Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/323830343a343838633a3a2f33322d3332203d3e20323637313238.roa
File:                     323830343a343838633a3a2f33322d3332203d3e20323637313238.roa (raw, json)
Hash identifier:          OoBuYO4IGOcbuUt+BGfigEsb15voPbdQBbJPeXOkECU=
Subject key identifier:   89:5A:E2:B8:E2:B2:50:2C:2A:9C:4F:F2:31:1D:DC:47:57:7D:C1:D6
Certificate issuer:       /CN=126B4823621052C06EFA0ACC9992C77256A7C670
Certificate serial:       278B45608166D0D28232FE39A3B267A42B0703E8
Authority key identifier: 12:6B:48:23:62:10:52:C0:6E:FA:0A:CC:99:92:C7:72:56:A7:C6:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126B4823621052C06EFA0ACC9992C77256A7C670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/323830343a343838633a3a2f33322d3332203d3e20323637313238.roa
Signing time:             Tue 23 Apr 2024 22:13:20 +0000
ROA not before:           Tue 23 Apr 2024 22:08:20 +0000
ROA not after:            Tue 22 Apr 2025 22:13:20 +0000
asID:                     267128
IP address blocks:        2804:488c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:45:60:81:66:d0:d2:82:32:fe:39:a3:b2:67:a4:2b:07:03:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126B4823621052C06EFA0ACC9992C77256A7C670
        Validity
            Not Before: Apr 23 22:08:20 2024 GMT
            Not After : Apr 22 22:13:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:7e:cb:34:48:39:cf:c4:44:72:4b:1a:9a:
                    28:28:9e:a5:32:07:b9:0a:14:c1:0f:96:71:bb:f6:
                    0e:c6:44:91:f6:7a:73:34:e1:cb:ab:1c:6b:43:03:
                    b8:78:6f:40:b7:55:d4:43:01:f9:ab:0a:af:68:3c:
                    ad:89:44:9e:05:17:47:da:4b:50:c0:be:12:1f:4b:
                    34:1e:60:4c:31:49:f4:c2:1e:f5:85:e8:a7:4c:a8:
                    c4:53:8b:7b:b4:24:92:2a:e6:32:f8:33:80:f8:9c:
                    f2:21:80:ef:4b:89:60:9a:2c:e3:ac:24:5c:dc:a0:
                    c3:bc:f7:70:46:9d:5c:77:15:e2:84:c9:10:0e:da:
                    b9:e0:14:24:6a:27:df:0f:82:c2:eb:e5:49:7e:7e:
                    75:7c:42:29:5f:40:b3:e1:e9:33:28:c6:be:df:a3:
                    53:0e:74:70:4c:7b:be:e3:f8:89:cc:ae:1f:8f:9e:
                    5a:f9:9d:98:98:d4:98:d3:6e:5e:bb:71:38:eb:fa:
                    58:8e:1f:30:11:d3:ef:76:27:c3:70:42:9c:91:ea:
                    29:a4:b8:ea:b4:72:23:22:a5:54:86:07:52:9f:61:
                    ac:d5:ba:9d:c0:79:2a:bc:ee:b4:c1:37:0e:5c:18:
                    d2:c8:0f:ce:c1:19:00:d8:84:62:e8:05:83:1d:3f:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5A:E2:B8:E2:B2:50:2C:2A:9C:4F:F2:31:1D:DC:47:57:7D:C1:D6
            X509v3 Authority Key Identifier:
                keyid:12:6B:48:23:62:10:52:C0:6E:FA:0A:CC:99:92:C7:72:56:A7:C6:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/126B4823621052C06EFA0ACC9992C77256A7C670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126B4823621052C06EFA0ACC9992C77256A7C670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/323830343a343838633a3a2f33322d3332203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:91:d7:c9:37:44:9c:29:cc:4b:bf:d0:01:8d:2d:fe:33:f5:
         dc:7d:7a:e8:f2:a6:a0:f1:2f:b7:f9:67:d0:10:a9:09:71:02:
         de:b4:a4:66:19:ff:9f:e0:40:8b:52:96:8d:7b:4e:7b:47:d3:
         64:59:f8:3a:40:b4:9d:ed:ac:a1:4c:e7:e0:a4:85:f7:5f:0d:
         23:fa:48:8c:85:b7:78:22:22:ba:fa:e1:7d:c0:ae:6c:db:7f:
         96:db:69:5a:46:a8:d7:ec:6b:5c:e1:43:43:a8:3a:f5:2d:f7:
         b5:08:a6:a8:d4:0c:0e:d7:26:5e:35:1d:16:b0:22:f0:c2:a1:
         4b:82:18:14:bf:3b:15:0b:2a:9b:41:5a:8a:0d:ba:0c:6e:26:
         52:20:82:41:b8:11:1e:cd:d0:6f:41:ce:9b:90:fe:b3:51:f2:
         02:58:7b:da:dc:d8:19:3a:64:fd:09:3b:06:93:26:f8:02:2d:
         b0:4f:6c:b8:44:2a:ee:fc:69:4c:3b:f6:da:00:7a:3b:f9:8c:
         72:7c:18:9f:2e:28:ee:33:bb:70:ae:62:bb:ad:07:76:4d:90:
         f2:a4:e6:9e:9c:3f:ca:d3:79:3b:20:6e:6c:e7:90:99:b4:ae:
         79:c5:b6:76:55:fc:cf:4f:c2:8a:5f:2c:70:d4:bb:c4:7e:61:
         fe:c5:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----