Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33322d3332203d3e20323638303335.roa (raw, json)
Hash identifier:          kKyMmiP2BAWbGR2q/119tFJX9AVbNJfVeVt1kiTJIQU=
Subject key identifier:   AE:9F:6C:58:BD:C2:48:84:16:58:48:9C:AE:A4:FB:62:E9:E6:6B:65
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       75B1BE9DB323917AE8E5E6FFF1E3585BE0CFA335
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:31 +0000
ROA not before:           Thu 14 Dec 2023 13:26:31 +0000
ROA not after:            Thu 12 Dec 2024 13:31:31 +0000
asID:                     268035
IP address blocks:        2804:56f8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b1:be:9d:b3:23:91:7a:e8:e5:e6:ff:f1:e3:58:5b:e0:cf:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:31 2023 GMT
            Not After : Dec 12 13:31:31 2024 GMT
        Subject: CN=AE9F6C58BDC248841658489CAEA4FB62E9E66B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:77:ac:02:89:d4:7d:3c:fb:6d:75:65:07:
                    83:f6:eb:cd:de:7c:77:74:72:41:fa:2c:5e:2e:b6:
                    57:90:a0:97:13:7f:d2:1b:a5:d6:3a:3a:c0:5b:e7:
                    ff:60:c4:bd:a0:a0:2c:f9:e3:fa:ad:77:cd:41:08:
                    e7:f3:87:bf:67:4a:c4:e7:31:d6:ce:03:44:f5:7b:
                    2b:68:7b:cf:1b:78:36:64:22:8c:74:b4:f1:59:8f:
                    7d:e0:44:5e:c7:f6:e6:04:b7:99:e4:41:56:7c:30:
                    cd:24:b9:a7:f6:1b:6a:b4:d4:bd:bf:d8:82:ee:cf:
                    a0:4e:dd:7c:19:8a:db:e9:88:d5:50:aa:c8:5b:c5:
                    3b:c5:51:84:f7:74:6d:f1:f5:2f:6b:4d:d0:6e:94:
                    ca:e8:32:e3:33:66:69:1f:6b:eb:0d:c4:06:e2:ea:
                    76:9f:c1:2e:0c:57:95:06:26:55:53:e4:32:07:7b:
                    63:4f:eb:42:a6:01:8b:f3:c6:df:29:9d:6f:21:7c:
                    33:ea:03:87:52:c6:ab:07:a2:4b:d4:45:af:1a:2e:
                    7d:d1:ce:01:aa:73:7c:a4:4f:37:af:e6:ba:1c:18:
                    92:6a:c5:81:d8:90:2d:b8:ba:63:12:b9:2b:d9:7b:
                    b9:58:56:59:38:b6:46:65:0c:19:4c:27:7a:47:30:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:6C:58:BD:C2:48:84:16:58:48:9C:AE:A4:FB:62:E9:E6:6B:65
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33322d3332203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:bb:1c:20:a1:2d:f3:08:0d:0d:53:4e:81:96:2f:64:92:6e:
         f0:f0:fa:b9:9d:b2:da:44:c3:bc:60:0d:cc:9d:75:40:46:5b:
         2b:c2:08:5d:37:3b:db:2d:35:34:ca:c0:19:5b:23:af:29:b2:
         8b:91:11:55:65:b0:bb:ea:5a:da:54:81:bb:41:3f:31:c2:d1:
         41:98:c1:42:b2:d1:5a:f7:0d:26:f0:1a:36:d5:de:e1:1e:9d:
         af:d9:59:04:7e:6f:b7:e1:92:5b:dc:a2:ff:92:c0:b7:22:dd:
         85:7e:d9:bf:a3:ee:9d:86:3a:80:e8:61:ff:c2:4a:94:bb:b0:
         ec:1c:a8:b9:30:28:b3:20:01:5c:38:87:14:29:a4:aa:60:a0:
         bf:48:1e:1e:0b:44:f8:7e:1b:37:67:4d:e9:da:08:60:5d:5f:
         ea:9e:7e:12:50:a0:5e:98:da:33:5f:2b:a3:19:55:e4:95:a1:
         05:1b:fd:9b:bd:2b:42:2d:55:56:24:23:ab:5c:8d:d8:a5:eb:
         65:c7:32:2d:3c:34:2a:19:7a:e7:f2:b8:a3:d7:e1:43:a4:b8:
         f6:66:97:5d:e4:8c:29:37:39:08:3e:5b:0c:e7:61:f6:10:85:
         39:2f:4a:4b:c7:7c:cf:15:a7:c6:01:c8:96:df:eb:de:02:0e:
         2c:ac:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----