Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a653030303a3a2f33352d3335203d3e20323637303739.roa
File:                     323830343a343764343a653030303a3a2f33352d3335203d3e20323637303739.roa (raw, json)
Hash identifier:          MS5wy0OWE5YxY+icGkcLbN1YgpD992hVcIfcseOKc90=
Subject key identifier:   77:3F:69:2B:67:91:86:46:4F:75:4F:5E:27:F0:72:CC:13:A8:DB:E2
Certificate issuer:       /CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
Certificate serial:       480875F79E17CDA9EDD32E5D948154C94D807BE3
Authority key identifier: 01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a653030303a3a2f33352d3335203d3e20323637303739.roa
Signing time:             Mon 23 Oct 2023 23:06:29 +0000
ROA not before:           Mon 23 Oct 2023 23:01:29 +0000
ROA not after:            Mon 21 Oct 2024 23:06:29 +0000
asID:                     267079
IP address blocks:        2804:47d4:e000::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:08:75:f7:9e:17:cd:a9:ed:d3:2e:5d:94:81:54:c9:4d:80:7b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
        Validity
            Not Before: Oct 23 23:01:29 2023 GMT
            Not After : Oct 21 23:06:29 2024 GMT
        Subject: CN=773F692B679186464F754F5E27F072CC13A8DBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:55:e4:dd:50:32:c6:2a:0b:61:83:af:f5:
                    37:cf:66:d2:19:cf:6c:fb:89:d2:25:d8:96:07:4c:
                    cc:a3:fe:84:07:fd:67:f5:35:5d:f1:24:74:b3:8d:
                    d5:13:d4:1d:ce:5a:d3:a8:da:a8:7b:7e:71:7a:8f:
                    fa:69:96:99:d8:a9:a8:3d:81:68:85:2d:b7:87:c0:
                    d0:58:24:00:23:22:80:84:da:37:e5:71:39:c0:82:
                    cc:61:77:cb:9b:c7:52:56:09:3a:4b:a4:16:09:4c:
                    3d:17:36:0b:e4:92:e2:46:bf:b3:89:b3:f5:cf:58:
                    eb:fd:df:ec:31:07:ea:a9:eb:8f:94:ec:be:34:35:
                    47:8f:9d:7b:5a:ba:ee:11:d2:58:39:50:af:ba:0c:
                    ce:a6:6b:60:fe:97:2e:15:9d:fa:f9:65:16:56:5e:
                    06:85:94:18:24:03:41:1f:82:d5:52:d4:05:e5:52:
                    db:4f:26:ce:c6:da:fa:a1:af:ea:07:44:9c:ff:57:
                    45:99:b0:a5:3b:9a:8c:fb:fa:8e:64:bf:3e:f5:4d:
                    1f:b0:b9:72:8f:51:f5:31:b9:1b:04:16:ab:5f:d4:
                    2c:fe:64:7e:c2:f9:d7:aa:0f:e0:01:eb:9c:62:37:
                    3d:fa:92:c1:03:ad:b3:ea:4a:25:7f:9d:52:49:83:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3F:69:2B:67:91:86:46:4F:75:4F:5E:27:F0:72:CC:13:A8:DB:E2
            X509v3 Authority Key Identifier:
                keyid:01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a653030303a3a2f33352d3335203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         9b:65:94:d6:b0:06:5d:64:1e:11:bd:98:40:7f:af:32:d3:e4:
         8f:0a:8d:3a:05:cf:27:38:11:c1:a0:fd:97:fc:5c:bd:6d:ac:
         80:7a:e2:01:b1:75:35:42:03:c3:db:66:d0:37:55:76:79:7c:
         d4:30:95:36:e5:9c:2b:f4:91:9d:53:8c:90:08:5f:94:ca:2d:
         39:7a:8b:93:39:59:8b:ca:fc:d4:d9:2c:0f:87:4f:ad:04:16:
         b6:39:78:71:a5:81:e8:60:11:23:78:db:46:e0:da:ce:9b:3b:
         88:bf:20:25:9a:c7:b7:98:6d:3a:c6:84:cf:b6:fb:15:55:82:
         84:a4:02:f8:c9:4e:ad:df:c6:39:a2:4a:85:96:3d:7d:89:8f:
         f6:53:45:cc:2b:27:a8:9d:61:78:77:c4:b2:28:7e:24:aa:c8:
         9d:c9:d9:a9:be:47:33:6d:70:23:bd:2e:43:9f:70:70:27:2c:
         0e:81:0c:3c:e6:43:4f:85:a5:df:3a:d6:fd:4e:12:4c:d2:c5:
         72:03:e0:0e:50:40:df:7d:8d:52:2e:eb:ce:bb:92:f1:35:e8:
         8e:36:f1:ee:1d:9d:86:5e:ec:aa:cf:3f:aa:6c:47:3c:9b:db:
         ba:0f:b6:ec:6d:a8:6d:2a:a1:6c:5c:d9:67:40:07:6b:5a:09:
         8f:9b:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----