Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a3a2f33322d3332203d3e20323635313538.roa
File:                     323830343a326238383a3a2f33322d3332203d3e20323635313538.roa (raw, json)
Hash identifier:          UReAExARjK2locLBN0sL2bApH4/Du2QyBf8OxDVlOZ0=
Subject key identifier:   79:99:E8:51:B6:85:A5:B8:A0:94:C3:7E:AF:C6:12:24:C4:8D:64:D6
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       6FD7D057D8C201EC0B04DCE24F78B82E6905332E
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a3a2f33322d3332203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:13 +0000
ROA not before:           Fri 05 Apr 2024 02:41:13 +0000
ROA not after:            Fri 04 Apr 2025 02:46:13 +0000
asID:                     265158
IP address blocks:        2804:2b88::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d7:d0:57:d8:c2:01:ec:0b:04:dc:e2:4f:78:b8:2e:69:05:33:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:13 2024 GMT
            Not After : Apr  4 02:46:13 2025 GMT
        Subject: CN=7999E851B685A5B8A094C37EAFC61224C48D64D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:cb:e9:03:44:e7:97:97:c5:d5:09:87:e9:
                    6b:a1:1f:47:1b:c6:b9:4a:d5:62:30:85:1d:79:6e:
                    d7:c6:d4:64:c1:18:06:95:7d:c0:b3:b5:9f:37:0f:
                    df:84:ef:0b:7e:f2:76:21:dc:66:89:82:58:87:f1:
                    db:37:49:6d:ee:ff:42:40:8d:13:98:cf:1c:37:f8:
                    04:16:bc:98:ab:2b:81:c8:04:63:df:17:7f:cb:95:
                    c1:4a:55:52:7a:e3:2c:65:26:79:2c:5f:68:f1:c6:
                    c0:39:21:56:ce:9b:4e:2f:7c:04:0e:11:6a:b9:f4:
                    fc:01:f5:a7:00:5f:25:6c:81:0e:03:f2:da:20:98:
                    73:cd:60:bf:5c:9a:03:e3:a6:9e:69:89:f6:6e:4b:
                    a0:21:c2:77:c4:9c:28:61:14:3f:65:21:7e:70:7c:
                    6b:14:eb:1c:9d:2e:35:cf:a8:ac:ac:01:23:b0:2c:
                    65:67:35:eb:c4:dd:5d:f7:7a:a4:ef:fe:01:f4:07:
                    d7:f9:7a:55:10:76:2c:0d:7f:d6:d8:e2:0c:a7:74:
                    85:44:b1:bc:72:87:a6:e0:a1:63:b7:f7:40:f0:36:
                    e3:fe:cd:2f:bc:73:0e:61:43:e1:6c:b9:a0:58:e2:
                    14:20:bb:c5:d8:bf:42:2b:a4:55:47:d9:94:be:c9:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:99:E8:51:B6:85:A5:B8:A0:94:C3:7E:AF:C6:12:24:C4:8D:64:D6
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a3a2f33322d3332203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b88::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:c8:0d:f8:85:7d:18:d1:73:9a:97:49:05:27:d5:aa:6c:60:
         59:03:7f:04:16:32:f0:8d:4a:a3:d1:7c:00:60:ad:18:72:96:
         c3:9d:2d:dc:58:0c:c8:04:bd:3c:9b:d7:33:79:d0:4a:13:99:
         62:b5:26:10:ae:68:8c:ba:81:9e:45:63:be:dc:d9:25:5e:ab:
         ca:e7:8b:b9:12:98:a5:50:fc:9e:9b:90:5e:9e:59:21:fd:ef:
         87:34:75:7d:50:25:67:eb:de:4c:30:1f:2f:de:b7:37:0c:03:
         1a:02:47:dd:f2:8b:0f:f7:d0:c6:3c:32:21:36:37:09:69:5b:
         ed:df:00:95:14:65:f9:e7:91:08:6c:c4:4d:90:b0:a5:0d:03:
         01:3f:6e:a3:09:6d:7a:4a:6c:9a:78:61:25:a4:e4:30:ba:26:
         89:e7:dc:37:9e:39:71:7b:1c:2b:ff:98:46:ab:e6:50:bd:9b:
         96:b0:a1:b5:d7:0c:04:6c:5d:d9:f4:34:24:80:ad:b6:b4:57:
         99:ba:a7:22:6a:8e:ba:6e:c1:ab:c5:21:21:a5:1f:9a:dc:f6:
         95:42:b6:38:f3:0a:27:e6:a8:57:69:5e:55:11:cb:09:32:f9:
         c2:22:99:15:ca:21:65:50:10:af:13:46:05:83:a2:21:be:20:
         40:96:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----