Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33332d3333203d3e20323638303335.roa (raw, json)
Hash identifier:          8UQDr2Px/EKoE+BL4+f55HYA5G3wT6q3QKP5CHF2xxU=
Subject key identifier:   C5:73:DB:EB:CB:FA:98:FF:26:89:E7:AE:A3:E9:75:53:F1:7E:33:77
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       1F308F0210A0ACC918C4ED2FD03A1BAB0501AD9A
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:32 +0000
ROA not before:           Thu 14 Dec 2023 13:26:32 +0000
ROA not after:            Thu 12 Dec 2024 13:31:32 +0000
asID:                     268035
IP address blocks:        2804:56f8::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:30:8f:02:10:a0:ac:c9:18:c4:ed:2f:d0:3a:1b:ab:05:01:ad:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:32 2023 GMT
            Not After : Dec 12 13:31:32 2024 GMT
        Subject: CN=C573DBEBCBFA98FF2689E7AEA3E97553F17E3377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:42:a7:09:08:cd:81:ca:c3:d5:f3:a8:11:
                    5d:2d:62:4d:a9:5d:ad:6e:04:9c:57:1c:6d:9c:06:
                    28:4e:8a:71:5d:3c:19:1c:d4:e7:46:36:85:df:2a:
                    7e:70:94:a0:15:43:2e:62:54:23:34:4f:9f:50:1d:
                    f4:44:1e:3a:64:a1:81:1d:75:6f:ce:05:96:f9:5a:
                    37:06:be:86:18:1f:a8:31:54:20:52:d6:a5:b3:0a:
                    c9:07:b2:24:82:56:0f:66:d0:6b:52:00:a9:2d:ce:
                    e6:19:8b:0d:26:d5:a1:be:04:85:3e:25:ff:b9:32:
                    ae:6c:54:22:2f:14:b9:47:15:da:ef:73:b8:de:b8:
                    69:11:9c:e9:42:22:a9:63:28:d2:89:7e:11:95:97:
                    2b:6d:da:d4:8b:35:cc:0c:04:e5:0c:3f:2e:36:0c:
                    56:2c:1f:c6:22:64:c4:6e:e5:2b:7c:6f:cc:b9:8f:
                    63:6f:f8:96:5f:85:be:27:bd:27:26:86:2b:0d:24:
                    b6:b2:88:42:8a:9f:1f:3a:da:4d:ea:25:d8:92:71:
                    c9:6a:d2:e9:28:13:d5:c7:85:19:da:9f:b5:5c:16:
                    18:6a:21:3e:05:3f:5f:be:52:1a:5c:4f:64:55:57:
                    63:f4:80:3f:54:82:da:52:32:3c:fd:48:f9:65:28:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:73:DB:EB:CB:FA:98:FF:26:89:E7:AE:A3:E9:75:53:F1:7E:33:77
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:c4:c1:e6:20:01:0d:73:f1:b1:fa:e1:a3:2e:ec:57:b6:7a:
         18:b1:6f:fb:0e:56:1c:75:62:c0:ee:c6:7a:0a:70:f7:56:b9:
         f6:59:ce:31:0f:a6:2c:0a:04:c1:e0:51:94:08:c2:b5:80:6a:
         1b:75:c8:46:06:d1:c1:36:f2:41:a7:23:b5:54:43:8d:fe:99:
         8a:52:25:30:f7:64:73:aa:1d:f0:ec:7f:ef:83:3a:8a:10:18:
         06:fb:71:41:10:1c:39:61:ba:70:69:59:ef:28:a7:57:7b:6b:
         61:d7:51:dd:0c:7a:2a:57:38:19:e3:cc:f6:c4:1c:df:2b:10:
         f8:16:52:15:54:07:ac:55:b6:be:f0:5b:8e:8e:b2:5b:cd:ce:
         63:2f:97:bc:a7:c6:ba:8e:6f:d7:48:04:75:3d:83:d6:31:36:
         15:b8:09:39:1d:ca:7f:de:94:ad:51:f7:f3:99:65:0b:49:80:
         3c:e1:3e:02:0f:a2:07:70:13:a0:77:0f:b8:f6:80:c3:60:61:
         61:c4:fa:80:68:25:ac:b5:16:82:13:80:c6:5a:d7:09:0d:57:
         58:55:33:74:f1:8f:a8:a7:5f:e5:44:af:e4:71:f5:b3:d9:8d:
         fa:09:c3:bf:f6:49:73:dc:c0:fc:98:b6:5c:e9:7a:49:ea:d7:
         71:bb:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----