Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa
File:                     323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa (raw, json)
Hash identifier:          H2OtscngcOZEmnoT6VmnHSqCpyToxn88p1QbH84ZFgY=
Subject key identifier:   A3:09:63:F0:74:48:A0:76:7E:DC:C7:A0:1C:09:E2:EA:28:4D:E6:1A
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       43BE7FF83CEBE9EA616096C3538D15B1B4F9A7FF
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        2804:27cc:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:be:7f:f8:3c:eb:e9:ea:61:60:96:c3:53:8d:15:b1:b4:f9:a7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=A30963F07448A0767EDCC7A01C09E2EA284DE61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:81:e2:24:b9:5b:51:64:23:9a:18:25:c5:
                    c8:ab:c9:63:e9:b1:91:6c:a0:4c:31:0d:ad:30:6c:
                    da:03:6c:e5:cb:b1:11:84:c4:69:84:01:e0:4e:ac:
                    36:d1:12:e5:dd:85:f1:a5:0c:81:d6:4f:cf:ea:13:
                    79:59:cc:0b:48:c1:9b:e0:e9:37:dc:79:8c:b1:80:
                    7c:bb:df:e3:54:6e:df:4a:3b:75:2e:af:21:32:64:
                    21:f3:5c:ec:50:48:85:01:da:b1:c2:6f:f6:d1:d1:
                    9e:0c:4c:02:e2:6e:5d:09:68:32:19:a4:04:22:59:
                    e7:50:77:d2:57:62:94:8b:be:3e:0d:ee:98:7f:20:
                    84:e3:ca:40:4a:10:af:af:46:38:b7:da:c5:fc:9d:
                    8a:60:af:14:c9:f1:ad:2c:60:f5:a6:e7:8f:0a:a1:
                    ac:11:51:39:32:11:3f:68:f2:3c:ed:c2:7f:97:53:
                    17:66:7e:4c:3e:eb:d7:ba:70:4c:7a:5d:c5:57:54:
                    68:51:40:fd:a4:e0:9f:8d:d4:65:e6:73:33:7b:8a:
                    6d:4a:e0:4c:bd:c8:c6:5b:73:14:5f:2d:03:fd:e6:
                    11:ea:87:3a:58:37:2a:98:7f:a9:39:a5:fd:03:12:
                    cd:40:80:48:ed:6d:b2:cf:5a:12:35:b2:08:aa:47:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:63:F0:74:48:A0:76:7E:DC:C7:A0:1C:09:E2:EA:28:4D:E6:1A
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/323830343a323763633a383030303a3a2f33332d3333203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27cc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ba:ea:1d:3e:be:a2:93:10:65:ac:8a:07:46:60:f7:15:ae:f4:
         f6:28:a0:7e:ec:e2:86:14:ca:db:6d:0b:cf:2c:fd:5e:ec:9b:
         5b:f8:7e:0f:7b:dc:ad:18:14:b0:24:63:ea:98:6a:c3:09:6b:
         a3:20:47:48:dc:13:68:11:80:64:41:89:0f:31:00:d5:b6:46:
         fa:cd:fc:1d:17:34:7a:8f:ee:36:e9:c8:72:fe:0b:a4:3e:73:
         f6:a4:38:97:b5:d9:50:a1:aa:13:40:4a:1e:ff:1b:b2:73:70:
         d2:58:e2:fc:cd:7c:21:39:1d:40:60:c4:dc:5a:ba:3f:9c:7f:
         35:e5:37:09:7c:d8:02:f2:fc:c7:28:cf:aa:d1:ba:a3:8e:1a:
         cf:c3:c8:f3:7d:82:87:23:db:bc:3a:07:80:45:a1:4e:ea:6c:
         01:a4:35:db:9a:53:c0:dc:08:6e:f5:ea:2d:54:f9:78:44:c7:
         13:80:f7:ee:fb:56:1d:07:95:7a:6f:ae:21:fb:47:7b:a8:26:
         aa:e9:4b:6a:39:64:b5:8c:9a:3f:00:69:42:5e:b4:a0:06:f4:
         fd:ce:17:02:e6:88:f3:90:17:5d:91:7c:d6:f9:cb:b0:15:8d:
         27:a8:a2:d2:b3:37:20:b2:96:69:96:20:49:25:3b:da:8f:fc:
         1d:cb:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----