Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
File:                     323830343a366433633a3a2f33322d313238203d3e20323730353139.roa (raw, json)
Hash identifier:          Q60TybxJiwWMqjIVvVmgYRKCe/DHLzj/EwTgX35TU20=
Subject key identifier:   DC:D2:2B:89:3B:3A:FF:95:E2:52:01:E5:2C:33:BD:28:64:45:E7:A4
Certificate issuer:       /CN=AFEA1A7CF9C1AD8364343BBA784B46BA7112B068
Certificate serial:       6FE7F4C94D3CB93EA38240A2016440DF74D6529E
Authority key identifier: AF:EA:1A:7C:F9:C1:AD:83:64:34:3B:BA:78:4B:46:BA:71:12:B0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFEA1A7CF9C1AD8364343BBA784B46BA7112B068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa
Signing time:             Thu 06 Jun 2024 19:20:47 +0000
ROA not before:           Thu 06 Jun 2024 19:15:47 +0000
ROA not after:            Thu 05 Jun 2025 19:20:47 +0000
asID:                     270519
IP address blocks:        2804:6d3c::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e7:f4:c9:4d:3c:b9:3e:a3:82:40:a2:01:64:40:df:74:d6:52:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEA1A7CF9C1AD8364343BBA784B46BA7112B068
        Validity
            Not Before: Jun  6 19:15:47 2024 GMT
            Not After : Jun  5 19:20:47 2025 GMT
        Subject: CN=DCD22B893B3AFF95E25201E52C33BD286445E7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:08:08:7b:a3:ab:6e:7a:5a:6c:c9:ba:f4:
                    9d:a5:e9:84:1a:29:70:14:fd:f5:98:1a:a3:9a:43:
                    96:be:91:82:dd:ec:8a:63:c8:f9:ae:cc:2e:a5:f4:
                    26:c2:bd:dc:64:b1:3b:fe:14:ab:9d:5b:43:20:64:
                    65:8c:9d:4e:6f:29:8e:7a:89:7b:90:5d:e1:d0:37:
                    f2:67:38:25:1a:d9:2d:2f:6d:ea:1a:72:ed:df:87:
                    dd:6a:e9:62:de:b2:65:34:1d:2f:c4:c6:c9:2a:c0:
                    43:2c:41:8b:37:9f:f4:86:f0:59:c9:a8:f8:e2:dc:
                    2a:4d:3f:c4:22:c1:25:c5:75:8d:41:db:64:75:7d:
                    cb:cd:93:3e:91:70:84:0f:47:3e:c9:bd:39:ae:e0:
                    78:b8:11:e9:db:4b:ae:c1:f3:0c:db:90:24:d1:a4:
                    56:0c:2b:21:07:18:d7:ab:e0:84:83:c0:ed:d7:9b:
                    cc:3d:22:7c:c8:3a:6b:94:61:c5:1e:42:f2:4a:ed:
                    e4:ac:60:e8:8c:65:ef:d9:53:2f:7b:4c:09:fb:c7:
                    92:af:7f:84:26:4d:e2:c9:68:35:97:4c:f1:5f:8c:
                    fd:18:cb:f7:39:9f:f8:d8:07:9a:c6:11:57:51:38:
                    1d:71:48:51:d2:2e:02:33:58:9a:d3:c6:c9:78:f5:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D2:2B:89:3B:3A:FF:95:E2:52:01:E5:2C:33:BD:28:64:45:E7:A4
            X509v3 Authority Key Identifier:
                keyid:AF:EA:1A:7C:F9:C1:AD:83:64:34:3B:BA:78:4B:46:BA:71:12:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/AFEA1A7CF9C1AD8364343BBA784B46BA7112B068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFEA1A7CF9C1AD8364343BBA784B46BA7112B068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/323830343a366433633a3a2f33322d313238203d3e20323730353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:31:df:89:1f:4d:f1:d4:61:19:6e:48:9b:9d:05:f3:23:
         24:c3:38:82:84:0a:bc:fb:28:3f:1c:ee:07:2f:6a:cc:bc:da:
         0b:f3:ed:c7:36:54:6b:2e:95:9d:86:8d:07:50:3e:aa:55:02:
         bf:f5:08:6e:7e:0b:8d:e5:97:9d:82:44:ae:c7:1f:9c:58:de:
         47:f1:50:36:ad:5b:5a:3f:c3:88:6f:20:e7:62:dc:e6:e5:21:
         7f:8f:f7:af:d2:36:9f:cd:ae:85:f2:e1:b5:10:31:f8:6c:7c:
         17:92:ac:96:a1:73:51:09:6f:53:61:5a:b9:c1:eb:18:17:e5:
         46:2f:47:1c:e8:0c:48:d3:b5:11:5b:09:5f:29:fc:9d:66:c1:
         d3:d6:cf:ff:a7:cd:d9:d4:6a:b1:c0:fd:c3:92:2e:a1:c2:6e:
         88:8d:32:7a:8e:28:05:09:ef:8c:03:f1:54:49:5a:29:ed:35:
         b1:3d:7b:d3:ef:79:09:2d:08:0f:7f:77:ab:ef:83:85:7f:fc:
         eb:3d:5d:86:b2:fb:f3:5e:17:20:8e:89:ff:0c:e0:70:9a:ca:
         84:70:27:7b:c5:d5:1b:f4:83:04:d0:d2:55:20:66:68:89:ff:
         80:05:6c:ea:a4:67:0f:8e:f5:f3:71:c3:ae:59:73:70:3d:0d:
         b8:16:1d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----