Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/323830343a323064383a3a2f33322d313238203d3e20323634353136.roa
File:                     323830343a323064383a3a2f33322d313238203d3e20323634353136.roa (raw, json)
Hash identifier:          CZTHoIS4DhhMFG3TCltN9kcHN8osXbh5uxVZk76MiDY=
Subject key identifier:   B6:A0:89:CE:10:4D:A0:D7:2D:1B:4B:4D:56:B0:B9:25:BE:59:E4:5B
Certificate issuer:       /CN=75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7
Certificate serial:       18CB07E4B897FD83DFACD50AA68110BF41B7B9FB
Authority key identifier: 75:B6:EE:36:8E:3D:46:C1:83:6E:D3:0F:BC:E6:0C:5D:2D:45:FB:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/323830343a323064383a3a2f33322d313238203d3e20323634353136.roa
Signing time:             Tue 13 Aug 2024 20:06:49 +0000
ROA not before:           Tue 13 Aug 2024 20:01:49 +0000
ROA not after:            Tue 12 Aug 2025 20:06:49 +0000
asID:                     264516
IP address blocks:        2804:20d8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cb:07:e4:b8:97:fd:83:df:ac:d5:0a:a6:81:10:bf:41:b7:b9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7
        Validity
            Not Before: Aug 13 20:01:49 2024 GMT
            Not After : Aug 12 20:06:49 2025 GMT
        Subject: CN=B6A089CE104DA0D72D1B4B4D56B0B925BE59E45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:29:91:d7:c9:b0:ff:30:fa:ac:d2:f4:c2:
                    9e:91:2e:a6:21:9d:8b:42:88:e3:e7:56:a7:dc:85:
                    e9:cb:c5:ce:01:46:de:4a:88:df:82:3d:25:ca:ba:
                    89:bf:f4:2b:a1:75:3d:07:19:f6:ad:19:e5:5a:3b:
                    c1:5c:c6:5f:a3:bd:8e:72:42:36:02:6f:d9:32:a8:
                    11:5e:cd:ed:4a:e8:d6:8b:40:cd:f6:fd:4c:7d:a0:
                    23:c5:12:66:5f:54:43:c2:04:f9:8b:cc:3c:eb:52:
                    e2:67:83:7c:0b:dd:1e:9c:ac:a8:91:7b:9d:57:21:
                    2e:c2:39:50:4a:bd:24:70:25:ee:cf:f0:12:8e:14:
                    39:b7:ed:57:6b:69:20:86:97:ba:9e:b8:70:4e:a0:
                    6c:cb:8e:86:54:d8:ec:77:c0:a6:85:c8:23:d7:56:
                    fb:a1:41:05:39:cb:e7:4c:da:9d:7a:fd:fe:b2:7f:
                    e2:34:dd:e1:42:59:c2:86:0f:c1:e7:6e:ab:b3:0b:
                    e6:02:58:97:18:ac:8f:8f:28:43:7e:38:cb:bb:6d:
                    8b:9a:e4:a2:2e:02:2d:16:a6:28:3f:d9:05:69:dc:
                    a8:0b:a6:9b:d4:67:5b:51:95:cf:8b:98:de:c2:72:
                    e1:65:fc:6c:b0:cc:15:f9:1a:75:20:9a:3d:ca:4c:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A0:89:CE:10:4D:A0:D7:2D:1B:4B:4D:56:B0:B9:25:BE:59:E4:5B
            X509v3 Authority Key Identifier:
                keyid:75:B6:EE:36:8E:3D:46:C1:83:6E:D3:0F:BC:E6:0C:5D:2D:45:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/323830343a323064383a3a2f33322d313238203d3e20323634353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:df:1a:e0:20:d3:15:a1:d6:f4:d9:0f:1f:21:a7:04:26:37:
         80:fa:09:c5:09:d8:2f:1f:9e:2f:31:e9:1b:4f:3e:28:11:49:
         22:36:55:cb:3a:48:93:39:0e:eb:7a:5b:04:31:ec:f9:f1:68:
         c6:29:07:90:f8:12:b0:f2:29:ff:cd:80:db:ee:9b:8b:c9:5b:
         d8:54:1c:e3:b6:2b:e8:27:56:5a:8a:c6:b7:e5:b8:23:6f:57:
         b4:e1:51:98:7d:d6:9e:24:7b:07:3a:65:ef:fd:ff:ee:c4:60:
         8b:5b:66:09:b0:f1:49:79:37:62:ff:0f:e2:a8:a4:cd:19:dc:
         25:86:5a:13:e6:b6:09:10:24:40:7f:4a:db:b9:ba:ab:0f:d4:
         2b:df:21:b8:8d:d7:a0:60:9e:f1:61:49:1b:75:40:00:0b:d4:
         ba:9c:e7:70:46:23:eb:d9:0e:ab:0d:94:54:90:2f:ec:46:06:
         22:b0:a5:f4:c1:99:40:a6:34:24:cb:83:5a:55:a6:41:85:66:
         e3:88:d2:e0:ec:32:3d:a5:1b:9d:59:7a:e5:12:d3:3c:9f:2a:
         1b:04:4b:ac:a5:80:81:ac:a2:9c:12:9a:00:8c:f8:f0:f2:fd:
         21:4d:c6:29:35:1e:e4:1b:71:3d:dd:e8:8d:ad:2c:36:4d:fb:
         7b:e2:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----