Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a363030303a3a2f33372d3337203d3e20323730323636.roa
File:                     323830343a363936303a363030303a3a2f33372d3337203d3e20323730323636.roa (raw, json)
Hash identifier:          36ouf6MZv04IHPWSHCEJnqr9ztzn3jl8WyNcX0OJrFo=
Subject key identifier:   66:73:2B:9F:FD:2A:2E:52:B3:82:19:BB:FA:0D:29:6A:D9:11:94:76
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       0FBDC4560253DA43E8F7B32E45B412071A3F9151
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a363030303a3a2f33372d3337203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:36 +0000
ROA not before:           Thu 04 Apr 2024 23:04:36 +0000
ROA not after:            Thu 03 Apr 2025 23:09:36 +0000
asID:                     270266
IP address blocks:        2804:6960:6000::/37 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bd:c4:56:02:53:da:43:e8:f7:b3:2e:45:b4:12:07:1a:3f:91:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:36 2024 GMT
            Not After : Apr  3 23:09:36 2025 GMT
        Subject: CN=66732B9FFD2A2E52B38219BBFA0D296AD9119476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:72:82:1d:9d:fe:4d:42:e4:97:64:39:17:
                    90:8a:db:0a:f1:af:9d:f2:d6:5b:c9:9a:11:c6:d8:
                    f6:94:71:6a:cc:10:45:1e:e9:57:9f:d1:0d:6c:cd:
                    05:d9:9c:11:e4:13:ba:6b:7d:cf:1c:05:23:08:7e:
                    07:4b:2e:c3:78:91:64:cf:40:fd:3e:3f:7f:30:f6:
                    ea:c5:b0:e7:df:ed:ad:36:e8:da:50:67:90:51:d2:
                    7e:ab:58:de:09:9c:68:e2:f1:73:d6:28:9b:2c:5a:
                    e5:45:bf:12:87:a5:b3:58:00:09:2d:0d:3a:eb:19:
                    2b:21:eb:7b:6c:2c:7e:b2:6a:f4:61:ab:05:51:2c:
                    ac:98:18:e7:aa:57:e7:9d:ce:aa:87:0b:f1:e8:00:
                    86:69:c9:e7:69:55:0d:77:a1:d0:51:57:02:b8:e7:
                    ee:6c:5e:db:40:36:d3:e7:60:1d:b4:9a:50:cf:1f:
                    df:27:8b:00:d9:ee:f4:37:37:65:75:6d:79:a7:59:
                    c0:0e:3e:05:31:7c:7b:cd:a1:ef:49:73:66:60:2c:
                    0c:b8:ac:82:4b:d4:53:eb:17:87:22:7a:a4:6b:29:
                    93:00:8e:fc:30:06:ac:79:39:55:34:d9:b3:fc:10:
                    8f:2b:c9:3a:6c:30:17:be:ee:bc:be:9a:8d:bf:25:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:2B:9F:FD:2A:2E:52:B3:82:19:BB:FA:0D:29:6A:D9:11:94:76
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a363030303a3a2f33372d3337203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:6000::/37

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:7a:bb:c9:6e:9d:9e:34:eb:c1:3a:21:f9:89:31:b5:42:
         81:b4:1f:a4:ef:69:ef:ec:01:3f:f6:e9:0a:e2:e7:d7:6b:16:
         72:ad:c5:97:8d:df:e4:95:61:5a:c7:ef:a5:1e:0e:98:76:4e:
         84:fc:80:eb:ac:55:f3:56:7d:26:63:df:5d:b9:95:33:06:ae:
         fa:3d:e7:99:f4:a6:98:51:41:c1:89:fe:ce:b9:29:f3:b1:10:
         e4:1e:c2:57:2b:0e:a9:2a:96:01:77:84:ae:71:b8:eb:4f:b5:
         9e:8a:ee:13:e1:14:df:3e:fe:97:df:f6:b1:4e:7b:e7:99:1d:
         71:d2:4c:36:0e:b3:93:85:05:9c:cd:d1:ea:8b:34:d7:4d:1d:
         df:25:7f:0a:15:f1:58:02:f7:8f:40:a7:e8:a0:28:81:92:0f:
         6c:77:9f:f8:fe:1a:cc:e4:e0:1d:b9:ff:95:ee:a3:5b:9f:a5:
         43:58:07:3c:df:a6:d1:3b:0c:d1:fb:92:81:b3:0c:0d:01:f3:
         54:3b:c7:44:3a:55:16:b4:a3:d5:e6:30:f4:26:37:06:fc:b3:
         f1:71:8a:17:09:1c:b8:fe:53:9f:51:9e:4d:68:9f:b2:af:d0:
         37:43:2c:0d:f5:19:3e:d9:14:c5:dc:95:f9:61:5d:6a:aa:f0:
         db:d6:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----