Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/323830343a386565303a3a2f33322d313238203d3e20323733343533.roa
File:                     323830343a386565303a3a2f33322d313238203d3e20323733343533.roa (raw, json)
Hash identifier:          +yD6nd7JCdMbHQYt8wEygQKYMc2A5rjlTZiBy5M6iCk=
Subject key identifier:   5B:1D:09:B8:04:A2:62:5F:82:AD:74:5B:F7:95:F0:79:7E:02:47:13
Certificate issuer:       /CN=CA460AB6599E6D1453DADC5E0D8A7A759244BA82
Certificate serial:       3B74936E350F284BB1408EBF9B48B07116235952
Authority key identifier: CA:46:0A:B6:59:9E:6D:14:53:DA:DC:5E:0D:8A:7A:75:92:44:BA:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA460AB6599E6D1453DADC5E0D8A7A759244BA82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/323830343a386565303a3a2f33322d313238203d3e20323733343533.roa
Signing time:             Thu 06 Jun 2024 00:35:33 +0000
ROA not before:           Thu 06 Jun 2024 00:30:33 +0000
ROA not after:            Thu 05 Jun 2025 00:35:33 +0000
asID:                     273453
IP address blocks:        2804:8ee0::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:74:93:6e:35:0f:28:4b:b1:40:8e:bf:9b:48:b0:71:16:23:59:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA460AB6599E6D1453DADC5E0D8A7A759244BA82
        Validity
            Not Before: Jun  6 00:30:33 2024 GMT
            Not After : Jun  5 00:35:33 2025 GMT
        Subject: CN=5B1D09B804A2625F82AD745BF795F0797E024713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:b7:cf:97:5d:de:c3:c0:cd:ef:cb:6c:50:
                    31:ec:38:5b:1f:1d:40:08:b8:9a:2a:2a:95:95:4e:
                    fb:bb:ce:70:28:4d:55:ef:4a:45:a1:78:70:87:dd:
                    b9:2d:61:3d:a0:10:d1:3c:9a:fc:7f:19:13:e2:ad:
                    ad:c0:aa:7a:ac:1a:d8:20:65:1d:b6:ad:f4:7d:33:
                    eb:81:46:d8:a1:9d:79:c7:05:7a:25:53:31:7d:87:
                    57:1e:44:f1:06:5a:97:b6:31:a3:a1:6d:8f:c6:0a:
                    5d:8f:dc:76:1a:6c:ac:55:57:7d:8c:d2:ea:c8:40:
                    46:3e:93:98:71:7b:95:33:09:0e:e8:e5:d4:56:fb:
                    3c:d5:dc:97:13:0d:39:23:5e:0d:a7:53:0d:e6:5f:
                    26:da:45:77:b2:74:49:e1:ed:75:bc:6e:af:48:50:
                    50:28:3a:4e:0c:45:48:97:94:57:f3:13:cf:98:59:
                    5e:0c:56:db:bd:06:5f:ba:c0:f4:2c:cf:26:3e:04:
                    f5:0e:cc:0d:98:fa:3a:64:c9:b4:bd:2d:99:11:86:
                    95:4a:2e:ca:65:cf:76:90:f5:10:81:11:82:e9:ba:
                    58:6d:2f:9f:e9:85:85:c0:ea:fd:4e:bc:c9:11:3c:
                    29:31:67:9d:3e:73:be:37:3e:2e:16:9b:50:79:47:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1D:09:B8:04:A2:62:5F:82:AD:74:5B:F7:95:F0:79:7E:02:47:13
            X509v3 Authority Key Identifier:
                keyid:CA:46:0A:B6:59:9E:6D:14:53:DA:DC:5E:0D:8A:7A:75:92:44:BA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/CA460AB6599E6D1453DADC5E0D8A7A759244BA82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA460AB6599E6D1453DADC5E0D8A7A759244BA82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC4ttahWHBphDshuEdSZ6xEqpc1cGVkqQ9bfp7QZyEF6/0/323830343a386565303a3a2f33322d313238203d3e20323733343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:51:ab:e2:da:9b:47:43:61:d8:88:e8:21:8c:e3:80:f1:
         01:64:44:ec:9a:fd:f5:c8:7b:8c:5e:01:1a:ca:5b:4c:92:ce:
         2a:db:09:67:de:1a:e2:27:72:01:28:d9:42:b8:55:db:e3:45:
         d3:dc:1d:f8:9c:2a:96:ac:b0:e9:40:28:a9:0a:de:7f:30:35:
         b4:a9:40:44:8e:ed:f1:7b:a2:23:dd:f0:c1:c2:08:68:b5:6c:
         be:42:bb:e3:1a:17:91:99:6b:61:69:7e:8b:09:40:43:cd:20:
         f0:6a:62:4b:cc:d2:f1:10:30:0a:26:80:22:25:c6:3f:54:7d:
         6b:d7:0b:4e:35:67:35:c1:8f:18:b4:aa:dc:16:8b:e4:b9:5e:
         1d:27:9f:4b:c2:49:f9:7b:a2:2b:73:a9:a4:a6:ed:01:39:8c:
         50:f2:1a:b9:5d:e9:c8:07:f5:9e:91:7d:6c:54:5e:5f:94:35:
         5c:d2:e2:ca:85:4a:ec:6e:5b:c9:81:5c:38:12:5d:9f:d5:b5:
         6c:42:5c:a6:af:71:28:4b:1d:33:96:68:5f:14:16:cd:36:ed:
         34:da:cf:4f:51:61:6b:25:60:4d:fd:49:cd:89:28:5c:9b:7f:
         17:50:63:7d:e6:6c:31:7f:da:d1:96:7f:41:94:e5:aa:dd:bc:
         be:4e:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----