Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a383030303a3a2f33332d3333203d3e20323730363135.roa
File:                     323830343a366562383a383030303a3a2f33332d3333203d3e20323730363135.roa (raw, json)
Hash identifier:          q1km7Kthue/2sBBeHXrZgenpVHDDhr03mXKtZZ9+bCY=
Subject key identifier:   C0:A4:19:31:A0:55:1C:AA:68:D1:2C:E0:CB:93:01:77:7C:C0:47:04
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       760A1F7A8B3E59F70E936B106C3F99E29AF4AD40
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a383030303a3a2f33332d3333203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:19 +0000
ROA not before:           Thu 04 Apr 2024 16:02:19 +0000
ROA not after:            Thu 03 Apr 2025 16:07:19 +0000
asID:                     270615
IP address blocks:        2804:6eb8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0a:1f:7a:8b:3e:59:f7:0e:93:6b:10:6c:3f:99:e2:9a:f4:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:19 2024 GMT
            Not After : Apr  3 16:07:19 2025 GMT
        Subject: CN=C0A41931A0551CAA68D12CE0CB9301777CC04704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:eb:3f:ec:14:f9:f8:9b:32:a2:19:60:2e:c7:
                    70:6e:19:39:5e:e2:7e:56:ae:11:87:1b:2c:ed:71:
                    41:4c:f4:9c:13:ed:6b:f9:71:aa:db:b5:76:63:a1:
                    ca:10:8f:41:bb:3c:96:6d:8e:e1:be:f6:20:d6:61:
                    f2:0f:56:63:b0:6e:30:4f:85:d1:ca:3d:5d:86:e2:
                    cf:1f:f3:24:34:68:33:76:b4:6a:3d:8b:10:26:7c:
                    be:29:6f:64:de:91:bf:65:52:65:ed:f9:6f:b9:82:
                    0e:f9:11:18:5f:e2:0c:16:bb:ac:67:53:39:19:05:
                    9f:a9:44:d1:fa:90:72:c3:d0:05:d2:b1:e1:1a:1e:
                    77:e5:2e:00:f3:e1:30:a4:45:72:bf:d2:d5:a4:5d:
                    96:24:87:50:5b:de:a0:35:d2:13:5d:8d:7e:09:a7:
                    b9:e2:06:cb:b4:66:12:64:fd:a0:91:cf:68:63:84:
                    e4:ae:52:3e:f8:db:aa:8f:89:de:f6:82:b2:4b:a8:
                    90:df:22:76:5b:89:fb:20:fe:c8:85:26:e7:b5:a4:
                    bc:02:2a:f5:1c:92:d8:60:93:8f:ab:4d:a8:cd:35:
                    2c:1b:a7:ae:db:25:a7:6a:56:f7:40:f4:3b:10:6f:
                    7e:2f:fe:50:e6:53:cd:ba:30:e7:b7:29:01:2d:93:
                    14:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:19:31:A0:55:1C:AA:68:D1:2C:E0:CB:93:01:77:7C:C0:47:04
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a383030303a3a2f33332d3333203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:6e:6d:a4:90:04:21:8a:bc:13:f5:16:31:27:4a:3a:f6:
         d4:84:17:75:13:30:bf:1b:f1:ca:33:eb:f7:b9:1d:80:a8:61:
         ba:64:68:b5:cf:e2:3f:55:71:49:05:70:2c:3c:50:4f:b3:b7:
         27:05:87:de:b9:2f:aa:42:40:6a:49:fa:70:5c:be:c0:93:7a:
         b2:e9:c0:1c:95:8f:02:4d:14:b9:25:f2:d7:d0:f5:4b:47:10:
         18:bd:07:08:2b:74:a9:18:eb:f4:28:f6:19:d3:76:1c:36:cc:
         42:e0:62:ca:94:e7:8d:16:3f:e2:a4:6c:e3:c3:93:08:3d:f4:
         d3:35:71:01:c3:7a:26:19:5f:a1:24:2a:0a:9e:8f:25:2b:bd:
         b7:a1:02:1b:cf:62:37:f4:8e:d7:0a:1f:6b:2e:36:6e:53:ac:
         ae:b3:a4:c2:a4:c9:08:ab:ab:7c:87:37:8f:38:b1:3e:cb:8d:
         c5:b0:22:28:b5:c7:b3:21:41:4e:0b:56:4c:7c:8f:6e:6e:8a:
         95:26:09:e3:08:3a:22:3e:c1:2d:3f:64:82:82:47:de:f2:95:
         db:91:95:e6:ce:30:42:42:90:93:93:43:83:27:cd:41:72:9f:
         24:67:41:21:37:88:1e:71:12:33:e8:4a:2c:68:be:80:c7:c6:
         01:81:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----