Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa
File:                     323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa (raw, json)
Hash identifier:          +PAB74FAZzFKN28HuuD8+j/0tftLip5YpdNN9FO9+Jw=
Subject key identifier:   15:9E:28:C2:A2:62:2A:FB:15:77:96:C2:3D:FA:5A:B3:29:4C:B8:6B
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       0E08679C13C5AC0C872D5CDE62E336A943952FF0
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:24 +0000
ROA not before:           Thu 04 Apr 2024 03:47:24 +0000
ROA not after:            Thu 03 Apr 2025 03:52:24 +0000
asID:                     265181
IP address blocks:        2804:2bdc:20a::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:08:67:9c:13:c5:ac:0c:87:2d:5c:de:62:e3:36:a9:43:95:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:24 2024 GMT
            Not After : Apr  3 03:52:24 2025 GMT
        Subject: CN=159E28C2A2622AFB157796C23DFA5AB3294CB86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:ff:bb:1d:98:ab:f2:a1:4c:3c:95:15:e0:
                    75:b9:76:1f:72:d4:94:a0:92:72:97:e2:15:80:65:
                    ff:dc:d3:e9:33:0b:b8:54:fa:6a:18:2a:57:77:87:
                    0b:21:75:45:c4:6a:ef:8e:6e:ec:78:49:68:f8:ff:
                    50:be:2a:a9:63:6f:ff:4f:2f:5d:3a:14:33:fb:ae:
                    90:d6:d6:29:c1:55:23:f7:9c:17:7f:22:74:bc:37:
                    58:53:7a:17:5a:ca:50:2b:08:c8:38:19:62:01:60:
                    4d:c4:43:53:ae:09:ae:f5:5e:95:4d:c8:f6:34:9a:
                    7f:b0:30:f9:84:06:e0:1c:45:5b:bb:da:43:ca:b0:
                    25:22:df:49:e1:ef:57:d6:1a:d9:52:07:af:e7:a8:
                    f9:7f:31:93:cc:7c:bf:7d:a0:0a:fb:75:01:d0:75:
                    e2:c2:9a:05:ca:c5:65:4f:3a:b1:76:fd:57:6d:56:
                    49:02:a1:20:69:f5:60:9d:bc:b5:80:c2:8c:71:a3:
                    00:5b:ce:bf:78:11:7c:8e:05:58:1b:94:32:bb:34:
                    d4:69:ef:ab:46:1e:39:60:40:66:f1:d3:34:89:27:
                    82:9c:56:0f:e3:7f:ad:fe:59:74:36:b4:82:74:28:
                    bb:27:f5:2e:b3:c3:78:0b:6c:50:ec:5f:30:9e:fc:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:28:C2:A2:62:2A:FB:15:77:96:C2:3D:FA:5A:B3:29:4C:B8:6B
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/323830343a326264633a3230613a3a2f34382d3438203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc:20a::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:1d:06:49:47:39:c5:3e:46:9f:65:64:93:55:75:8c:2e:f8:
         74:ba:4e:6e:1c:88:fc:7b:81:b4:ef:02:57:2a:02:92:38:37:
         05:ef:4d:75:dd:03:ca:49:d2:09:ca:7d:7b:7a:3b:7b:42:4a:
         af:b3:68:4e:be:ba:dc:f3:26:36:d2:58:98:bf:ed:1a:cc:3b:
         3f:9f:63:2b:b2:92:90:1c:fd:ba:11:e0:60:3b:99:ec:e3:4c:
         dc:fd:4b:69:aa:d1:b4:4f:fe:75:e3:62:02:df:6e:68:3b:7f:
         ee:73:7e:83:18:17:59:2a:5f:17:4c:4d:d7:1d:93:a9:9e:ec:
         a9:f2:d7:fd:9a:87:17:50:9d:14:e0:e2:b2:a5:71:35:b2:3e:
         fb:0a:97:da:bc:c6:6f:52:fe:79:78:de:42:22:8f:a1:e1:94:
         9c:ef:f3:62:f0:e9:69:9b:aa:31:82:ee:35:ed:1d:e2:93:6d:
         c4:f2:6a:72:af:3a:25:e9:e3:de:10:9b:53:a3:30:0d:95:38:
         09:23:c7:5a:9c:b3:43:c2:f4:06:d7:21:33:ce:30:d6:f4:2e:
         f3:d6:ee:fe:47:dd:c0:6f:8e:93:ab:7f:47:4d:f3:75:fb:f5:
         ea:db:53:b5:4e:6f:91:cb:db:fa:6b:f1:18:7f:2f:e3:06:ca:
         89:ef:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----