Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33322d3332203d3e20323730363638.roa
File:                     323830343a366638633a3a2f33322d3332203d3e20323730363638.roa (raw, json)
Hash identifier:          nTkfIyc8n0NEFcVjgbchGkP0HZVCpcG5bvrd/hd8dZc=
Subject key identifier:   F4:75:67:75:25:96:B2:D5:B7:40:E5:7A:E0:92:4A:EC:AF:51:5D:10
Certificate issuer:       /CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
Certificate serial:       036DC1C468A0289781E5579C80831DC1B8C115EE
Authority key identifier: FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33322d3332203d3e20323730363638.roa
Signing time:             Thu 04 Apr 2024 12:53:21 +0000
ROA not before:           Thu 04 Apr 2024 12:48:21 +0000
ROA not after:            Thu 03 Apr 2025 12:53:21 +0000
asID:                     270668
IP address blocks:        2804:6f8c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6d:c1:c4:68:a0:28:97:81:e5:57:9c:80:83:1d:c1:b8:c1:15:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5B34241FA8B70EAA5F16545A0A89B675926B59
        Validity
            Not Before: Apr  4 12:48:21 2024 GMT
            Not After : Apr  3 12:53:21 2025 GMT
        Subject: CN=F47567752596B2D5B740E57AE0924AECAF515D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:42:b3:b9:63:2b:25:8e:c5:bc:4a:57:80:29:
                    bf:b0:23:58:9c:e4:bf:f8:3a:8e:22:7f:c2:ab:90:
                    b2:30:67:97:72:51:24:88:47:85:47:a5:4c:50:20:
                    2d:87:78:e9:28:09:9e:f3:e2:47:e4:1d:ae:8a:5d:
                    17:c8:42:6a:f6:11:b5:be:4e:62:3a:9f:b6:bd:cf:
                    68:c0:ad:58:b3:a0:0c:f5:41:c4:65:f7:d8:0e:0f:
                    6b:9e:4c:94:37:94:bd:ed:c8:e4:fa:7d:ee:3c:44:
                    01:69:8a:65:09:75:11:dc:50:30:69:4d:a8:ab:cd:
                    54:33:56:a5:cd:a0:a3:4a:1a:94:f7:d8:c7:68:4b:
                    ed:26:ec:eb:a4:74:79:9c:31:4e:72:04:75:fd:86:
                    e0:bf:5b:c1:4c:1c:2f:4d:6a:5e:57:13:6e:7d:18:
                    e2:2d:85:23:97:a2:02:e6:82:da:2a:a3:89:e1:94:
                    83:d9:30:6b:92:85:a7:47:14:4b:d2:73:a9:3e:65:
                    f7:93:b9:29:e6:18:74:0d:28:11:d1:0f:13:23:02:
                    3e:f6:97:b5:69:1b:00:58:06:68:07:45:7f:37:00:
                    9a:d9:83:0a:25:5a:94:d2:f5:b6:91:57:d4:ef:99:
                    d5:c9:2f:53:67:01:a0:95:96:68:2b:9e:17:2f:0b:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:67:75:25:96:B2:D5:B7:40:E5:7A:E0:92:4A:EC:AF:51:5D:10
            X509v3 Authority Key Identifier:
                keyid:FF:5B:34:24:1F:A8:B7:0E:AA:5F:16:54:5A:0A:89:B6:75:92:6B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5B34241FA8B70EAA5F16545A0A89B675926B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/1/323830343a366638633a3a2f33322d3332203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:d3:02:16:d7:14:38:36:b5:62:82:58:68:9f:00:c3:34:
         45:99:e4:93:db:71:63:3d:9d:83:b1:85:f1:cf:9d:45:70:74:
         1d:e1:5a:3e:f7:c8:9f:ef:c9:eb:81:3d:23:2e:60:df:14:ed:
         ef:19:72:c6:d1:d4:fa:d1:73:a2:87:44:f5:ba:17:9d:50:13:
         0c:00:30:59:23:31:51:b6:7b:d2:01:29:db:07:2a:4e:76:bf:
         08:20:80:86:ab:f4:be:77:80:27:65:72:6d:93:53:09:25:78:
         2d:e8:9e:db:22:a5:bb:57:c8:3f:b1:6b:22:0b:c4:84:a3:a8:
         df:a9:3a:4f:ff:f1:41:f6:b8:81:7e:26:61:6e:16:df:46:a2:
         a5:6b:44:45:d8:7d:e8:54:38:02:91:23:d8:91:8f:4d:4b:10:
         ee:cf:43:2a:6e:1b:7c:ce:60:bf:62:56:16:d3:16:b8:25:ac:
         9d:cf:43:40:7d:1d:a9:1e:26:d5:40:72:e2:2c:f9:9d:73:c6:
         2a:42:51:44:60:3f:15:9b:68:6e:77:8e:ac:d3:37:3d:27:3e:
         46:4a:55:03:5d:a8:36:3e:db:c5:c2:ec:6a:2e:10:e6:cd:b9:
         25:a8:9c:45:49:e3:7c:7a:5c:7a:fa:db:18:5c:fe:4e:28:ed:
         54:00:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----