Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa
File:                     323830343a363733343a3a2f33322d313238203d3e20323639363132.roa (raw, json)
Hash identifier:          JfG6+j39m2eQ2otwjYf153DqMRzfUhPf4V9lL6GozzE=
Subject key identifier:   3E:92:C1:C8:54:22:C7:B0:26:98:BD:4F:22:3C:6F:CF:D0:0E:30:C4
Certificate issuer:       /CN=9D52D5FBF5120C30654881F61F146C9915781B93
Certificate serial:       3D0D3D1FF76354319D00058511ACBC37AA00966D
Authority key identifier: 9D:52:D5:FB:F5:12:0C:30:65:48:81:F6:1F:14:6C:99:15:78:1B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D52D5FBF5120C30654881F61F146C9915781B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa
Signing time:             Thu 04 Apr 2024 12:33:01 +0000
ROA not before:           Thu 04 Apr 2024 12:28:01 +0000
ROA not after:            Thu 03 Apr 2025 12:33:01 +0000
asID:                     269612
IP address blocks:        2804:6734::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0d:3d:1f:f7:63:54:31:9d:00:05:85:11:ac:bc:37:aa:00:96:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D52D5FBF5120C30654881F61F146C9915781B93
        Validity
            Not Before: Apr  4 12:28:01 2024 GMT
            Not After : Apr  3 12:33:01 2025 GMT
        Subject: CN=3E92C1C85422C7B02698BD4F223C6FCFD00E30C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:8c:f3:89:c6:03:9b:2d:92:8a:a3:cc:8e:
                    80:04:5e:c9:a9:02:13:69:42:f3:cb:46:75:6f:f8:
                    e6:98:1e:af:be:74:2f:b3:d8:46:44:cb:35:3b:9e:
                    83:95:76:97:b8:7b:4d:f7:9c:a8:a5:b0:fb:06:91:
                    c5:2a:3c:36:cc:6c:0f:27:d3:bd:c3:b6:df:9e:14:
                    24:37:06:a7:5b:93:d2:02:95:a2:23:3c:91:18:de:
                    be:ca:8b:8e:d7:7e:33:8f:c5:3d:f4:3d:89:45:aa:
                    a9:4f:2e:64:97:a7:f3:29:59:df:3d:3c:6f:09:62:
                    5d:58:52:fe:38:44:8b:65:e8:f4:12:72:e9:82:c3:
                    33:df:aa:bd:c9:65:65:14:6e:04:be:54:01:7b:81:
                    7d:6a:4e:38:c8:a4:0b:cc:06:a8:30:72:22:58:3a:
                    3b:7e:74:d1:fb:8c:44:b0:67:4c:2b:a9:79:82:b5:
                    92:f1:8e:07:d5:a3:37:b6:ec:c1:ea:b9:0a:75:4f:
                    40:d6:e4:f1:47:c3:ce:23:50:0c:45:17:da:54:d0:
                    09:38:87:10:1e:84:91:c1:59:86:b6:99:3b:1c:cd:
                    4f:b9:f1:be:35:87:f3:c4:b8:ad:db:ca:63:0c:85:
                    d5:96:e7:89:be:34:6d:8e:2c:7f:32:59:2b:cf:a4:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:92:C1:C8:54:22:C7:B0:26:98:BD:4F:22:3C:6F:CF:D0:0E:30:C4
            X509v3 Authority Key Identifier:
                keyid:9D:52:D5:FB:F5:12:0C:30:65:48:81:F6:1F:14:6C:99:15:78:1B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/9D52D5FBF5120C30654881F61F146C9915781B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D52D5FBF5120C30654881F61F146C9915781B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/1/323830343a363733343a3a2f33322d313238203d3e20323639363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6734::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:b9:d0:3b:c7:54:45:00:b8:4a:3b:a4:5a:48:e0:56:01:73:
         a3:49:ff:bb:d0:aa:dc:b9:af:ab:dc:9e:d4:49:7d:45:c1:a5:
         9b:61:21:b0:2a:87:c5:fd:0d:b6:1c:e1:cf:93:72:83:14:2f:
         d2:1d:60:48:7b:57:ea:df:50:1c:9f:34:6c:7c:97:7e:21:30:
         2b:7c:4a:82:63:8a:ae:3e:74:fc:3f:e1:90:cc:00:6b:3c:57:
         dd:32:b7:f8:65:6d:11:0a:99:4d:66:dc:6f:c1:cc:33:42:16:
         9a:ca:85:a5:8b:98:2a:e1:c0:24:91:62:5b:5b:68:84:40:34:
         59:84:d7:8b:ef:c6:98:05:99:63:98:69:26:98:8e:b1:c7:82:
         51:bd:f0:fb:90:27:25:36:b7:a2:8e:04:12:f4:fb:11:05:f4:
         ce:70:b5:40:04:be:73:7d:89:51:af:9f:5f:9e:22:78:8d:ee:
         3f:50:11:f0:fe:ed:e4:bd:94:cf:62:a0:21:c4:f4:48:29:36:
         2a:d0:d0:6f:12:71:f8:4d:23:f7:c6:5a:5b:83:5e:f2:76:9e:
         81:77:78:56:e8:7b:c6:26:54:6c:56:dc:06:65:0b:55:64:49:
         0c:af:37:65:23:01:b1:9d:30:17:d4:b9:d7:e2:a2:fa:23:f7:
         f6:d2:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----