Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33322d3332203d3e20323730373630.roa
File:                     323830343a373066633a3a2f33322d3332203d3e20323730373630.roa (raw, json)
Hash identifier:          iVYZevGeerEadXB8DyfSnUbUnOzoEjerH5KEl06O+HM=
Subject key identifier:   9B:49:85:C5:F5:E6:9E:CB:BE:99:C6:4E:4A:94:A5:C2:60:7F:E4:6F
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       4880F294C3F240C2970AFE7167BB4B09B923ABF9
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33322d3332203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:26 +0000
ROA not before:           Thu 16 May 2024 17:00:26 +0000
ROA not after:            Thu 15 May 2025 17:05:26 +0000
asID:                     270760
IP address blocks:        2804:70fc::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:f2:94:c3:f2:40:c2:97:0a:fe:71:67:bb:4b:09:b9:23:ab:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:26 2024 GMT
            Not After : May 15 17:05:26 2025 GMT
        Subject: CN=9B4985C5F5E69ECBBE99C64E4A94A5C2607FE46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:94:66:eb:9a:f3:6f:35:88:cb:87:22:af:
                    5e:e8:ac:13:1d:31:92:e3:d1:ca:6b:2a:2e:e4:13:
                    bf:ad:2b:ed:cc:0a:1d:79:1b:92:84:0d:ec:90:1a:
                    33:ff:da:b8:0d:cb:87:a1:db:57:35:d3:07:99:29:
                    a9:d4:72:26:21:6d:9d:fa:ac:03:25:d5:e7:56:86:
                    71:c0:9d:20:bc:85:c4:fb:25:19:19:e8:9a:04:56:
                    fd:f1:23:44:6a:4f:cb:d7:57:63:b4:20:47:01:2c:
                    37:82:b7:09:44:c3:07:8e:c5:01:04:2e:78:77:3c:
                    c7:4a:5c:bd:06:b9:d6:c3:f6:f5:91:e2:c3:c7:73:
                    5b:3e:ce:26:fc:e5:60:a9:34:13:05:25:55:74:42:
                    35:b2:73:5e:98:95:37:eb:2a:0b:5b:1b:f9:90:3a:
                    4b:1a:aa:69:1e:7b:5a:fa:37:d2:0b:89:8c:2c:49:
                    94:28:cf:d0:76:81:21:20:92:14:ca:c7:20:18:06:
                    75:ad:16:0e:ac:f9:1c:57:71:e5:c9:1a:b7:4d:9a:
                    1b:fa:a9:70:d7:fb:1f:08:20:b3:f6:08:1e:3c:7b:
                    a2:3a:4e:9f:a0:7e:db:8e:c3:0c:b4:60:61:4f:e8:
                    68:72:62:a2:0c:86:97:95:01:e5:f2:63:66:d3:31:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:85:C5:F5:E6:9E:CB:BE:99:C6:4E:4A:94:A5:C2:60:7F:E4:6F
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a3a2f33322d3332203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:c7:a6:f1:1d:53:d3:cc:c5:59:c7:33:f6:b3:0f:dd:e6:
         4a:57:3e:65:82:f3:a1:73:cd:28:31:3d:44:f7:96:f3:42:a4:
         a3:ef:44:27:74:99:48:c5:7a:99:b3:34:c3:53:b1:99:9d:b0:
         db:5a:44:94:5c:13:7c:9c:64:40:02:87:b0:3c:ca:0c:ed:fd:
         2f:be:73:2c:ea:bb:da:7b:e9:f2:bc:90:e2:cb:e5:f4:af:70:
         43:37:d5:f8:78:18:01:06:36:57:b7:0f:40:b6:af:e6:fd:42:
         25:bb:b9:e8:0f:ca:f8:b6:ae:65:d4:68:37:97:49:bc:28:de:
         51:57:46:66:27:8f:d3:7a:36:e8:86:8d:3e:d8:7e:b8:48:29:
         0a:f0:10:b0:3c:50:3b:ca:eb:19:84:11:1b:42:09:3e:1f:af:
         2a:b9:89:33:7b:61:fc:04:24:e4:05:6d:6b:87:70:18:be:51:
         f5:89:e3:a1:b5:27:6b:51:6e:7d:d1:59:99:db:b8:2d:46:79:
         4d:b0:92:2e:44:65:65:dc:2d:95:2c:37:68:48:a6:63:8d:a4:
         35:5a:fb:ed:0b:09:6b:3c:c2:69:01:d3:6a:56:fd:7d:25:67:
         a5:13:bc:38:79:05:d9:68:5c:9c:9c:bc:a3:ee:3b:69:29:00:
         66:d2:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----