Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/323830343a356631633a3a2f33322d3332203d3e20323639303737.roa
File:                     323830343a356631633a3a2f33322d3332203d3e20323639303737.roa (raw, json)
Hash identifier:          0s1TFl5GeBgMmXwHX5EMx27uKK94kmNKgzfLSl9ysJY=
Subject key identifier:   A1:11:19:F5:5F:1C:6B:12:BC:BE:4A:8A:FD:FD:04:4F:C6:20:2A:03
Certificate issuer:       /CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
Certificate serial:       6AED2AF2B83D561AC20E3BC479B1FB2CAE221E41
Authority key identifier: A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/323830343a356631633a3a2f33322d3332203d3e20323639303737.roa
Signing time:             Thu 04 Apr 2024 09:09:34 +0000
ROA not before:           Thu 04 Apr 2024 09:04:34 +0000
ROA not after:            Thu 03 Apr 2025 09:09:34 +0000
asID:                     269077
IP address blocks:        2804:5f1c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ed:2a:f2:b8:3d:56:1a:c2:0e:3b:c4:79:b1:fb:2c:ae:22:1e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
        Validity
            Not Before: Apr  4 09:04:34 2024 GMT
            Not After : Apr  3 09:09:34 2025 GMT
        Subject: CN=A11119F55F1C6B12BCBE4A8AFDFD044FC6202A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:da:02:84:27:d2:25:4b:33:c1:27:41:e0:
                    7b:4f:71:27:3f:6c:67:ad:bd:0a:54:8b:78:a9:ea:
                    f5:aa:9e:29:9e:5b:6a:67:14:46:ec:6c:40:44:8d:
                    d8:6f:46:c7:be:ff:09:58:6f:02:2d:f3:60:48:ea:
                    12:87:1b:8e:e7:90:14:61:f8:4b:95:2e:ce:e7:cf:
                    e3:17:06:f4:64:60:11:19:e2:c4:a6:58:55:5e:28:
                    7e:4b:28:a1:7b:64:e1:c3:78:fd:c1:0c:1d:c6:34:
                    09:85:2a:ee:7a:8f:ba:57:fa:b8:6b:be:f4:ef:d2:
                    ab:7a:61:fd:46:13:20:92:f4:76:19:b6:38:6e:25:
                    aa:3a:7e:6e:59:f3:41:64:bd:ae:a3:cb:d2:94:1a:
                    cf:49:8f:d0:ca:34:c3:5c:1b:a1:6f:bc:b8:64:4a:
                    87:bd:77:57:1a:63:82:5e:f3:1c:46:47:5c:ee:f8:
                    80:96:60:31:23:82:22:87:50:73:a5:4d:59:de:a7:
                    ea:6d:f1:19:a3:96:7f:57:e6:c8:d0:67:87:ea:68:
                    19:32:09:1e:26:41:eb:ad:76:98:8e:e6:20:39:a9:
                    83:b1:04:4d:e6:c4:af:76:a7:be:3d:97:7a:49:63:
                    00:a8:15:81:2a:5d:1c:52:fa:a9:90:c1:ca:03:89:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:19:F5:5F:1C:6B:12:BC:BE:4A:8A:FD:FD:04:4F:C6:20:2A:03
            X509v3 Authority Key Identifier:
                keyid:A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/323830343a356631633a3a2f33322d3332203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:bb:9f:2f:17:96:8e:f0:67:46:0d:80:fc:8f:44:18:aa:
         c4:ff:3c:58:81:89:9b:01:ed:c8:df:78:15:20:5f:9f:5a:c9:
         3d:28:49:7e:fa:fd:e2:c1:ec:03:f1:b4:80:d8:89:06:32:dd:
         14:7b:4c:4a:3b:c0:a5:1e:59:ab:56:e2:d0:e8:95:78:07:4b:
         5a:23:dc:e2:c8:fc:0c:1a:ae:a5:2d:e0:53:5e:59:09:a7:26:
         1b:ee:f2:47:c5:c3:f6:5f:a2:4f:a4:6c:2c:f8:4d:66:e9:72:
         08:74:5b:de:be:50:c3:06:35:fe:2a:b8:55:e4:6b:cb:4d:c4:
         41:9d:37:e2:a0:d7:99:35:a4:b1:67:2e:ec:ce:d3:ff:89:71:
         32:ae:c3:45:e2:69:31:73:8b:49:0c:8e:e0:a6:32:6a:8b:48:
         e2:f0:41:96:60:7d:86:cb:c5:59:68:2b:6c:d7:2f:dd:66:26:
         fc:d4:7c:f3:88:8f:06:24:73:ed:1d:70:03:af:e5:71:bc:dd:
         99:d2:d7:3c:fd:7d:29:6c:16:b6:bd:d1:e5:e1:84:77:06:aa:
         6d:45:f5:19:bc:84:12:52:f2:c1:4b:96:70:20:be:c0:c1:f6:
         30:a7:70:cc:da:b6:50:bc:77:04:c6:a1:d6:ee:bf:71:f4:a0:
         79:43:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----