Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa
File:                     323830343a363432633a3a2f33322d3332203d3e20323639343131.roa (raw, json)
Hash identifier:          8eKP0Ka8wlrO4S1JCdE6Vq3MAR3iHmEq8gC9VrBrZRo=
Subject key identifier:   06:7E:19:FA:21:13:46:6D:A0:0B:D9:A2:C5:A9:92:79:B3:C3:9B:DF
Certificate issuer:       /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial:       06A581A32252D16A198688DA6FF70DDA69563D55
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa
Signing time:             Wed 22 May 2024 14:00:29 +0000
ROA not before:           Wed 22 May 2024 13:55:29 +0000
ROA not after:            Wed 21 May 2025 14:00:29 +0000
asID:                     269411
IP address blocks:        2804:642c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a5:81:a3:22:52:d1:6a:19:86:88:da:6f:f7:0d:da:69:56:3d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
        Validity
            Not Before: May 22 13:55:29 2024 GMT
            Not After : May 21 14:00:29 2025 GMT
        Subject: CN=067E19FA2113466DA00BD9A2C5A99279B3C39BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:cf:90:ca:66:75:2e:87:86:90:6e:a4:f3:
                    24:37:dd:d5:26:97:46:03:75:f7:f5:e1:8a:8d:04:
                    a1:97:10:64:f4:e5:bd:a3:74:1f:88:78:64:d8:4d:
                    f6:0e:e8:05:e8:c5:06:8d:4e:2b:d5:06:d8:e0:ef:
                    92:df:e7:7c:e2:42:fc:5a:03:ab:5c:7e:57:ee:0c:
                    fc:01:d5:5d:1c:72:d1:31:fe:4f:dd:f0:c2:b3:89:
                    53:a4:1a:36:a7:6c:6d:72:f7:78:e4:7b:a6:8f:ce:
                    e8:41:97:01:35:4c:33:e7:f3:e2:c5:2a:e0:23:d0:
                    7a:9a:02:5d:fe:4d:8e:30:c7:dc:4e:29:1d:26:45:
                    cd:fe:65:93:8c:ac:4d:c3:5d:c5:57:ff:48:94:70:
                    5f:b0:54:77:ad:e3:c0:c8:61:f6:84:05:63:2a:6d:
                    92:41:07:5d:48:ba:db:cf:7c:3c:f6:96:be:85:21:
                    8b:2d:97:e8:1c:97:07:18:31:e3:ac:fe:fa:3d:9e:
                    fb:ea:77:ba:72:7b:28:20:20:72:96:f9:45:6e:94:
                    eb:06:7e:af:70:a0:87:7d:f7:fa:f8:86:4b:ff:79:
                    27:be:b9:3a:dd:6f:e6:09:62:22:2d:6b:be:e0:ab:
                    a5:5c:44:ef:7b:2d:60:1c:3f:67:4e:20:83:0d:4f:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:19:FA:21:13:46:6D:A0:0B:D9:A2:C5:A9:92:79:B3:C3:9B:DF
            X509v3 Authority Key Identifier:
                keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/323830343a363432633a3a2f33322d3332203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:40:2a:e7:c4:2d:0b:11:ba:9f:6b:2c:bc:29:db:df:06:37:
         8d:28:6d:e6:00:74:46:95:a6:de:ae:83:5b:26:f8:3f:11:c8:
         bb:0a:e7:25:a8:bf:5a:b5:22:9f:3e:ee:8c:11:b8:ee:fc:64:
         6d:98:bb:c2:e1:fe:9d:7d:cd:9a:2b:08:17:17:31:49:46:dd:
         8e:71:21:fa:88:a9:2f:03:a4:04:af:14:e6:3d:5c:ce:2e:b6:
         55:7d:09:cb:5f:6b:cb:53:9f:55:1d:20:d3:d9:2f:af:de:a4:
         ab:b1:e0:a9:23:81:6d:86:61:91:66:ef:e6:90:b5:2b:10:c6:
         91:97:40:03:24:42:84:2d:10:2e:1b:fb:18:ef:67:e1:f8:52:
         82:b4:10:8c:94:b5:9f:74:64:ce:aa:55:e8:64:bc:7d:5f:93:
         22:a8:66:5f:b4:c3:1e:be:dc:44:c7:71:3f:72:32:a6:d0:c4:
         db:da:23:f2:52:46:83:13:1a:28:51:a1:49:63:16:7a:73:0b:
         88:af:f2:89:59:ef:e0:b3:50:cc:bb:61:6a:cb:59:52:51:ff:
         b3:6e:b4:95:7a:42:4b:01:0b:70:53:f2:6d:36:56:94:aa:25:
         0d:e7:42:5a:82:ec:07:0a:56:13:79:da:e2:0f:df:9b:df:35:
         8a:2f:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----