Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a3a2f33322d3337203d3e20323730333035.roa
File:                     323830343a366130303a3a2f33322d3337203d3e20323730333035.roa (raw, json)
Hash identifier:          zm0qzxlnIxKaiKH6JbEIZ0AcnZ1Wr2w0Yt+KfwqXSV8=
Subject key identifier:   AC:27:20:B1:B2:69:15:2A:B9:18:70:99:EB:91:E7:A5:64:97:F1:41
Certificate issuer:       /CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Certificate serial:       45685D711761D84D71229ECEA5332945E7B45354
Authority key identifier: 78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a3a2f33322d3337203d3e20323730333035.roa
Signing time:             Mon 29 Apr 2024 18:04:05 +0000
ROA not before:           Mon 29 Apr 2024 17:59:05 +0000
ROA not after:            Mon 28 Apr 2025 18:04:05 +0000
asID:                     270305
IP address blocks:        2804:6a00::/32 maxlen: 37

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:68:5d:71:17:61:d8:4d:71:22:9e:ce:a5:33:29:45:e7:b4:53:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
        Validity
            Not Before: Apr 29 17:59:05 2024 GMT
            Not After : Apr 28 18:04:05 2025 GMT
        Subject: CN=AC2720B1B269152AB9187099EB91E7A56497F141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:30:1c:f0:9a:db:12:83:4c:04:af:13:98:
                    96:fc:a2:cb:f6:6a:d2:fe:72:d3:fd:36:1a:8c:70:
                    04:21:d1:f8:e2:77:66:cf:70:46:3c:f9:14:cd:42:
                    e3:48:46:eb:5d:16:ac:1a:25:a3:65:0f:76:4e:11:
                    14:8c:f7:f8:a3:84:0b:33:93:c5:22:f1:6b:78:d3:
                    ac:d6:5f:da:2f:b4:1b:d8:3d:b4:78:3e:5c:09:e3:
                    df:e6:83:ca:10:05:ce:47:b7:35:36:4c:55:6f:cc:
                    42:7c:42:42:47:c4:a0:4c:07:67:8d:ed:2a:22:27:
                    77:c7:d0:05:28:83:9d:42:a4:0b:62:bb:81:7b:ec:
                    15:a7:d4:b2:38:d2:99:26:b2:4c:e4:81:6f:81:9d:
                    0c:eb:2b:7f:b8:55:46:5e:1e:9f:d4:f4:6f:51:da:
                    01:68:63:a0:f5:5e:c6:4d:d1:f8:b7:d9:f7:ea:1d:
                    68:90:bb:b1:0f:06:fd:73:04:5d:0e:6d:dc:17:c0:
                    94:ab:a6:8f:99:f5:a0:bc:9d:00:9a:5e:50:42:cd:
                    9d:dc:aa:eb:8f:f3:db:51:3e:f5:8c:ae:f7:4a:1d:
                    0e:4f:20:92:a0:08:73:0b:3c:c1:a4:77:69:f5:00:
                    e5:45:f9:d3:e1:e5:6c:31:cd:4c:4c:84:63:08:c4:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:27:20:B1:B2:69:15:2A:B9:18:70:99:EB:91:E7:A5:64:97:F1:41
            X509v3 Authority Key Identifier:
                keyid:78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/323830343a366130303a3a2f33322d3337203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:06:06:49:43:1d:90:a0:81:65:dc:87:ff:9d:5a:26:99:e9:
         7d:34:83:8f:85:66:47:f7:99:cd:44:20:66:15:5a:db:76:67:
         1c:5a:cc:b7:b9:af:86:5c:26:c3:35:35:fc:1d:ee:d8:3f:4f:
         31:f8:b6:58:9c:56:eb:3c:e8:2e:c5:0b:51:e2:7a:28:e5:23:
         f5:7b:07:91:70:50:4a:7f:ea:24:c8:40:7d:c2:81:10:99:11:
         7f:b8:9d:74:62:8b:2a:93:c5:04:12:42:2c:86:4b:c0:69:6c:
         98:b2:ea:bf:54:67:36:63:b2:f8:20:c2:3a:6d:0c:b2:00:00:
         55:8e:56:04:50:45:dd:48:03:3f:ff:b4:9f:6d:68:c8:b0:2d:
         f7:69:4e:e9:f6:97:76:64:b7:33:76:be:b1:8c:e6:cc:0f:57:
         43:7e:75:02:d0:e1:f9:f3:ab:89:72:27:e7:71:9f:db:0e:46:
         e5:e2:96:99:32:6c:d5:28:1d:cb:19:89:39:56:57:b5:36:4a:
         8c:e4:5c:e5:08:c3:2e:8f:d2:30:97:f6:4d:b1:66:e7:f9:1d:
         73:9f:36:5c:14:d1:b0:79:30:67:79:52:4d:b1:c3:f3:8c:83:
         c2:2a:87:0b:49:a3:81:5d:71:dc:6b:af:50:c4:32:eb:88:9b:
         c7:81:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----