Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a3a2f33322d3332203d3e20323730333338.roa
File:                     323830343a366137383a3a2f33322d3332203d3e20323730333338.roa (raw, json)
Hash identifier:          jQqjLvbPmNody4R2CxOCkV0apr9urvJDZQ/kH03ABvU=
Subject key identifier:   7D:12:38:11:A3:B2:C1:DD:CF:D0:61:2B:8B:78:2F:33:75:6E:A5:EA
Certificate issuer:       /CN=198A6D21600CF2DD4E43C384F7379E891DD16986
Certificate serial:       6D0D57C951B00DD4AF9DBC79DBE58E4FF03E4ABB
Authority key identifier: 19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a3a2f33322d3332203d3e20323730333338.roa
Signing time:             Thu 04 Apr 2024 04:18:03 +0000
ROA not before:           Thu 04 Apr 2024 04:13:03 +0000
ROA not after:            Thu 03 Apr 2025 04:18:03 +0000
asID:                     270338
IP address blocks:        2804:6a78::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:57:c9:51:b0:0d:d4:af:9d:bc:79:db:e5:8e:4f:f0:3e:4a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=198A6D21600CF2DD4E43C384F7379E891DD16986
        Validity
            Not Before: Apr  4 04:13:03 2024 GMT
            Not After : Apr  3 04:18:03 2025 GMT
        Subject: CN=7D123811A3B2C1DDCFD0612B8B782F33756EA5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:18:ad:83:2e:ce:44:64:a6:5e:e6:e2:c9:
                    c9:6a:6b:cf:76:8c:14:3a:4e:d3:f0:04:7f:db:ce:
                    10:aa:8e:0f:b2:20:ed:c1:f6:5b:f1:0a:51:54:29:
                    b6:45:2a:b7:f3:09:ee:c0:0d:31:4a:71:d7:8d:af:
                    99:bb:14:e4:10:0a:ba:47:71:cc:12:6b:71:52:c3:
                    2e:45:0f:95:1d:62:89:55:a6:4b:84:b6:4b:9e:5a:
                    da:32:68:36:99:13:9e:a0:84:96:d4:40:f1:0c:65:
                    f2:bd:12:a8:b2:62:bc:5e:7b:b1:a5:cb:1f:4c:19:
                    db:74:79:41:06:72:8a:8d:a6:fc:ef:7d:86:d3:d1:
                    70:19:c3:91:d5:0e:2d:fb:a8:be:f2:19:04:34:81:
                    d1:d5:07:70:b0:92:a1:1b:27:e6:37:51:79:0c:43:
                    7e:3f:22:7e:18:c2:e6:40:49:d3:be:9f:80:2d:59:
                    9c:51:4c:61:e5:e1:f8:98:af:ec:4a:14:03:ab:d9:
                    a5:68:f3:0a:0f:36:4c:fe:56:5d:4b:fd:3f:ed:40:
                    93:bb:a4:23:1e:f4:b5:a6:23:05:1d:0e:14:81:57:
                    af:91:cc:c0:16:54:f5:9e:6a:2c:bb:a3:39:e3:e7:
                    1d:88:7b:27:4d:35:8d:85:7e:a0:5d:08:00:dd:aa:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:12:38:11:A3:B2:C1:DD:CF:D0:61:2B:8B:78:2F:33:75:6E:A5:EA
            X509v3 Authority Key Identifier:
                keyid:19:8A:6D:21:60:0C:F2:DD:4E:43:C3:84:F7:37:9E:89:1D:D1:69:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/198A6D21600CF2DD4E43C384F7379E891DD16986.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198A6D21600CF2DD4E43C384F7379E891DD16986.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z1P7LWrbHLZuPTZBBFAre7M2J6CXRzhFi81E3yfZA6x/1/323830343a366137383a3a2f33322d3332203d3e20323730333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:99:f9:b1:4f:24:cd:f5:f9:29:40:59:a4:23:3e:4e:3c:
         e1:35:c5:69:23:aa:b6:8c:06:e0:09:53:66:08:53:c7:c1:1d:
         2a:51:c1:54:0a:64:8d:f1:1e:f6:d3:ab:5e:b9:4b:27:84:10:
         c6:ef:82:80:46:49:6c:6b:8c:69:d3:6c:4a:b7:e3:09:15:19:
         e0:86:e8:c9:06:fe:5d:df:a7:0a:24:27:ee:5a:cd:3c:db:11:
         cb:99:99:ab:63:16:ee:ee:a5:e9:01:d1:fb:35:45:72:91:80:
         e3:f1:57:a6:d5:3d:50:a5:ca:c3:52:61:78:05:da:ce:aa:25:
         4e:c2:4e:76:00:d9:88:9b:6b:48:96:b5:de:70:55:45:c1:47:
         8e:44:b2:54:19:ee:76:c0:30:a0:90:5d:f8:40:a1:8c:f6:ea:
         97:f2:c8:8a:29:7a:43:96:17:9e:7b:55:c4:90:ba:c4:5c:73:
         a0:53:b1:a2:56:13:5d:97:8e:7d:d6:74:ca:1f:42:d2:e0:c7:
         2b:cd:f6:f4:ab:3c:97:00:c0:c5:58:fd:7e:8e:a4:fc:dd:65:
         bf:40:0a:4a:13:24:e5:c7:31:a1:38:81:4f:d3:de:7e:6b:55:
         53:36:8b:28:ea:84:71:ca:2e:ad:d3:6f:53:23:f5:d1:6a:a6:
         32:75:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----