Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/323830343a323763633a3a2f33332d3333203d3e203533313235.roa
File:                     323830343a323763633a3a2f33332d3333203d3e203533313235.roa (raw, json)
Hash identifier:          1JQV5WZ/Vpvt89X0yNgJUMUou8Jm7Mi2+eoTxPBV+A4=
Subject key identifier:   11:40:95:C4:83:4B:4F:43:B8:24:69:6B:B6:1F:B0:2F:CB:04:F3:FD
Certificate issuer:       /CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
Certificate serial:       5CEF7FEAA5CEE9F398EEAB7E87D0D17BA763CBC2
Authority key identifier: 06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/323830343a323763633a3a2f33332d3333203d3e203533313235.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     53125
IP address blocks:        2804:27cc::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ef:7f:ea:a5:ce:e9:f3:98:ee:ab:7e:87:d0:d1:7b:a7:63:cb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067C2A8A20D26D163DCF0CF7BC7E4DE906B85805
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=114095C4834B4F43B824696BB61FB02FCB04F3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:63:8c:32:ba:8e:4b:ac:3e:de:3e:24:a9:
                    f1:b6:b4:c9:99:c3:9b:81:09:df:76:72:96:9e:7c:
                    95:2e:32:9d:7e:fb:de:e7:6f:3c:a6:71:99:29:42:
                    02:22:af:07:6c:14:21:9d:f1:e3:93:e3:3b:5a:54:
                    5c:9a:eb:a4:63:76:fe:bd:99:49:23:ea:c7:10:0f:
                    12:8e:78:57:07:d3:13:53:15:85:68:33:04:05:73:
                    d2:5e:69:2b:58:7e:f4:ae:e3:f6:c2:d4:a7:2f:20:
                    a1:81:cd:65:c7:5b:be:db:4d:3d:d6:f3:0d:a2:46:
                    63:12:e0:63:dd:f0:15:cf:ad:07:51:37:41:0e:ac:
                    b1:24:5d:33:4c:a8:e4:0d:98:40:c2:8b:70:7e:f3:
                    37:06:36:28:14:d4:8f:f9:ca:df:53:1d:3f:70:e3:
                    9a:fb:a8:b1:b3:4b:df:f5:f6:96:02:5b:cc:5c:f0:
                    8c:7f:3c:48:7c:52:8e:77:65:a4:af:bf:79:f8:22:
                    92:20:28:63:fb:86:4c:b1:64:da:d4:75:fd:df:b5:
                    f1:45:49:4c:eb:4d:17:a3:18:e3:9a:4e:e9:07:fc:
                    e8:54:46:41:71:a8:a9:ac:11:41:21:15:bb:86:34:
                    82:a8:fe:aa:2d:39:cd:03:3b:d2:f5:7d:97:25:1c:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:95:C4:83:4B:4F:43:B8:24:69:6B:B6:1F:B0:2F:CB:04:F3:FD
            X509v3 Authority Key Identifier:
                keyid:06:7C:2A:8A:20:D2:6D:16:3D:CF:0C:F7:BC:7E:4D:E9:06:B8:58:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/067C2A8A20D26D163DCF0CF7BC7E4DE906B85805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/1/323830343a323763633a3a2f33332d3333203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:71:d7:9b:77:99:33:ba:e6:ca:d7:59:00:2e:da:48:9e:
         48:ee:3d:68:c5:85:ea:72:ad:42:0a:3b:58:29:b8:b8:43:ad:
         e9:33:55:00:1f:f1:ba:95:9b:e5:7c:49:69:38:86:fe:8d:02:
         dd:04:fa:67:f7:ce:53:85:43:8b:9d:11:90:9a:8f:04:43:9e:
         1c:c4:44:0e:0b:9a:7d:8e:b2:41:b8:01:34:31:a6:5d:18:0d:
         c1:90:c3:d3:a0:fa:a9:78:87:6f:49:27:f7:b2:b9:3b:aa:37:
         7e:5b:d7:3c:92:12:3c:de:5a:4a:2d:9c:7d:3f:a1:bb:2e:cb:
         49:a1:f5:3f:3c:e4:ef:6f:0a:27:ae:e4:f5:64:4a:cf:3f:1e:
         e9:4f:e2:23:cc:22:02:1c:47:74:12:c4:07:5c:8a:0d:c0:a8:
         20:cf:71:83:0f:4b:a7:e8:93:4a:63:e4:34:ae:ac:45:63:5c:
         69:00:07:bd:4b:4e:ec:06:28:98:2e:7d:3b:cc:97:13:0f:6b:
         32:76:72:d5:b3:b9:3f:09:1d:c6:4b:cb:f3:c7:c9:fa:94:ae:
         60:d2:93:8d:79:4e:42:d0:82:cb:8f:6a:51:fe:ac:f8:ea:22:
         ff:2f:7d:aa:0c:92:7f:42:49:e9:2b:fd:ee:eb:e9:3d:28:69:
         5b:70:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----