Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          mAOvSRDqJDgVqDHNVKeUhkOfX0Bmu19f9Bn2ToMji7g=
Subject key identifier:   8E:9C:41:FE:97:4A:AA:77:B5:C5:11:C8:8D:5C:EB:21:6E:C9:5C:F5
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       210D9620F3E0DD7F30CD978D827FDE6BBC09ECF3
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:26 +0000
ROA not before:           Thu 04 Apr 2024 16:02:26 +0000
ROA not after:            Thu 03 Apr 2025 16:07:26 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0d:96:20:f3:e0:dd:7f:30:cd:97:8d:82:7f:de:6b:bc:09:ec:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:26 2024 GMT
            Not After : Apr  3 16:07:26 2025 GMT
        Subject: CN=8E9C41FE974AAA77B5C511C88D5CEB216EC95CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:9b:f2:b5:2e:8e:2a:e8:2d:d2:98:d8:d4:
                    2a:8d:bb:dc:85:1a:2a:0f:3e:6a:bc:16:58:30:31:
                    ea:26:bf:b7:11:c2:a3:3a:89:e9:b0:10:01:83:fa:
                    75:ef:5b:e2:4e:12:44:25:69:49:f2:3c:b4:47:e9:
                    c9:07:52:65:c2:4e:cb:69:ad:33:37:0c:6a:eb:2c:
                    09:81:a0:26:9a:a7:6d:f3:42:2a:85:18:5e:68:0d:
                    ea:b1:f7:cf:e5:ab:eb:da:ce:94:68:eb:6c:08:6e:
                    57:cb:84:32:e9:5f:15:05:02:6f:08:6f:5f:c8:ec:
                    dc:03:2d:3a:6d:37:1a:7d:f8:56:97:36:ea:4a:98:
                    1d:f7:f1:45:22:6a:20:40:ae:5b:f0:b1:a7:c7:76:
                    b3:20:58:c1:40:de:56:5a:fd:69:ce:4f:69:67:f8:
                    7e:d1:c9:4b:3a:6d:ab:97:54:5a:b5:94:b7:3c:1b:
                    cc:69:e9:d6:41:a9:19:28:e0:79:ac:39:46:bf:be:
                    5c:f8:fb:4f:d3:14:6e:2c:44:44:0a:e2:fd:f4:aa:
                    94:63:a9:f0:c9:fa:37:e0:f2:97:89:4c:2f:bd:60:
                    78:ea:66:0b:79:33:df:b4:c3:5f:aa:47:8d:ce:1e:
                    89:ec:f1:27:98:3e:bd:2e:16:3d:a6:ee:ec:9b:3a:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:41:FE:97:4A:AA:77:B5:C5:11:C8:8D:5C:EB:21:6E:C9:5C:F5
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:f9:bd:94:ca:88:94:26:4c:bf:a6:e5:e1:ad:e9:0d:77:
         ee:2e:40:6a:21:93:98:82:ba:94:56:e9:1d:6c:1b:f9:b1:63:
         29:5c:08:02:e7:62:24:6b:43:2b:86:ea:af:02:93:94:3e:e8:
         35:2e:91:bd:40:ea:62:45:ef:33:17:3c:16:93:ab:75:62:79:
         b5:1e:93:af:09:de:c1:0e:77:e5:42:19:4e:a1:44:ce:a8:8e:
         91:3a:39:9e:a3:54:da:a3:63:1d:61:3d:db:5e:d3:43:c1:fb:
         f4:bb:15:ba:42:35:96:a8:66:2d:60:4a:21:8d:c1:56:c8:0d:
         d4:bd:c5:7e:7e:68:4e:a3:e3:dd:b4:02:83:f6:ae:13:1d:63:
         e9:05:62:5d:53:cf:4e:69:00:7a:f0:c5:f7:44:d3:6d:fd:79:
         16:ef:1d:3a:16:4c:c8:00:d3:a4:08:a6:6e:0f:0c:d1:b0:cc:
         e1:c7:49:4b:b5:0b:93:f2:b9:7c:a6:11:02:0b:67:85:23:71:
         9f:2d:93:98:bc:41:97:58:bb:e3:8f:9e:5b:10:d3:a2:13:78:
         8d:20:1f:1a:dc:2e:95:a6:c7:2e:ca:4b:2d:87:45:8e:f0:eb:
         7a:ed:0b:6b:fd:9c:69:cb:c9:69:91:c8:3a:45:44:78:b5:82:
         98:99:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----