Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
File:                     323830343a333036343a3a2f33322d3332203d3e20323634393438.roa (raw, json)
Hash identifier:          2lsbEbvjLnjj1lEswedCOr/0H/ohvsrqeNymFz2Mefk=
Subject key identifier:   CB:01:46:20:BE:A1:DD:35:26:0A:DB:8E:51:22:97:4B:8B:67:DF:37
Certificate issuer:       /CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
Certificate serial:       4A1FC054F99352FBD55BD19488C6C186FBB0608A
Authority key identifier: AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
Signing time:             Wed 05 Jun 2024 10:20:26 +0000
ROA not before:           Wed 05 Jun 2024 10:15:26 +0000
ROA not after:            Wed 04 Jun 2025 10:20:26 +0000
asID:                     264948
IP address blocks:        2804:3064::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1f:c0:54:f9:93:52:fb:d5:5b:d1:94:88:c6:c1:86:fb:b0:60:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
        Validity
            Not Before: Jun  5 10:15:26 2024 GMT
            Not After : Jun  4 10:20:26 2025 GMT
        Subject: CN=CB014620BEA1DD35260ADB8E5122974B8B67DF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:15:0f:05:b4:08:c1:3a:5c:7e:dc:34:92:
                    6c:c0:df:ae:b4:36:bc:c5:8a:d9:4a:a6:ac:21:a2:
                    ef:ae:d1:37:db:47:5d:59:ab:1a:b1:1d:59:f5:0c:
                    4c:5d:ef:cf:09:8d:92:41:ac:46:71:b4:84:b9:3f:
                    bd:42:a5:3a:75:bc:ca:2b:1c:da:1c:7b:4e:c3:b2:
                    12:77:5a:68:d4:3f:e6:0b:1f:4d:0f:2f:e3:92:87:
                    c3:7f:94:31:62:51:ae:d7:3e:1c:00:d6:00:46:2c:
                    9f:c0:4c:3c:83:ca:6d:dc:80:4d:c4:cd:3b:3b:db:
                    7c:71:f7:88:9c:05:ae:6b:64:a2:c7:ae:c4:b8:83:
                    4a:b6:53:be:58:68:1f:e5:f8:ff:08:ab:f9:a1:4e:
                    2b:10:16:c1:c0:af:1e:70:a0:c7:66:15:9c:3e:ff:
                    b3:df:8e:32:6a:ef:24:52:5a:81:cd:b2:ec:29:82:
                    b6:27:16:5a:f6:e0:36:8f:9f:c1:e6:c7:ed:48:47:
                    f6:cf:b4:3a:89:14:81:17:48:0c:a1:e2:66:40:a7:
                    f5:ed:66:21:1e:20:1c:68:c7:2e:07:b7:fe:75:b3:
                    3a:bf:3c:86:26:3d:d8:1e:dd:10:c1:bb:7e:db:5b:
                    8c:c9:39:01:cb:2f:5d:8b:c4:31:e9:d1:68:56:eb:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:01:46:20:BE:A1:DD:35:26:0A:DB:8E:51:22:97:4B:8B:67:DF:37
            X509v3 Authority Key Identifier:
                keyid:AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:36:ab:e7:88:9b:11:4b:2a:d0:68:4a:6d:d9:46:78:66:
         bc:3a:6c:bc:eb:43:3a:b3:c2:e9:60:8f:34:76:ce:ac:f0:d4:
         00:45:48:6e:c1:0c:30:9d:6a:97:f1:4f:c4:8f:b4:52:a9:6b:
         ac:35:43:5c:3d:f0:13:a2:be:14:44:50:30:83:86:75:05:c5:
         a9:a2:47:16:0e:95:f4:af:ef:22:c7:4a:b8:de:de:7f:f1:9c:
         e1:19:8c:d9:6c:b3:2e:41:e7:e9:f0:2e:01:95:78:72:69:9f:
         d1:62:97:09:1e:17:fe:44:f1:3f:4d:02:8c:93:9c:0e:22:5c:
         ce:81:b4:d4:63:af:dc:62:97:e2:d4:bd:f3:56:cc:14:3d:09:
         e7:69:2c:d8:ff:2c:67:3b:49:e8:c2:b1:12:78:fb:06:44:ab:
         61:84:ce:9a:b3:5d:0c:26:f2:53:6b:d6:d4:61:5f:71:b2:d2:
         3d:4b:e2:e1:4e:84:92:25:4f:1a:cb:f6:23:54:a5:ca:87:7c:
         0b:cc:9f:21:5c:eb:02:41:17:5a:e8:8e:8a:5b:db:c9:d2:7c:
         6b:06:ca:bb:26:56:b9:e6:c9:44:a1:cf:bc:82:20:a2:1b:90:
         9d:25:f4:c3:a3:a4:bf:0d:99:99:92:8e:a4:25:b7:52:eb:cc:
         19:6f:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----