Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa
File:                     323830343a386166383a3a2f33332d3333203d3e20323733373034.roa (raw, json)
Hash identifier:          Z7Z+LdYeJUPIf7HwVQylww59KcJ2By96mv1Yhu6FeOo=
Subject key identifier:   A1:9C:30:2C:B7:86:77:1C:18:7B:FB:70:6E:EF:B3:22:FF:DE:C5:72
Certificate issuer:       /CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
Certificate serial:       07A970F1B6688DDBD7BFD6FD1762C9F919E19294
Authority key identifier: 6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa
Signing time:             Thu 04 Apr 2024 13:30:49 +0000
ROA not before:           Thu 04 Apr 2024 13:25:49 +0000
ROA not after:            Thu 03 Apr 2025 13:30:49 +0000
asID:                     273704
IP address blocks:        2804:8af8::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a9:70:f1:b6:68:8d:db:d7:bf:d6:fd:17:62:c9:f9:19:e1:92:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D810586866FD89F6CB1074CF17A1EAFD0196B17
        Validity
            Not Before: Apr  4 13:25:49 2024 GMT
            Not After : Apr  3 13:30:49 2025 GMT
        Subject: CN=A19C302CB786771C187BFB706EEFB322FFDEC572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:32:12:b8:cc:d0:e5:3c:96:79:88:e5:a1:
                    f2:ba:54:f1:c5:4c:c9:48:71:b8:93:28:6f:ba:f0:
                    35:f4:30:b8:f0:43:29:b7:4f:20:25:86:06:a1:be:
                    25:e0:ea:8b:c5:28:43:40:d4:46:e7:c4:97:43:20:
                    87:06:b0:ec:30:3c:7c:ea:a0:fb:1f:40:8e:fb:20:
                    a1:99:ab:81:9a:c8:80:ae:6a:5b:7e:d8:e3:d7:1a:
                    9f:20:c8:3e:b8:cb:72:74:85:dd:8a:a5:17:17:1e:
                    30:2c:7f:7e:3a:4d:14:84:28:a5:de:90:04:31:ae:
                    8c:42:bb:60:e4:ff:d7:16:30:96:a9:d2:26:f3:12:
                    97:c0:2f:f1:12:f2:72:54:9a:48:5c:58:67:9e:6c:
                    9f:60:3a:ca:6b:1e:6e:a9:10:d5:cc:72:a9:1c:ad:
                    4f:95:90:69:aa:f6:90:5f:cf:b8:3d:29:e0:d1:f4:
                    63:23:15:06:16:47:15:6d:2c:18:08:40:0e:7e:c1:
                    61:d5:ac:7d:fb:16:f0:0e:38:41:2f:40:67:38:68:
                    66:9a:ef:99:d9:2a:18:84:74:9f:c6:97:0c:87:af:
                    7c:5a:28:8d:d1:7e:71:60:4a:0e:d7:79:c9:1c:62:
                    f4:72:d6:42:23:ca:b9:17:40:b4:fa:b6:26:63:e5:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:30:2C:B7:86:77:1C:18:7B:FB:70:6E:EF:B3:22:FF:DE:C5:72
            X509v3 Authority Key Identifier:
                keyid:6D:81:05:86:86:6F:D8:9F:6C:B1:07:4C:F1:7A:1E:AF:D0:19:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D810586866FD89F6CB1074CF17A1EAFD0196B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/1/323830343a386166383a3a2f33332d3333203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:7a:86:47:6f:dd:ee:40:f9:8f:1e:34:50:96:d0:77:95:
         06:03:49:2a:94:51:ab:2b:00:dc:19:6d:44:6f:83:3c:49:cc:
         5b:77:19:cd:fe:75:9c:a6:b8:0f:af:d6:9f:1b:bf:34:ae:6b:
         a7:a5:8d:bc:dd:99:e2:fb:2b:55:86:14:93:5f:d6:aa:6c:3b:
         5c:6b:69:36:11:67:e9:e1:a6:7f:b8:8d:a8:86:33:44:60:de:
         be:75:22:3e:3d:57:d7:8a:75:f5:a0:b1:0f:d2:92:f0:57:69:
         54:6d:4e:b5:e2:32:08:4f:4a:bb:e1:75:b1:1b:32:5e:56:ef:
         8b:af:c1:69:b7:f0:7c:4b:85:6e:5e:9b:1e:4c:53:3b:7f:df:
         15:41:60:c6:55:e3:e1:06:da:e4:cf:1a:ff:08:12:06:33:ac:
         9c:71:67:7f:4a:42:6d:e8:20:bb:e1:9f:ab:8e:c7:47:41:ce:
         e8:82:58:7b:15:d1:2e:f7:e6:b1:95:6c:51:82:79:17:82:16:
         80:b9:b4:f5:59:14:a2:1a:b6:ee:2b:88:3f:ed:c6:19:9f:25:
         b4:18:c4:cf:10:2c:bc:51:62:ce:12:e3:9c:e2:49:57:3e:1b:
         5b:65:5a:48:d2:3c:1e:a8:0c:dc:09:d2:64:43:10:a6:f2:53:
         67:29:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----