Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/323830343a353964343a3a2f33322d3438203d3e20323638373238.roa
File:                     323830343a353964343a3a2f33322d3438203d3e20323638373238.roa (raw, json)
Hash identifier:          F1+NbsuavwBaWqCGEPQJyBeP1oS7zn8hwamMHzuBH/c=
Subject key identifier:   39:6B:53:34:B2:B3:15:62:F7:06:F6:FF:2A:34:89:92:BE:B9:37:83
Certificate issuer:       /CN=6EDFC7E7F4622197B794DC180544F49FD3A1B8CB
Certificate serial:       07B9366445FCD5130DE5B2B8C2C2FED336DE0D78
Authority key identifier: 6E:DF:C7:E7:F4:62:21:97:B7:94:DC:18:05:44:F4:9F:D3:A1:B8:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/323830343a353964343a3a2f33322d3438203d3e20323638373238.roa
Signing time:             Wed 10 Apr 2024 13:18:48 +0000
ROA not before:           Wed 10 Apr 2024 13:13:48 +0000
ROA not after:            Wed 09 Apr 2025 13:18:48 +0000
asID:                     268728
IP address blocks:        2804:59d4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b9:36:64:45:fc:d5:13:0d:e5:b2:b8:c2:c2:fe:d3:36:de:0d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EDFC7E7F4622197B794DC180544F49FD3A1B8CB
        Validity
            Not Before: Apr 10 13:13:48 2024 GMT
            Not After : Apr  9 13:18:48 2025 GMT
        Subject: CN=396B5334B2B31562F706F6FF2A348992BEB93783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:02:50:f3:fa:f3:f3:9b:13:39:ef:4c:b0:
                    01:d9:82:13:a1:11:c7:e9:4d:30:5f:7b:5a:06:e2:
                    18:f1:97:a0:89:8e:72:ee:0a:63:02:50:2e:59:61:
                    de:76:9c:3d:86:ab:3b:16:a4:11:07:8b:6f:14:90:
                    2b:d9:d1:1f:f3:f2:21:f8:41:8a:b3:2c:f1:42:5e:
                    88:cc:d8:19:80:ef:2f:5c:14:a7:3c:23:33:ff:9d:
                    cc:5e:6f:b3:5a:c1:72:69:79:3d:76:15:45:ae:5b:
                    d0:dc:53:0a:76:23:d6:43:68:74:4a:97:77:53:03:
                    0a:00:30:d8:7e:cd:b8:f4:cb:a3:86:a5:a4:21:50:
                    42:40:c4:b9:71:15:8d:b1:a2:9b:9b:3b:51:8c:24:
                    b7:7a:97:38:af:83:44:a8:33:17:1b:52:6a:13:a2:
                    85:6c:fb:ba:1e:d7:f1:2c:cb:60:49:69:86:6b:00:
                    df:15:40:88:62:62:f6:59:ee:b2:a5:8d:03:38:65:
                    c9:b6:77:60:30:26:15:25:d7:f4:da:09:38:16:b2:
                    29:c9:8f:3a:14:9b:ba:a8:d3:01:68:7e:a6:1f:55:
                    db:e0:24:59:d4:74:cb:9c:a3:82:c9:3b:0f:43:ba:
                    9f:59:ef:24:71:c2:47:b8:90:d1:b0:c2:35:63:7d:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:53:34:B2:B3:15:62:F7:06:F6:FF:2A:34:89:92:BE:B9:37:83
            X509v3 Authority Key Identifier:
                keyid:6E:DF:C7:E7:F4:62:21:97:B7:94:DC:18:05:44:F4:9F:D3:A1:B8:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/323830343a353964343a3a2f33322d3438203d3e20323638373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:ca:48:be:a0:2e:03:15:b2:f4:4d:82:9f:07:0b:d5:6a:
         d3:fe:26:a0:ba:87:63:93:2c:b0:ed:ff:fa:cd:32:96:bc:0d:
         04:03:77:97:d3:08:58:c8:b0:42:b5:a2:c1:9e:1b:5c:7b:54:
         eb:f7:ee:d1:98:53:2c:fd:30:7d:21:ec:f1:a7:a2:f6:7f:1f:
         af:a4:48:61:01:81:51:7d:1f:7e:99:5a:8d:0a:da:c1:7e:f6:
         61:56:7e:04:c2:66:72:90:5d:a4:55:ff:15:36:2a:4a:2b:23:
         73:ea:0f:b6:0a:91:88:24:e2:f2:5a:e5:71:18:04:0a:6f:a3:
         ca:e6:47:35:e5:2f:6d:c5:e5:bd:4d:51:d2:3b:64:ee:e6:f1:
         be:e0:6a:10:fd:de:d7:c4:63:58:91:88:d6:e3:fa:2b:f0:54:
         45:53:4a:0d:e3:74:dc:4f:f1:0c:e5:ad:a7:fe:c2:48:13:bc:
         bf:f6:f9:79:00:63:09:09:95:35:89:16:09:46:9b:83:db:7c:
         b0:6b:da:a9:58:50:5d:8a:87:dc:4f:8b:35:61:3a:42:b7:78:
         96:59:79:ba:b2:d8:18:cd:4b:b8:f3:3b:d0:32:da:65:0b:83:
         0c:3b:49:26:94:bc:8b:9c:72:3d:8b:d6:1d:05:af:2f:c4:93:
         5a:38:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----