Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33322d313238203d3e20323637363238.roa
File:                     323830343a343435633a3a2f33322d313238203d3e20323637363238.roa (raw, json)
Hash identifier:          znymXI440Vp0lS7s/p+TcnjuLfNYxPBuUvawbcZRVe8=
Subject key identifier:   EC:A9:10:39:D5:B0:3B:73:30:C0:8E:A6:84:59:01:B1:F0:8D:21:52
Certificate issuer:       /CN=8117E06ADD38D45F0F656C1EDF6A16C02C8434DF
Certificate serial:       5E90FE10F1ED88320BBB422A8FFBF208A1C9F952
Authority key identifier: 81:17:E0:6A:DD:38:D4:5F:0F:65:6C:1E:DF:6A:16:C0:2C:84:34:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33322d313238203d3e20323637363238.roa
Signing time:             Thu 25 Jul 2024 16:30:23 +0000
ROA not before:           Thu 25 Jul 2024 16:25:23 +0000
ROA not after:            Thu 24 Jul 2025 16:30:23 +0000
asID:                     267628
IP address blocks:        2804:445c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:90:fe:10:f1:ed:88:32:0b:bb:42:2a:8f:fb:f2:08:a1:c9:f9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8117E06ADD38D45F0F656C1EDF6A16C02C8434DF
        Validity
            Not Before: Jul 25 16:25:23 2024 GMT
            Not After : Jul 24 16:30:23 2025 GMT
        Subject: CN=ECA91039D5B03B7330C08EA6845901B1F08D2152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:f7:40:52:b5:86:fd:5d:50:cb:d6:2b:e6:
                    5c:8a:fa:ca:8a:75:9b:4e:19:8f:ef:91:c9:b8:4c:
                    9c:87:97:ac:41:31:01:dd:fa:1f:b9:8a:8e:df:cb:
                    53:a0:cb:10:b4:bc:3d:1f:5a:7a:84:41:f4:3c:60:
                    ff:fb:1e:44:03:3c:61:db:de:a9:33:78:47:3c:a8:
                    58:92:94:f3:73:53:75:1a:cb:f7:28:3b:4a:f3:ff:
                    b3:f3:cd:71:cf:3d:a0:5c:e6:01:13:c5:ff:10:fa:
                    d4:ef:dc:24:3b:7c:d7:cd:84:12:e2:ff:53:2b:98:
                    ed:45:f6:65:e8:91:55:6b:13:13:b4:94:03:2a:ec:
                    f0:25:db:c7:65:cd:57:89:23:69:0b:dc:62:5f:64:
                    4a:e2:ee:66:90:fa:fb:02:50:9b:95:31:e0:c9:48:
                    3f:ff:1a:b9:24:98:6b:f0:0e:24:be:95:19:0e:46:
                    b8:9f:ad:51:64:ca:f5:20:ae:3c:67:35:16:58:89:
                    7a:d5:06:20:cd:22:df:f0:6b:a7:ae:93:3e:30:4f:
                    28:9a:05:04:72:5a:d7:f1:35:fe:59:0e:6c:f5:13:
                    1f:77:07:05:47:57:ea:69:97:4b:2a:37:5b:47:60:
                    09:ac:e0:1b:b4:76:2a:ae:af:a3:87:12:a3:b7:55:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:10:39:D5:B0:3B:73:30:C0:8E:A6:84:59:01:B1:F0:8D:21:52
            X509v3 Authority Key Identifier:
                keyid:81:17:E0:6A:DD:38:D4:5F:0F:65:6C:1E:DF:6A:16:C0:2C:84:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33322d313238203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:445c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:67:d8:67:53:61:49:d8:95:96:e0:d0:00:00:42:4b:00:f7:
         17:78:42:6a:a3:25:b2:d0:e0:24:6e:21:9a:02:86:bf:3c:b2:
         a4:c5:eb:e3:51:bf:d2:f6:32:93:2f:6a:8c:89:a1:ef:63:c9:
         d3:b8:d7:6c:da:48:bb:22:e0:b1:31:c9:fc:75:ab:15:11:6f:
         dd:82:b5:73:94:16:09:eb:29:c1:df:2e:ae:9d:8c:2f:53:4d:
         19:04:1a:8e:2f:c4:62:81:9a:f6:99:e1:ce:2d:30:84:1f:36:
         4f:78:c5:9a:b7:16:49:3b:f5:80:26:23:f7:25:da:50:18:7e:
         22:a1:05:31:8c:b6:80:89:f9:15:1d:50:28:f7:79:9e:82:1a:
         56:84:da:05:96:80:cc:6c:bf:50:4f:99:90:7d:5f:af:89:f2:
         bb:e8:63:8c:f3:45:90:95:48:58:2d:2c:e2:24:30:17:0e:b6:
         35:14:76:b0:cc:22:ce:c5:32:cd:cb:a0:70:a2:ca:97:9e:e0:
         00:fb:56:70:34:81:55:2d:c5:66:18:10:12:39:f2:16:a7:92:
         c6:c8:88:bd:91:9d:9d:df:cb:68:7e:90:13:99:42:cf:c2:e8:
         78:82:d1:e1:04:74:cc:8d:72:ba:c6:40:14:1f:72:a0:c7:4a:
         d8:b4:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----