Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653832373a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653832373a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          23TBLCDEuUY+nfEnKUdblzrMlSqmt4OhO8mO/5kQQPg=
Subject key identifier:   FD:87:E2:BD:8B:1C:C9:D1:C0:CE:0C:07:0F:5A:FD:6D:11:9A:C0:17
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       26C5D75906F1AC1D2D61D13416A3CE5EDFD2E253
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653832373a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:54 +0000
ROA not before:           Thu 09 Mar 2023 20:12:54 +0000
ROA not after:            Thu 07 Mar 2024 20:17:54 +0000
asID:                     28260
IP address blocks:        2804:28e4:e827::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:d7:59:06:f1:ac:1d:2d:61:d1:34:16:a3:ce:5e:df:d2:e2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:54 2023 GMT
            Not After : Mar  7 20:17:54 2024 GMT
        Subject: CN=FD87E2BD8B1CC9D1C0CE0C070F5AFD6D119AC017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:bc:47:c5:35:6b:4e:cd:7d:5e:4d:1c:2e:
                    e5:0e:75:7d:03:e0:4c:91:51:58:10:93:49:a6:2b:
                    a2:5f:32:61:db:e8:a7:f6:6f:7c:8d:76:c2:b3:7b:
                    d7:ef:f6:6b:aa:54:1c:38:e2:55:7c:cf:99:5d:34:
                    e3:4d:94:ef:e3:f5:60:7b:02:7a:87:7b:11:8a:4f:
                    97:71:6f:35:96:fc:41:dc:12:a3:36:f3:c8:6e:95:
                    3b:19:0e:6b:fa:59:c8:ad:b6:92:16:85:c8:9f:33:
                    6d:07:7a:8c:b2:cb:9c:72:27:b6:c8:a8:1c:80:e2:
                    5f:33:ef:4e:5d:24:4e:ad:4f:db:5c:76:9b:02:b7:
                    14:f9:f8:d8:f2:42:98:8c:e3:b9:f6:11:8e:26:8c:
                    89:8c:23:a8:ae:c8:65:f2:da:c5:04:61:50:53:ad:
                    91:53:af:df:cb:68:39:ac:3b:0d:e7:c9:9f:77:69:
                    9f:b7:f7:a6:08:b4:b3:07:c4:41:2e:cf:2f:14:a3:
                    11:bc:06:70:a7:c1:d5:51:62:a3:1d:c0:5a:18:0f:
                    e3:51:47:35:ce:66:ac:41:31:14:ba:84:2c:ea:48:
                    f6:19:7d:f0:9e:99:90:78:93:a5:e9:5e:12:5d:bc:
                    ba:61:c7:2a:2b:72:83:2e:bd:21:9f:36:e0:5a:fd:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:87:E2:BD:8B:1C:C9:D1:C0:CE:0C:07:0F:5A:FD:6D:11:9A:C0:17
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653832373a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e827::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:a0:a0:65:4f:68:c2:5c:88:0f:21:81:a6:ff:6f:95:fe:4d:
         00:c5:f9:aa:2c:59:ed:d5:7b:a4:9d:a6:3b:3a:f9:7f:e1:ba:
         75:dc:c1:2c:72:e3:e2:14:02:9d:67:72:0d:6c:0d:9c:14:6c:
         20:a3:78:85:44:d4:09:57:13:17:a9:39:e4:7a:2b:cb:8f:9c:
         11:e7:10:4e:d8:44:bd:67:3d:77:a6:ac:b1:62:ab:ea:46:8f:
         ed:87:66:fd:b3:6e:4e:df:0a:f7:40:6e:52:52:6f:30:ed:da:
         26:22:0e:8d:d7:64:ef:bc:7c:2d:09:7c:6c:1b:02:04:0f:ef:
         8f:7e:4b:c1:1d:d1:f8:72:5e:4d:e3:e0:1b:27:ae:c1:19:ff:
         66:5d:3a:32:b8:ee:d3:75:f4:3c:4d:e9:2e:0f:0e:c4:3f:3f:
         cc:d7:88:c6:03:65:dc:11:aa:39:a7:a7:12:6a:7d:b4:1c:4d:
         87:bd:df:28:a7:5f:28:41:41:4f:a0:b9:08:44:0a:67:fa:bd:
         9e:58:49:36:55:48:9b:9d:14:7b:e3:ef:8c:e0:58:c0:e4:44:
         26:7e:3a:68:d5:68:9f:8d:e0:49:4d:84:5b:10:b0:d2:9b:af:
         cf:93:27:b8:d1:e5:0e:82:14:e6:26:1a:42:16:a9:d5:e9:e5:
         4f:9c:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----