Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/323830343a356137303a3a2f33322d3438203d3e20323638373733.roa
File:                     323830343a356137303a3a2f33322d3438203d3e20323638373733.roa (raw, json)
Hash identifier:          FfIKBYVsFftOPP/5VTaT9dVtQaadGZk5mblBBbCA6Xs=
Subject key identifier:   A2:A6:12:A6:C6:2E:6D:AE:3B:F6:F1:3C:82:7E:EB:67:7B:97:04:4E
Certificate issuer:       /CN=D0B13C6622CD8C38C4C203AF59CBA82004FA4191
Certificate serial:       4719C22E4D4A40C00ABD46830E495AD68DBC91E2
Authority key identifier: D0:B1:3C:66:22:CD:8C:38:C4:C2:03:AF:59:CB:A8:20:04:FA:41:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/323830343a356137303a3a2f33322d3438203d3e20323638373733.roa
Signing time:             Tue 02 Jul 2024 19:06:08 +0000
ROA not before:           Tue 02 Jul 2024 19:01:08 +0000
ROA not after:            Wed 02 Jul 2025 19:06:08 +0000
asID:                     268773
IP address blocks:        2804:5a70::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:19:c2:2e:4d:4a:40:c0:0a:bd:46:83:0e:49:5a:d6:8d:bc:91:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B13C6622CD8C38C4C203AF59CBA82004FA4191
        Validity
            Not Before: Jul  2 19:01:08 2024 GMT
            Not After : Jul  2 19:06:08 2025 GMT
        Subject: CN=3082010A0282010100C2B8ECDA175B35D18ABDEF6EE0B44F79848E0BA6787E3F575C0C3C117487F93F8395F43FF601C05BDFB6D74161866F7C5D31834D8178228DA3320D0522A1BF817645E968EE415174B5C934BAE06E58CCCF30930F0DDA447F66966CFC54777E788C8F4A0E63C4D177D6EF1656A598588E90B71CF505FF5FB96CC6B75C2ED649740545169A7A7384291704461B2ABAFD07EC92899807149C5732E2F6C0108DB562F28AF75F521A6A177E94CD672AA6543CA291D387E4E0416347B5D98EA09635BE37116E202A1ADA8B9CB32BCC3E7B2A529173FB076901DD622FF073BA5EA6A0A6AD17F9590BCA6490B0D0855D8E29E90A375F9AFBE0CB8004A2AF5AAF1758D0990203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:ec:da:17:5b:35:d1:8a:bd:ef:6e:e0:b4:
                    4f:79:84:8e:0b:a6:78:7e:3f:57:5c:0c:3c:11:74:
                    87:f9:3f:83:95:f4:3f:f6:01:c0:5b:df:b6:d7:41:
                    61:86:6f:7c:5d:31:83:4d:81:78:22:8d:a3:32:0d:
                    05:22:a1:bf:81:76:45:e9:68:ee:41:51:74:b5:c9:
                    34:ba:e0:6e:58:cc:cf:30:93:0f:0d:da:44:7f:66:
                    96:6c:fc:54:77:7e:78:8c:8f:4a:0e:63:c4:d1:77:
                    d6:ef:16:56:a5:98:58:8e:90:b7:1c:f5:05:ff:5f:
                    b9:6c:c6:b7:5c:2e:d6:49:74:05:45:16:9a:7a:73:
                    84:29:17:04:46:1b:2a:ba:fd:07:ec:92:89:98:07:
                    14:9c:57:32:e2:f6:c0:10:8d:b5:62:f2:8a:f7:5f:
                    52:1a:6a:17:7e:94:cd:67:2a:a6:54:3c:a2:91:d3:
                    87:e4:e0:41:63:47:b5:d9:8e:a0:96:35:be:37:11:
                    6e:20:2a:1a:da:8b:9c:b3:2b:cc:3e:7b:2a:52:91:
                    73:fb:07:69:01:dd:62:2f:f0:73:ba:5e:a6:a0:a6:
                    ad:17:f9:59:0b:ca:64:90:b0:d0:85:5d:8e:29:e9:
                    0a:37:5f:9a:fb:e0:cb:80:04:a2:af:5a:af:17:58:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A6:12:A6:C6:2E:6D:AE:3B:F6:F1:3C:82:7E:EB:67:7B:97:04:4E
            X509v3 Authority Key Identifier:
                keyid:D0:B1:3C:66:22:CD:8C:38:C4:C2:03:AF:59:CB:A8:20:04:FA:41:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0B13C6622CD8C38C4C203AF59CBA82004FA4191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/0/323830343a356137303a3a2f33322d3438203d3e20323638373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a70::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:92:3b:34:ea:d0:43:54:81:e1:3c:fc:5e:8c:ec:88:f8:7e:
         1c:bb:cf:a5:65:fc:2b:8a:67:70:02:95:92:a2:d8:dc:ba:20:
         bc:1e:e1:e1:97:4d:03:77:48:c3:7f:4d:9e:fd:0f:90:59:5f:
         25:e3:28:85:d3:0e:4d:49:58:52:65:dc:84:f3:a8:16:73:39:
         64:43:e5:da:9f:ee:87:10:a0:a8:16:bf:2c:79:e0:d7:8d:c4:
         a7:ec:2d:87:ea:30:52:77:4a:8c:b9:9d:c6:f5:cd:03:40:a0:
         13:3e:e4:bf:3c:86:41:a7:7a:1d:1a:79:86:13:4b:ec:16:47:
         c8:58:ae:b1:36:aa:a6:90:79:9d:f3:28:ba:4d:37:5e:5a:cd:
         3f:40:7d:80:ce:c7:42:a7:6f:bf:b8:40:cb:8a:ab:8e:bb:9b:
         d3:f8:73:67:f3:54:22:78:f3:3b:14:b4:1a:07:2b:54:16:7a:
         29:dd:cf:ba:b8:f6:6e:60:61:b6:6e:c5:aa:b4:f9:d6:c4:b8:
         ee:d0:91:37:89:cf:96:41:01:86:eb:49:24:cc:0c:58:12:70:
         00:59:7e:44:78:71:34:2f:07:2d:6d:8f:f6:1c:82:88:3c:2d:
         c3:02:01:5a:8c:9d:db:06:cb:90:ed:3a:36:64:d7:1c:75:ac:
         c7:ec:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----