Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          qW4tx+3jzwGJY1oTv9BkyZ3CO4hi1K1QbjZPlIuY1rM=
Subject key identifier:   49:C9:AC:C0:8F:6A:04:48:E3:A6:69:0A:7B:C2:42:59:F3:48:F3:6F
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       6077422EA47D6EDB9A492212657A4F1DD85DBA83
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:27 +0000
ROA not before:           Thu 04 Apr 2024 23:04:27 +0000
ROA not after:            Thu 03 Apr 2025 23:09:27 +0000
asID:                     270266
IP address blocks:        2804:6960:5001::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:77:42:2e:a4:7d:6e:db:9a:49:22:12:65:7a:4f:1d:d8:5d:ba:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:27 2024 GMT
            Not After : Apr  3 23:09:27 2025 GMT
        Subject: CN=49C9ACC08F6A0448E3A6690A7BC24259F348F36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:94:93:90:c1:3d:33:c0:6c:90:af:5e:29:
                    16:3a:0f:61:e7:e7:cf:70:a0:db:00:d2:da:ae:a5:
                    32:0f:6d:25:ea:98:61:76:68:41:06:5d:b9:6e:11:
                    83:34:f0:ea:b2:87:7d:b4:aa:51:1b:fc:50:55:bf:
                    ad:fa:fc:aa:0b:95:97:a5:09:81:98:00:11:91:2c:
                    bf:f4:c0:21:fe:f6:4e:e8:d8:62:f9:4c:16:ff:36:
                    d8:02:49:26:56:78:b5:14:88:8a:a6:a6:1d:45:65:
                    14:f1:01:5d:3e:c4:3d:e5:1c:60:dc:9b:e1:fd:39:
                    06:50:39:84:53:5f:c9:aa:fa:36:83:ef:c0:23:2d:
                    ec:1d:14:fc:11:42:0d:2a:12:9e:63:4b:f8:d3:6e:
                    e9:52:5c:18:33:9e:f2:af:fc:90:5e:f5:b8:5f:f0:
                    c0:ab:8d:7d:c3:3c:27:9d:2c:da:f2:47:14:77:7d:
                    e3:d3:ce:15:da:a6:8d:19:3d:f2:d5:8b:57:ce:fa:
                    9e:4f:25:b7:b3:c5:6d:4d:44:e2:bf:60:6a:72:a5:
                    87:f8:81:4a:26:de:6d:78:ac:02:5f:b3:95:46:62:
                    71:5b:ff:86:f9:b3:13:f5:99:51:a7:ae:ff:c6:b1:
                    df:78:71:49:e5:ab:b9:2c:53:cb:69:d1:5b:d4:f4:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C9:AC:C0:8F:6A:04:48:E3:A6:69:0A:7B:C2:42:59:F3:48:F3:6F
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030313a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:dc:43:16:c5:53:36:9a:ca:8c:8d:b2:82:40:6c:ff:63:
         da:1c:ab:62:5b:f6:47:a6:07:b5:77:5e:0c:9a:16:fe:e9:ac:
         fd:05:e8:94:4b:b5:44:36:d5:6d:73:20:52:0e:26:f5:28:54:
         46:58:41:67:b8:2e:30:04:dc:f6:4d:02:8b:17:61:63:1a:ba:
         f3:36:d6:d0:81:63:aa:a9:fe:d4:2f:3a:b2:aa:b1:eb:83:cc:
         78:84:87:26:2c:ef:69:fc:3b:8c:ab:a1:2e:19:fe:44:f5:ed:
         5d:da:7e:ca:7f:97:8e:12:c1:99:88:56:28:40:55:f1:c3:f7:
         e2:fc:1e:4e:9d:05:bb:69:27:c7:2c:16:ac:66:f4:56:34:7c:
         79:5d:93:8a:56:88:af:d0:e2:40:11:b1:12:f0:1f:89:86:f3:
         c4:24:ea:e6:eb:94:69:ac:92:f2:25:56:c7:3b:e6:b9:54:7c:
         2c:1b:c7:2f:f5:fc:af:e5:86:87:32:e9:6b:c2:09:4d:25:11:
         ee:25:a6:fa:2c:b0:af:63:b1:df:2b:35:fb:43:73:35:d4:51:
         aa:c2:5e:3b:ea:67:55:26:0f:c6:d3:b7:5e:00:b5:11:b9:53:
         01:f3:ab:31:2b:fd:c9:7f:b1:07:f5:b9:96:da:a2:00:6f:e4:
         76:35:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----