Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33322d3332203d3e20323733373034.roa (raw, json)
Hash identifier:          7JflKtRnpJ+utWQNfqQUgyNxCdlGO9KHkqZ6jEjctA0=
Subject key identifier:   91:96:17:5C:D5:18:53:2E:D9:C3:D1:83:EC:14:9C:9C:3F:D6:A9:0E
Certificate issuer:       /CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
Certificate serial:       36FB0E54E3B76373E6841F9F39A3558E2CC43CBB
Authority key identifier: 6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa
Signing time:             Thu 04 Apr 2024 13:30:49 +0000
ROA not before:           Thu 04 Apr 2024 13:25:49 +0000
ROA not after:            Thu 03 Apr 2025 13:30:49 +0000
asID:                     273704
IP address blocks:        2804:8af8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fb:0e:54:e3:b7:63:73:e6:84:1f:9f:39:a3:55:8e:2c:c4:3c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
        Validity
            Not Before: Apr  4 13:25:49 2024 GMT
            Not After : Apr  3 13:30:49 2025 GMT
        Subject: CN=9196175CD518532ED9C3D183EC149C9C3FD6A90E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:b8:21:bc:66:fc:2d:df:75:7d:94:9c:18:
                    92:42:c7:30:3c:c6:bb:7e:eb:94:4a:c2:70:cd:9a:
                    cf:de:9f:50:70:c5:98:95:d7:58:cc:0f:96:90:76:
                    3a:04:34:f0:c7:00:a1:17:cb:52:48:44:59:1f:0a:
                    85:45:d7:c4:8d:ae:ab:d7:90:2e:67:d8:fe:57:13:
                    02:3c:16:8e:36:7b:c2:6f:03:42:3e:d1:2f:52:13:
                    a1:d9:56:9f:54:e7:9b:2b:d4:ab:02:30:cc:c3:97:
                    78:47:a6:5b:a3:66:28:ac:59:43:69:34:6e:5a:43:
                    a6:40:ea:91:41:e1:45:70:5a:ae:86:44:d0:06:6c:
                    10:af:ee:c3:93:96:55:5d:21:ba:a1:ba:a8:fb:ec:
                    f2:80:74:d5:2f:a0:e5:83:81:e3:3d:22:bd:87:66:
                    1d:8d:e3:6d:31:18:96:60:31:f3:a3:b3:d4:46:a3:
                    c5:d9:09:9e:cf:41:64:38:e4:00:6c:63:6a:75:b4:
                    43:87:a5:3d:d0:45:a5:74:4d:0d:d7:13:3e:7d:48:
                    51:3d:84:1b:a6:84:21:b3:9b:07:26:c8:5f:19:58:
                    8f:64:dd:79:21:48:e1:06:9a:bb:42:22:95:49:b8:
                    8b:54:3d:db:b5:48:6a:6b:91:1c:9a:52:51:f3:65:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:17:5C:D5:18:53:2E:D9:C3:D1:83:EC:14:9C:9C:3F:D6:A9:0E
            X509v3 Authority Key Identifier:
                keyid:6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a3a2f33322d3332203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:dd:19:65:a6:4b:08:cc:1b:be:ed:dc:f1:8f:5e:4b:c5:
         dd:17:94:a2:3d:e2:dc:08:41:6d:93:61:a0:c8:28:53:75:2b:
         60:a0:c5:6f:54:ec:45:67:2d:25:f0:f9:94:da:cf:d6:de:79:
         11:0d:2d:d4:51:91:b9:7f:a3:e3:b7:52:a9:ef:71:7b:ae:28:
         a1:a8:1b:26:73:be:cd:aa:23:36:53:11:fd:55:e5:33:80:70:
         62:49:98:4f:b0:bf:4f:a3:9b:77:ed:57:be:be:1b:30:9c:a4:
         9f:b8:16:ec:0f:af:34:60:53:2c:9f:85:d2:e9:e7:58:e3:c3:
         50:83:e2:96:31:a7:9e:59:16:ee:10:a8:99:3b:3d:13:81:6c:
         4c:81:6c:ef:56:8b:67:f7:81:d9:ce:66:80:70:f7:40:db:5b:
         92:0b:55:8b:0a:e2:7d:a7:a9:cb:6d:5a:ed:4a:55:da:6a:35:
         d6:50:0c:2c:24:97:5f:30:e1:1c:f8:f0:8a:46:fb:e3:7a:a6:
         56:1f:2f:09:dc:c8:df:81:97:52:bd:88:26:11:37:3a:5d:98:
         01:69:15:fc:83:60:e2:a2:80:52:4d:7f:1f:ab:d7:80:77:0a:
         9c:cd:30:94:47:a2:67:aa:ed:a3:a2:83:4f:41:ab:52:02:2d:
         89:23:f2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----