Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa
File:                     323830343a343630633a3a2f33322d3332203d3e20323636393635.roa (raw, json)
Hash identifier:          +HVbEQ9tuyAHJy5CYAsJ0pcHOk2mDjsN9IFnxcznIjc=
Subject key identifier:   11:FA:AF:75:BF:7B:5B:9A:BD:06:C7:6E:09:95:89:2A:7F:7E:B1:51
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       130DD68EE1E8D4D6A8970F32B4A95843FC0E836B
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        2804:460c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0d:d6:8e:e1:e8:d4:d6:a8:97:0f:32:b4:a9:58:43:fc:0e:83:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100C5CE25DAC0E94BD068A03699E93463E7E277FC68FE8BA922A9C2420982E1CEAA3304EA2002E24D89D566FA0F67AF100E3063E1F5B613E1F01FAA32518E951EB09039D1CE1E878EC5AD23FD8B861EEC6E07F64F742A38C2914C421B537CEED7D4DFF7559A37455107ED67D90A57B32C7FDBF105D32D6F8D59722CE831173535B5F650B85ADB5A7146826B2A25530B64B2A0F85FBA15ABBF4A8CCEBF44A67A4C8A7B169222B33F1F296B7796097A1A742DA381E9181BD261EAE33E0DCCA262586D40BED9C29A2516DE5F71D63ABF508F0201745C8E352AAD00E1E2789BC2AC2FE26BB9CB2C71B08FF8F956EFB0BC8F3ADA68F7389A5B016E30AFCEACA1ABFFC3190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:25:da:c0:e9:4b:d0:68:a0:36:99:e9:34:
                    63:e7:e2:77:fc:68:fe:8b:a9:22:a9:c2:42:09:82:
                    e1:ce:aa:33:04:ea:20:02:e2:4d:89:d5:66:fa:0f:
                    67:af:10:0e:30:63:e1:f5:b6:13:e1:f0:1f:aa:32:
                    51:8e:95:1e:b0:90:39:d1:ce:1e:87:8e:c5:ad:23:
                    fd:8b:86:1e:ec:6e:07:f6:4f:74:2a:38:c2:91:4c:
                    42:1b:53:7c:ee:d7:d4:df:f7:55:9a:37:45:51:07:
                    ed:67:d9:0a:57:b3:2c:7f:db:f1:05:d3:2d:6f:8d:
                    59:72:2c:e8:31:17:35:35:b5:f6:50:b8:5a:db:5a:
                    71:46:82:6b:2a:25:53:0b:64:b2:a0:f8:5f:ba:15:
                    ab:bf:4a:8c:ce:bf:44:a6:7a:4c:8a:7b:16:92:22:
                    b3:3f:1f:29:6b:77:96:09:7a:1a:74:2d:a3:81:e9:
                    18:1b:d2:61:ea:e3:3e:0d:cc:a2:62:58:6d:40:be:
                    d9:c2:9a:25:16:de:5f:71:d6:3a:bf:50:8f:02:01:
                    74:5c:8e:35:2a:ad:00:e1:e2:78:9b:c2:ac:2f:e2:
                    6b:b9:cb:2c:71:b0:8f:f8:f9:56:ef:b0:bc:8f:3a:
                    da:68:f7:38:9a:5b:01:6e:30:af:ce:ac:a1:ab:ff:
                    c3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FA:AF:75:BF:7B:5B:9A:BD:06:C7:6E:09:95:89:2A:7F:7E:B1:51
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/323830343a343630633a3a2f33322d3332203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:460c::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:04:48:f3:30:36:8a:cb:71:1e:e8:68:b4:0e:6f:22:f7:7f:
         0c:72:7f:76:bf:73:c9:61:8c:a8:96:ca:5f:a2:95:52:68:00:
         2b:e6:b2:c8:dd:ef:5f:38:65:c2:01:18:0b:5e:e3:a1:9f:54:
         08:92:53:b5:08:ae:81:51:6f:c1:de:0f:d6:84:71:ee:12:e1:
         0b:eb:15:50:a3:35:8c:ed:34:c7:b3:4e:a2:63:36:3a:2f:d9:
         bf:80:5d:d7:75:f7:ab:3b:7c:a8:ba:70:be:8f:50:23:c2:9b:
         4b:30:52:cd:30:92:c3:08:ee:4d:1b:ea:ae:bc:f4:ad:3b:b6:
         77:7f:f3:d8:14:f4:f6:d2:dd:be:8d:8b:4f:d9:c9:0f:50:c3:
         90:3a:80:fc:ff:d4:af:49:bb:a2:22:b4:e6:d7:e3:e9:7c:4f:
         d6:79:05:ae:57:e6:d5:d8:98:88:37:da:5b:bd:43:95:54:f1:
         30:b4:41:58:45:5c:1e:88:c8:1d:dc:69:8f:54:4b:ea:a4:66:
         d6:58:c6:54:80:38:b9:8b:aa:9a:e2:78:c2:e9:4b:35:30:3b:
         4c:ab:d0:ff:78:17:8f:88:8c:0e:1f:49:f4:ea:0c:32:47:2b:
         1b:6a:0c:50:21:a1:d8:bc:dd:fb:61:dc:8d:6b:aa:5e:e7:51:
         21:47:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----