Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          LdKuLFLDL2q7GtUDSEADY7R+yja5n4k5jUI2Mwl9bo0=
Subject key identifier:   3C:C9:AC:7F:16:D2:0A:1B:7B:E0:83:27:1F:27:4E:9E:25:D3:AA:03
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       255C181873A9B9D9C92F055CE1F71F634E67E03F
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:35 +0000
ROA not before:           Thu 04 Apr 2024 23:04:35 +0000
ROA not after:            Thu 03 Apr 2025 23:09:35 +0000
asID:                     270266
IP address blocks:        2804:6960:2::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:18:18:73:a9:b9:d9:c9:2f:05:5c:e1:f7:1f:63:4e:67:e0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:35 2024 GMT
            Not After : Apr  3 23:09:35 2025 GMT
        Subject: CN=3CC9AC7F16D20A1B7BE083271F274E9E25D3AA03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:0e:12:3c:d3:59:02:ad:64:88:6c:d3:20:
                    9e:89:3e:e7:5a:de:bd:54:dc:f3:34:0a:ac:91:01:
                    47:e0:40:25:86:62:86:c2:e8:36:dc:b4:f5:d4:aa:
                    34:74:f4:2e:b8:31:e2:b3:b9:53:3b:06:31:91:dc:
                    c9:04:12:7e:e3:c2:6d:70:79:53:f0:04:79:6d:9e:
                    c9:c9:e0:d1:9c:cd:b3:d9:0e:ef:97:97:79:72:dd:
                    ba:fe:b9:36:7d:cd:6f:1a:4d:e0:ba:a8:36:2a:22:
                    c8:71:28:62:a7:fd:b0:f7:88:a9:af:5a:f0:d8:0a:
                    d0:ff:83:7d:69:26:e3:39:aa:06:b2:5c:dc:01:12:
                    47:1e:70:c4:86:6a:bc:43:97:3a:ef:9c:22:74:03:
                    f9:c0:8b:74:c9:da:bd:0d:0a:46:4b:03:26:2e:28:
                    29:e4:d8:b8:47:35:ab:89:8a:4a:42:07:a4:fe:c3:
                    1d:c1:16:5b:7e:3d:38:34:9c:84:c1:d9:81:a5:0c:
                    b1:fe:05:03:e1:b3:4f:e5:d3:0d:0e:c7:8f:a4:c2:
                    0b:95:e5:5a:0f:96:4b:ee:f0:ec:dc:f5:2a:af:d0:
                    9a:c6:2e:a5:6c:12:2f:50:f4:c5:81:bc:82:6a:44:
                    b2:62:91:c8:d1:63:e9:61:aa:57:2e:56:a6:a7:2b:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:AC:7F:16:D2:0A:1B:7B:E0:83:27:1F:27:4E:9E:25:D3:AA:03
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a323a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:16:fc:b2:ce:b1:de:d0:c7:ca:aa:60:c9:73:fc:8b:7f:
         12:71:26:61:58:ab:8d:5a:52:8c:74:28:35:d8:ea:3d:af:bd:
         8f:43:67:40:9f:1b:2e:16:0b:97:88:5b:f2:f2:0d:b5:02:72:
         fd:db:70:fd:7f:44:52:9d:92:bd:5b:77:2d:bd:b3:43:ee:9b:
         ae:57:90:00:05:00:66:ae:2d:4b:f2:94:5d:3e:a6:2e:ff:32:
         ba:a0:5a:29:7e:f7:ee:36:ed:c5:d5:d1:5d:d5:dc:ff:7a:f9:
         9f:4f:5b:cb:ee:8e:05:d0:c5:c3:8e:9c:ef:bf:2d:8f:05:84:
         92:f5:e2:5a:08:35:d8:f5:6a:5d:f0:4a:ad:25:f1:83:d5:cb:
         5c:27:fb:ca:91:81:2c:8b:1b:ce:2a:c0:5c:de:2e:99:55:ee:
         08:e2:41:0d:d3:d7:57:2b:88:d4:53:fc:93:62:81:91:e6:ee:
         02:65:9d:7e:be:a6:fc:04:21:dc:bf:2d:56:5f:65:1c:5f:4a:
         99:a8:ab:b8:c8:18:d9:7f:f3:20:7c:0c:0d:44:28:68:c4:e8:
         21:15:f5:c1:56:8d:65:3a:2f:03:84:2b:c3:8e:28:bc:f4:d4:
         28:e5:de:a6:2d:78:fa:e8:ba:02:15:8b:12:0b:7f:6f:75:7f:
         7d:fa:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----