Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3334203d3e203631393438.roa
File:                     323830343a313862343a3a2f33322d3334203d3e203631393438.roa (raw, json)
Hash identifier:          peQA3zH/mG8jcw3S2pF+KXcUkxs7ahhJN/Mt73mlepw=
Subject key identifier:   3B:24:FA:7E:0D:7B:50:DC:D5:DF:7D:47:DA:5F:6B:84:A5:2E:27:C4
Certificate issuer:       /CN=25A0DF6A1FD01602672F05F11CAF0EB839063871
Certificate serial:       3653DD29284131E5D45877CCA81600E98FBB2DBF
Authority key identifier: 25:A0:DF:6A:1F:D0:16:02:67:2F:05:F1:1C:AF:0E:B8:39:06:38:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25A0DF6A1FD01602672F05F11CAF0EB839063871.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3334203d3e203631393438.roa
Signing time:             Tue 28 May 2024 15:41:25 +0000
ROA not before:           Tue 28 May 2024 15:36:25 +0000
ROA not after:            Tue 27 May 2025 15:41:25 +0000
asID:                     61948
IP address blocks:        2804:18b4::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:53:dd:29:28:41:31:e5:d4:58:77:cc:a8:16:00:e9:8f:bb:2d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25A0DF6A1FD01602672F05F11CAF0EB839063871
        Validity
            Not Before: May 28 15:36:25 2024 GMT
            Not After : May 27 15:41:25 2025 GMT
        Subject: CN=3B24FA7E0D7B50DCD5DF7D47DA5F6B84A52E27C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:06:75:be:6b:83:54:dd:bd:91:ee:f1:60:
                    2a:58:5c:a4:43:01:c7:a4:55:fc:4d:62:5e:b2:63:
                    61:5d:17:f8:1c:e4:8f:aa:5a:ab:dd:4a:3b:68:19:
                    44:cf:44:a6:c8:1f:2d:a6:60:58:7e:98:42:69:82:
                    04:21:11:c7:a9:09:a4:21:b2:af:ef:f2:0e:8d:ee:
                    55:c9:9f:92:ba:23:2c:2f:83:80:12:0f:0e:e2:6a:
                    65:67:28:a4:d3:35:6f:e8:fd:95:21:b8:c2:72:9c:
                    8b:a4:14:c0:b5:57:ff:7e:2b:3f:78:e9:70:b4:ce:
                    24:11:d2:2a:97:15:97:2e:0e:75:d4:91:1b:2a:7c:
                    69:95:a3:e9:1a:fd:32:e4:2a:39:ca:d2:99:13:76:
                    95:ea:8e:86:f0:5c:95:46:b2:f9:a4:46:ac:c9:fa:
                    b4:bc:ad:86:e8:c0:05:bd:bd:8f:7b:8e:91:b3:88:
                    6c:fe:5c:20:62:fa:3e:5c:94:76:56:f8:c4:88:17:
                    3c:a0:74:90:c3:e5:8c:9b:08:67:d1:47:2d:60:61:
                    5c:20:23:a7:10:ac:7b:7c:df:42:e6:58:a4:b0:15:
                    30:97:ec:e2:ee:ba:55:06:01:30:c9:33:bd:25:da:
                    4c:6d:8c:0c:eb:6b:4d:7b:aa:d7:a1:9b:97:a0:7b:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:FA:7E:0D:7B:50:DC:D5:DF:7D:47:DA:5F:6B:84:A5:2E:27:C4
            X509v3 Authority Key Identifier:
                keyid:25:A0:DF:6A:1F:D0:16:02:67:2F:05:F1:1C:AF:0E:B8:39:06:38:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/25A0DF6A1FD01602672F05F11CAF0EB839063871.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25A0DF6A1FD01602672F05F11CAF0EB839063871.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6CaMq8vDJP4u5DTRNPKFqvNRnvhjDD8Djs5ZmiABnEk/0/323830343a313862343a3a2f33322d3334203d3e203631393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:5a:1f:9f:f9:3b:d9:5e:ad:b5:e0:c8:8b:31:1f:da:b9:
         a1:c4:84:b0:32:27:a7:84:60:9d:99:58:bc:eb:45:55:d1:5a:
         ba:29:11:49:69:7d:02:5a:aa:14:19:af:32:d7:83:55:d9:16:
         73:d0:2d:76:7b:1c:d3:05:e0:1a:b4:86:3c:1b:dc:e8:34:f8:
         98:52:ee:30:ec:4d:e9:bd:d7:cb:62:e2:b6:46:89:6f:bd:fa:
         35:8c:b4:d4:57:5c:a1:88:9b:91:b2:e2:31:20:51:df:78:ed:
         fe:93:dc:c8:41:d8:d7:c8:3e:33:15:28:ff:15:a9:31:2e:58:
         b9:27:c5:76:0f:95:21:d6:e1:08:ce:39:01:62:b9:a8:d5:fb:
         e7:b6:5e:58:74:e8:1a:ef:c7:9b:22:04:04:73:d6:46:eb:57:
         ba:e6:e6:31:33:ec:72:15:aa:d8:ae:22:44:b1:2f:74:e1:db:
         4c:38:25:20:12:ae:19:f1:c7:17:ef:65:5a:0a:e6:c8:76:0b:
         43:ea:24:e2:03:b4:3c:80:31:03:ab:64:34:23:6a:30:3e:d3:
         5c:ae:60:10:f8:93:16:6d:c8:fd:e0:59:f9:d7:7b:2d:ad:07:
         5b:ca:b4:54:e6:48:02:1e:c9:6f:57:5e:20:82:66:59:a3:11:
         78:72:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----