Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa
File:                     323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa (raw, json)
Hash identifier:          47y3YPyr8VJjiLH8FPXXz+u9iy1k3n7zJ6tlK5G9SW4=
Subject key identifier:   62:10:65:F0:7C:35:F0:FF:33:41:7A:0A:21:89:09:F0:E0:0C:75:11
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       2A6E8D9A6E866B7314B24E7FE2873DE071B05967
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:12 +0000
ROA not before:           Fri 05 Apr 2024 02:41:12 +0000
ROA not after:            Fri 04 Apr 2025 02:46:12 +0000
asID:                     265158
IP address blocks:        2804:2b88:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6e:8d:9a:6e:86:6b:73:14:b2:4e:7f:e2:87:3d:e0:71:b0:59:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:12 2024 GMT
            Not After : Apr  4 02:46:12 2025 GMT
        Subject: CN=621065F07C35F0FF33417A0A218909F0E00C7511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:30:46:53:c2:c8:20:a6:5e:91:82:cf:98:10:
                    4e:f1:e0:60:07:91:1d:bb:75:2f:ca:50:ee:71:68:
                    06:34:15:84:7e:3b:72:48:7a:a8:a7:fb:27:f2:77:
                    b3:7b:d2:40:f0:9a:fa:0f:e7:39:e0:61:68:47:5c:
                    91:0c:f5:7a:87:b5:b6:b7:ae:26:f2:7e:fe:15:df:
                    3c:e5:79:cb:c3:1b:49:27:b1:76:1a:4f:f0:96:cc:
                    84:a1:88:1f:20:4c:55:e5:0e:34:1c:c9:17:58:b8:
                    4d:f5:2e:18:77:c5:d3:2b:c0:11:21:8e:dd:c0:0b:
                    76:fd:1c:d1:6b:fe:56:78:6a:b8:d6:44:ee:4c:fc:
                    80:da:71:7a:be:a5:0c:8d:ae:cc:7d:02:6f:bc:08:
                    ae:51:02:ee:9d:32:4e:50:a4:4c:af:49:6f:ec:fc:
                    67:64:22:89:36:ab:9d:39:cf:f6:63:e3:a6:92:40:
                    6f:3c:69:59:fc:87:bb:27:fc:5c:50:e4:cf:a4:c8:
                    71:7e:fe:f4:2a:93:71:e0:fd:b9:09:4a:05:3b:72:
                    c9:07:98:aa:f7:48:60:24:7d:38:4c:4f:46:d4:8f:
                    59:48:70:0e:10:f2:ba:a3:e1:ac:99:ba:d0:c1:55:
                    60:9f:95:6a:78:e3:ed:9e:5e:de:3a:cd:0e:9f:13:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:10:65:F0:7C:35:F0:FF:33:41:7A:0A:21:89:09:F0:E0:0C:75:11
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b88:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:bc:57:92:f7:24:40:22:f2:15:b2:69:59:45:e2:46:17:
         bb:4a:94:6f:8d:bc:a6:9e:c9:25:71:db:db:ad:aa:18:4d:16:
         74:09:9e:03:e2:d2:ea:e4:23:ed:6a:c0:41:9a:f1:8c:54:50:
         04:9d:b2:9e:e5:6a:6a:7b:92:bf:9a:93:51:23:30:c9:3e:6e:
         5c:d9:37:8b:af:5b:b3:05:19:3a:0e:fa:41:45:a9:08:c9:14:
         a4:7c:1d:62:88:5a:17:4f:a4:9f:ff:41:7b:eb:31:1d:f7:fe:
         62:36:7e:f5:dc:8f:61:f8:7f:e9:e8:a0:aa:1f:03:1b:2c:39:
         cf:e8:e8:b4:a9:92:94:2b:23:fa:00:b7:9f:05:00:69:32:a4:
         0a:02:c8:f8:ca:22:51:d7:ce:fa:b8:12:81:d8:94:e2:2b:3e:
         5b:e7:1a:59:d8:f7:cc:43:52:df:ff:bf:4c:61:aa:ca:a8:a6:
         cd:00:38:25:f9:c8:f9:36:4a:d7:93:cf:42:01:38:38:ce:73:
         68:97:b0:33:1a:99:aa:4b:d2:da:49:9b:11:46:8a:23:5e:db:
         51:0c:c7:1f:84:c5:6a:0e:6d:d4:5c:cd:16:44:d0:ad:56:f6:
         95:bc:96:e0:d6:f1:51:2b:d9:34:85:db:b8:7d:4e:f7:5f:b3:
         27:09:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----