Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/323830343a3761343a3a2f33322d3332203d3e203532383630.roa
File:                     323830343a3761343a3a2f33322d3332203d3e203532383630.roa (raw, json)
Hash identifier:          PJW28HZbsN6uRhmlmzOBGmnSm6YFwp6myYCpms9b+Bs=
Subject key identifier:   02:55:9B:AC:30:9F:B8:62:8F:11:77:F0:D8:12:8A:0A:96:91:B8:10
Certificate issuer:       /CN=A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E
Certificate serial:       6EF30FC7237040B219369D538ADB81978B535F09
Authority key identifier: A5:D7:1B:E2:C3:B9:16:04:1D:EE:4A:7C:A0:95:46:42:EB:D3:A3:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/323830343a3761343a3a2f33322d3332203d3e203532383630.roa
Signing time:             Thu 11 Jul 2024 14:18:49 +0000
ROA not before:           Thu 11 Jul 2024 14:13:49 +0000
ROA not after:            Thu 10 Jul 2025 14:18:49 +0000
asID:                     52860
IP address blocks:        2804:7a4::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f3:0f:c7:23:70:40:b2:19:36:9d:53:8a:db:81:97:8b:53:5f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E
        Validity
            Not Before: Jul 11 14:13:49 2024 GMT
            Not After : Jul 10 14:18:49 2025 GMT
        Subject: CN=02559BAC309FB8628F1177F0D8128A0A9691B810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:b9:a9:9e:5d:ce:5d:9e:28:43:b7:2a:52:
                    8d:03:aa:3b:33:4d:8b:09:fe:e8:db:fd:cd:ae:da:
                    47:60:a7:73:61:45:c9:b6:50:7c:36:eb:4d:d0:55:
                    44:8b:4c:d3:24:21:68:2e:8f:1d:b5:96:ed:e2:ca:
                    34:5f:be:e2:ef:f2:47:98:95:66:bd:b3:0f:3b:6d:
                    b5:fd:f3:42:74:2a:f0:7b:bc:4b:25:e3:a3:c5:36:
                    e0:19:79:94:f6:f7:69:e6:0c:93:61:7b:83:48:28:
                    e5:29:3f:e9:64:da:3c:c3:f7:0f:0c:47:b4:cc:09:
                    19:cd:70:4e:c5:7a:f7:6a:56:95:12:60:06:69:44:
                    a0:4a:34:2b:34:cb:89:a7:6a:c4:22:a3:d5:2c:ed:
                    15:5f:84:e7:e7:bf:38:19:85:9b:c2:02:4c:8b:11:
                    67:e6:c1:a2:f1:fb:9e:ed:52:65:38:4f:c3:7b:ba:
                    69:e2:63:17:63:6a:8b:06:9b:68:23:95:cd:63:fe:
                    21:cc:15:cc:9b:3d:19:37:e0:14:06:b5:be:45:a9:
                    65:07:e9:53:c1:5b:aa:74:fa:7d:4c:6f:2b:52:f3:
                    34:4c:f4:b6:14:62:c8:53:76:2c:d0:18:a1:ca:3b:
                    d0:83:04:22:eb:f8:b8:0a:64:6f:67:c4:b4:38:fb:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:55:9B:AC:30:9F:B8:62:8F:11:77:F0:D8:12:8A:0A:96:91:B8:10
            X509v3 Authority Key Identifier:
                keyid:A5:D7:1B:E2:C3:B9:16:04:1D:EE:4A:7C:A0:95:46:42:EB:D3:A3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/323830343a3761343a3a2f33322d3332203d3e203532383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:70:48:37:2e:5c:3f:fe:b8:da:ae:ea:62:e4:8f:3a:4c:13:
         a0:2b:a8:8b:7f:65:52:4e:ad:b8:18:ac:79:0a:68:61:2f:7d:
         c1:c1:6b:6f:86:70:68:7b:53:b4:6f:66:56:ea:e4:c1:e7:1e:
         2d:94:2f:2d:3a:5d:9d:1e:4a:f6:a1:8e:11:bf:b0:df:49:95:
         79:d4:a9:a4:9b:3d:97:cf:1d:d4:6a:cd:78:54:e2:f3:ae:d9:
         bb:08:9a:e4:df:04:6b:e6:f2:8e:ed:ef:aa:15:95:55:1f:70:
         72:fa:b1:30:d5:8c:3a:20:37:fd:a9:1d:79:b3:f0:a4:18:46:
         81:c8:70:1c:46:9d:91:31:87:0f:26:23:37:01:06:75:63:25:
         bb:af:18:44:7b:f8:c9:71:37:80:78:d5:bf:db:3e:24:c6:64:
         8a:37:ec:2b:7e:1d:75:a4:be:fd:60:f1:e6:18:c0:61:70:03:
         06:a9:81:c9:a4:41:83:03:25:57:3c:50:ad:e3:bd:eb:2c:0e:
         85:56:0b:d3:da:7c:32:a1:8b:22:de:45:ee:0c:a9:39:08:f0:
         02:61:2b:d0:7a:d3:43:ab:61:6b:f0:1e:84:e0:87:53:65:35:
         46:39:57:27:e6:7c:1e:b7:fb:7f:48:96:54:b6:4b:fd:94:db:
         63:41:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----