c6:1a:9f:5e:6a:58:17:b7:53:df:3e:7b:e8:e6:23:db:e5:
         84:e7:b2:87:e0:be:01:5d:fc:eb:28:a9:cf:a6:40:b5:62:e9:
         e0:ce:55:05:af:1d:5f:ce:0c:ab:bd:d2:29:72:ee:8f:0c:ed:
         f5:68:c9:83:d3:83:b8:1f:62:9e:db:1c:c9:f2:d0:e6:c5:86:
         3f:72:bf:e2:ba:17:e3:d7:f1:22:b8:94:0e:1e:8d:be:9a:8a:
         2d:53:f6:47:db:1b:01:b1:9f:3a:a1:11:e7:bf:d7:b8:18:d3:
         78:b0:ad:46:9f:13:82:b3:d6:16:b8:23:78:fc:68:42:02:25:
         0f:39:73:c9:bd:4b:d8:67:ca:ea:10:16:f9:02:d7:2c:56:21:
         c8:67:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----