Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a383030303a3a2f33332d3333203d3e20323633353733.roa
File:                     323830343a6634303a383030303a3a2f33332d3333203d3e20323633353733.roa (raw, json)
Hash identifier:          Yc3urL9Q/VGymhOxFlQS9KeMp0M1BTkoKta48BcxCfs=
Subject key identifier:   EC:7F:16:BB:FF:89:9A:0D:3A:D1:BE:82:32:89:66:9F:47:40:5F:C9
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       13CBC79DE75691A59138AD1AF66FDCFEE1F96943
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a383030303a3a2f33332d3333203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:15 +0000
ROA not before:           Wed 12 Jul 2023 14:15:15 +0000
ROA not after:            Wed 10 Jul 2024 14:20:15 +0000
asID:                     263573
IP address blocks:        2804:f40:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cb:c7:9d:e7:56:91:a5:91:38:ad:1a:f6:6f:dc:fe:e1:f9:69:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:15 2023 GMT
            Not After : Jul 10 14:20:15 2024 GMT
        Subject: CN=EC7F16BBFF899A0D3AD1BE823289669F47405FC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:8a:cc:b5:9a:dc:d3:cf:65:d8:02:e5:e1:
                    ab:c4:06:15:c5:4a:0f:c7:a2:5f:1d:70:62:7f:ed:
                    cb:7b:e5:d5:24:82:c5:b0:29:47:8b:9b:32:1d:fb:
                    48:7d:e5:eb:9c:11:0e:35:d4:bd:2c:76:07:e6:a5:
                    e2:f6:4f:00:10:63:91:f3:f3:51:39:a5:7f:4b:73:
                    63:af:14:24:0b:5c:9b:1d:89:ef:3d:22:04:b8:bd:
                    6e:4c:c9:f9:d7:16:34:0c:8a:86:bb:6e:46:97:c6:
                    dc:f0:18:5b:b0:a0:71:82:2e:f2:78:a4:56:2c:78:
                    0e:f6:bc:a3:84:5a:ea:9d:3d:99:da:6a:af:67:c7:
                    e7:af:35:9c:16:df:65:36:8a:ca:36:52:e9:0b:a4:
                    fc:54:53:8a:58:cf:2f:76:d0:0c:90:20:66:77:3a:
                    63:e4:f1:2d:9f:7b:20:dd:e6:5a:91:fb:3c:43:03:
                    f2:fc:bd:9f:9b:d6:64:b1:40:93:22:9c:2a:56:a7:
                    06:2c:1a:aa:ae:0c:40:dc:9b:d3:47:d2:03:15:b5:
                    b8:bb:41:a0:46:32:3b:2b:cc:62:d5:97:82:c6:ab:
                    f0:80:f8:58:07:3c:07:78:11:cb:38:23:fd:81:9f:
                    05:b3:1a:17:05:b8:92:85:f1:6b:7d:0b:b3:8e:b8:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7F:16:BB:FF:89:9A:0D:3A:D1:BE:82:32:89:66:9F:47:40:5F:C9
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a383030303a3a2f33332d3333203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         03:66:d5:58:99:c8:62:63:c3:b9:2c:df:1d:ce:48:c0:49:e2:
         28:72:1e:4b:5d:0a:db:fc:3d:b3:64:8f:2c:ba:53:29:62:ec:
         8a:91:50:82:de:b5:85:86:62:0d:a7:a2:b9:1f:b9:22:0a:df:
         12:25:e7:e0:1e:70:45:88:02:4f:d3:c1:0d:42:ad:58:9b:84:
         cc:8b:7c:aa:3b:28:e7:47:37:f7:24:fc:a0:d8:dd:5c:e5:62:
         d5:40:62:7c:9e:0f:43:15:2f:06:d7:b7:54:e0:c0:93:47:26:
         09:c4:7a:87:b7:f6:16:db:50:52:59:c3:f0:29:28:f7:f8:c9:
         57:ac:7c:fe:83:f0:cb:d1:be:51:e4:ca:8f:9e:f6:b5:bd:27:
         6b:ed:98:1e:c2:18:92:a5:bd:6f:c0:bb:21:bb:d1:f7:d9:3c:
         d1:89:7b:bd:4d:0b:8d:3b:3a:56:06:cf:02:80:a1:07:95:e3:
         30:5e:9e:ee:4a:e7:23:35:c5:9a:55:0e:7f:b7:f1:d3:5f:d7:
         64:34:e2:9b:05:c9:12:91:f6:3d:08:df:68:49:3c:2a:fc:2a:
         77:f5:8b:4a:8f:94:05:96:ef:6f:4b:bb:b3:24:5a:23:79:b7:
         37:b2:68:ec:64:cb:d5:ae:6f:a5:2d:4b:68:1d:17:12:ae:18:
         96:05:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----