Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33342d3334203d3e20323637303739.roa (raw, json)
Hash identifier:          5IPC+4Uq0waqGTPiEwxUUyvCskuwDyO1b94Dk/lvk44=
Subject key identifier:   05:A0:1D:DF:45:35:D7:E6:C1:24:78:9E:6D:FF:75:00:CF:6A:E6:F8
Certificate issuer:       /CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
Certificate serial:       47E834FFCBEDF5074569E4F612D648186D88B579
Authority key identifier: 01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa
Signing time:             Mon 23 Oct 2023 23:06:27 +0000
ROA not before:           Mon 23 Oct 2023 23:01:27 +0000
ROA not after:            Mon 21 Oct 2024 23:06:27 +0000
asID:                     267079
IP address blocks:        2804:47d4::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e8:34:ff:cb:ed:f5:07:45:69:e4:f6:12:d6:48:18:6d:88:b5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
        Validity
            Not Before: Oct 23 23:01:27 2023 GMT
            Not After : Oct 21 23:06:27 2024 GMT
        Subject: CN=05A01DDF4535D7E6C124789E6DFF7500CF6AE6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:81:35:72:fc:e3:4f:6a:57:5f:26:dd:59:
                    9c:ee:80:95:54:63:c3:8f:04:99:46:03:c1:4f:ca:
                    2c:79:e3:59:0e:93:e5:15:29:66:b1:c3:65:44:af:
                    eb:2e:c4:67:2d:93:1f:d3:51:8a:d3:72:23:3b:82:
                    ff:97:a6:d9:0f:9f:c6:4a:85:fd:02:9c:b0:3b:30:
                    e5:cf:e2:ce:de:87:e4:9e:52:a4:66:37:be:59:e4:
                    70:8d:90:de:b8:c4:56:ea:f6:a0:db:28:d2:cb:dc:
                    58:4c:19:01:22:bb:c9:a3:fc:c8:3a:b6:ad:14:5b:
                    0e:d3:5d:95:37:cc:ca:32:a8:4c:5b:31:42:3d:c4:
                    ba:d5:a8:ba:5f:04:27:bc:8c:36:5f:e5:67:01:dd:
                    3a:8f:02:c5:67:7f:ee:0d:f9:85:9b:03:a2:36:57:
                    35:95:b9:66:b3:3a:ba:5a:5d:0b:db:77:ca:e8:4c:
                    ce:bd:8d:ab:a3:be:9b:bd:29:b1:cb:be:e2:99:d5:
                    21:59:39:11:28:d8:4b:5d:86:80:08:b7:39:ee:6c:
                    98:3f:eb:b4:a8:89:83:a1:ea:b6:f1:1f:48:f6:e5:
                    7a:91:6a:d3:55:51:ec:83:11:cf:33:cd:85:25:7e:
                    2d:e5:6f:05:1b:7a:02:42:ca:34:7a:9c:aa:95:0b:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A0:1D:DF:45:35:D7:E6:C1:24:78:9E:6D:FF:75:00:CF:6A:E6:F8
            X509v3 Authority Key Identifier:
                keyid:01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:13:73:9d:6e:78:dc:75:6f:8b:13:42:9c:9b:62:41:b6:
         55:5f:30:9d:63:8a:93:db:ff:f2:fa:48:dc:11:72:2c:c3:e6:
         d3:be:26:71:04:fa:62:a7:2d:ce:04:dd:97:b9:bb:12:85:e9:
         71:09:df:b1:06:6b:ca:4d:c9:c0:79:ca:87:3b:89:a8:9d:41:
         cf:a4:60:8c:8c:4b:da:c8:17:97:62:75:f7:c5:4d:df:f5:96:
         9b:6e:3a:23:4b:f6:58:7a:f0:cb:12:20:c4:39:dd:9f:06:8a:
         a4:ce:f8:7b:62:18:e0:66:0d:9e:c9:0b:61:7c:7c:bc:b4:cf:
         36:b7:ff:c8:08:04:a3:5d:77:4d:94:b7:5d:72:43:31:75:e9:
         84:d8:41:17:5a:43:73:2e:a9:4b:6b:48:9e:5a:cb:b9:1c:8b:
         69:68:ac:37:11:7f:ad:f7:17:29:e7:a7:85:b7:de:02:86:9b:
         e5:85:9d:f1:74:e6:89:c8:b2:4c:9c:23:1e:5d:bc:75:c4:9b:
         cc:b0:38:36:8f:22:15:03:85:a8:bb:30:de:fd:64:e6:96:29:
         8d:72:e3:ef:d6:ea:b4:06:b3:67:ee:50:ec:1c:46:ce:b0:87:
         a3:cd:55:f6:d9:bf:ab:81:93:76:58:95:7e:a7:a4:8a:2a:88:
         de:b0:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----