Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa
File:                     323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa (raw, json)
Hash identifier:          K6+eDJ56QzQRw12bEttNMBn41sobV+vJ49zEV7I/zSw=
Subject key identifier:   D4:92:14:BF:05:6A:48:FD:47:E6:C2:1F:CD:68:F9:A6:35:A7:60:D5
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       228719B6C37AC98552FF68BDBF6CC9C426C55BFA
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:28 +0000
ROA not before:           Thu 04 Apr 2024 23:04:28 +0000
ROA not after:            Thu 03 Apr 2025 23:09:28 +0000
asID:                     270266
IP address blocks:        2804:6960:5002::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:87:19:b6:c3:7a:c9:85:52:ff:68:bd:bf:6c:c9:c4:26:c5:5b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:28 2024 GMT
            Not After : Apr  3 23:09:28 2025 GMT
        Subject: CN=D49214BF056A48FD47E6C21FCD68F9A635A760D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:da:66:5a:74:de:b5:6f:e5:5e:1c:ee:7a:
                    f8:7d:3b:45:e5:63:55:6c:9d:ad:e5:5f:ec:18:86:
                    16:1e:54:ad:4e:61:9a:80:f2:9c:c1:6a:89:33:5c:
                    d6:98:c4:82:dc:18:81:f1:5d:d8:3d:0e:59:e2:d4:
                    f2:a4:5a:8c:ab:2d:84:87:b9:2d:1c:df:77:c4:44:
                    49:d3:28:76:e8:66:6e:48:1d:94:75:13:cf:8a:a4:
                    e3:99:52:1d:29:c7:e3:f6:54:98:26:3f:46:91:f3:
                    bb:5a:76:4c:1d:75:a7:ab:3e:11:b5:92:c2:60:23:
                    3a:3e:37:9b:e8:42:25:83:c7:ec:9a:33:2e:5b:cb:
                    01:f5:cf:0b:f4:76:31:5d:fd:73:45:e1:87:d3:55:
                    50:4e:f2:b2:33:ba:ef:5b:68:0a:d6:d9:f2:36:fe:
                    5a:3c:97:57:74:19:b3:7d:c6:ab:0f:45:02:e5:aa:
                    8b:4b:7e:9a:68:b5:d3:47:a2:7d:9e:c6:47:49:0c:
                    50:c8:e3:39:6f:06:a9:cb:94:d6:a2:53:f2:b0:41:
                    b6:d4:72:d6:7b:e5:9a:eb:fb:c2:b9:f4:1f:c8:c2:
                    f5:3a:39:8f:01:5b:55:be:5a:b8:e4:85:d2:ce:0d:
                    1f:b3:65:55:7b:89:fb:bd:25:2b:87:6e:04:c2:b9:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:14:BF:05:6A:48:FD:47:E6:C2:1F:CD:68:F9:A6:35:A7:60:D5
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a353030323a3a2f34382d3438203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:5002::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:32:c2:e1:2b:2b:4e:b2:4d:5c:1f:6a:51:f6:cd:7a:6b:
         eb:81:df:35:3e:dd:33:e8:23:9f:1f:93:99:f9:e6:1f:35:80:
         8a:d9:32:c0:81:41:d2:c9:db:cd:5c:52:63:96:d0:ca:d4:8c:
         af:5d:e4:c9:b4:8c:49:bd:0e:8a:50:ec:56:e4:7d:b2:59:fd:
         09:6f:d7:a1:7f:b6:f1:6c:e5:e8:35:52:96:2c:40:09:95:f3:
         7c:59:60:3b:c4:21:bf:fd:88:37:cb:47:dc:39:94:de:ee:b0:
         5f:da:71:6c:1d:1a:d8:84:e7:ca:8c:0d:87:ba:ea:2f:96:63:
         bd:b9:f7:17:dc:58:ea:65:d7:30:4e:50:1c:35:77:e5:78:90:
         f6:b5:c0:dd:e7:bf:b2:dc:ef:7e:ec:36:98:7f:22:24:de:05:
         b0:ce:a3:ca:5b:6a:98:38:81:ee:28:62:b1:ae:1b:e5:c1:b4:
         ad:09:94:04:e7:fc:f6:33:fa:ac:6e:e3:1b:7b:21:d0:a4:79:
         7a:e0:86:cc:a3:bb:59:41:bc:f6:75:50:aa:4c:88:d8:c0:3d:
         ed:19:e1:54:91:9c:d5:d9:72:20:5b:fb:d5:6f:dd:3e:9b:9a:
         a8:61:1c:ce:cb:55:10:7c:57:75:87:1e:e5:79:55:2d:ba:78:
         7f:b7:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----