Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa
File:                     323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa (raw, json)
Hash identifier:          Zgo/3QSwEpWh59M05rHvpWPickDKdvOFLaaSrpXF0q8=
Subject key identifier:   A7:0B:CB:86:60:41:B6:50:6D:FA:CA:88:CA:67:78:93:DC:39:69:CB
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       6B281F0C9EB745D2C3685FFE0970660C5C23BCE6
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:43 +0000
ROA not before:           Tue 06 Feb 2024 18:17:43 +0000
ROA not after:            Tue 04 Feb 2025 18:22:43 +0000
asID:                     61726
IP address blocks:        2804:1b68:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:28:1f:0c:9e:b7:45:d2:c3:68:5f:fe:09:70:66:0c:5c:23:bc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:43 2024 GMT
            Not After : Feb  4 18:22:43 2025 GMT
        Subject: CN=A70BCB866041B6506DFACA88CA677893DC3969CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:e7:ee:eb:ce:68:a3:d1:4d:2b:08:b5:75:
                    0f:64:bc:12:a3:c3:54:90:54:50:e9:3a:9b:a5:d7:
                    45:93:35:52:b4:a8:39:bb:7d:c3:9a:e6:21:38:73:
                    02:ea:a0:8e:09:31:5d:04:7d:2b:c3:55:79:14:7e:
                    3d:d6:5d:4c:5d:78:26:49:7b:0f:47:9b:8e:95:30:
                    b8:e3:fe:1d:a2:85:a5:86:07:91:0a:31:06:c8:59:
                    f7:97:87:e5:9e:a7:15:c6:fd:4e:1b:17:16:48:9f:
                    26:87:62:30:14:af:36:14:5e:63:ab:c3:f1:eb:1c:
                    0a:b6:4e:73:59:01:2a:da:66:7e:cf:b5:92:2d:c9:
                    2a:d1:d3:9a:39:6c:c5:0e:e4:51:12:75:7b:df:6a:
                    07:49:79:9f:25:e2:82:71:68:8f:f5:a3:50:3e:dd:
                    9c:5b:a1:89:08:5c:69:57:fa:7a:d5:fb:0a:fc:f7:
                    f2:03:8f:35:db:3b:46:49:07:f5:62:b9:de:69:e3:
                    e7:14:45:3c:60:93:b2:05:bb:6c:2d:2d:17:e1:c2:
                    ad:f3:53:78:24:82:24:2d:8e:8a:6c:68:2b:4d:77:
                    2f:03:2f:76:9d:c6:58:aa:b7:94:8a:58:c1:78:90:
                    ff:46:6c:6f:cc:4e:bf:56:9f:e9:59:f5:41:0b:28:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0B:CB:86:60:41:B6:50:6D:FA:CA:88:CA:67:78:93:DC:39:69:CB
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a343030303a3a2f33342d3334203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:4d:9b:aa:2b:2b:25:d3:c1:09:00:0e:4e:08:e3:63:e5:
         8c:9e:40:8b:68:ed:ad:cc:83:14:2b:30:2b:7a:b9:25:09:54:
         61:a4:40:61:f8:4c:9a:f0:8b:50:63:7d:2c:1b:9b:e0:29:04:
         f3:61:bb:82:da:06:d5:29:47:6a:f5:92:3e:3d:96:67:67:1c:
         bc:5f:db:fd:22:d1:e6:08:f3:51:f3:45:04:eb:0a:b7:c9:b0:
         d8:dc:27:d6:22:b5:10:17:a2:a8:87:57:94:d2:68:0c:49:49:
         d8:59:74:6e:2c:2f:77:bb:60:a9:25:c2:9e:dd:d1:0b:4c:c3:
         b7:c1:32:54:b1:36:5a:47:67:05:36:4f:10:98:0c:98:3b:0e:
         c6:e0:31:e9:7b:73:a4:fa:e1:f3:16:12:35:5b:69:0f:95:2c:
         47:42:89:8c:34:11:14:9a:3a:d0:59:49:44:ed:a0:ef:69:75:
         15:52:70:7a:1d:b6:a9:eb:c2:f9:2f:e1:18:2e:10:b2:f6:ff:
         29:76:bb:92:58:4e:ef:80:2a:f2:27:64:96:83:1a:2d:10:c9:
         10:16:c9:55:ce:09:50:dd:e2:50:19:7b:a8:0f:dd:84:47:cc:
         6d:8e:0c:7e:f5:6a:cd:05:02:36:1f:a7:8d:bc:ee:f5:2b:c2:
         7c:39:57:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaygfDJ63RdLDaF/+CXBmDFwjvOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQwQURERTczRjkyOEU0M0I4NEUxMTdFMEY3NTkxRjI0
N0QxODlCRDAeFw0yNDAyMDYxODE3NDNaFw0yNTAyMDQxODIyNDNaMDMxMTAvBgNV
BAMTKEE3MEJDQjg2NjA0MUI2NTA2REZBQ0E4OENBNjc3ODkzREMzOTY5Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcYOfu685oo9FNKwi1dQ9kvBKj
w1SQVFDpOpul10WTNVK0qDm7fcOa5iE4cwLqoI4JMV0EfSvDVXkUfj3WXUxdeCZJ
ew9Hm46VMLjj/h2ihaWGB5EKMQbIWfeXh+WepxXG/U4bFxZInyaHYjAUrzYUXmOr
w/HrHAq2TnNZASraZn7PtZItySrR05o5bMUO5FESdXvfagdJeZ8l4oJxaI/1o1A+
3ZxboYkIXGlX+nrV+wr89/IDjzXbO0ZJB/Viud5p4+cURTxgk7IFu2wtLRfhwq3z
U3gkgiQtjopsaCtNdy8DL3adxliqt5SKWMF4kP9GbG/MTr9Wn+lZ9UELKAK7AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUpwvLhmBBtlBt+sqIymd4k9w5acswHwYDVR0j
BBgwFoAU3Qrd5z+SjkO4ThF+D3WR8kfRib0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp
NWgvMC9ERDBBRERFNzNGOTI4RTQzQjg0RTExN0UwRjc1OTFGMjQ3RDE4OUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0REMEFEREU3M0Y5MjhFNDNC
ODRFMTE3RTBGNzU5MUYyNDdEMTg5QkQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhod0JZMnB3VUVVenAyYVp1TENXaDVDUFdDcThyNFhmWWUzNDl2Z1kxaTVoLzAv
MzIzODMwMzQzYTMxNjIzNjM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBtoQDANBgkqhkiG9w0BAQsFAAOC
AQEANR9Nm6orKyXTwQkADk4I42PljJ5Ai2jtrcyDFCswK3q5JQlUYaRAYfhMmvCL
UGN9LBub4CkE82G7gtoG1SlHavWSPj2WZ2ccvF/b/SLR5gjzUfNFBOsKt8mw2Nwn
1iK1EBeiqIdXlNJoDElJ2Fl0biwvd7tgqSXCnt3RC0zDt8EyVLE2WkdnBTZPEJgM
mDsOxuAx6XtzpPrh8xYSNVtpD5UsR0KJjDQRFJo60FlJRO2g72l1FVJweh22qevC
+S/hGC4Qsvb/KXa7klhO74Aq8idkloMaLRDJEBbJVc4JUN3iUBl7qA/dhEfMbY4M
fvVqzQUCNh+njbzu9SvCfDlXNg==
-----END CERTIFICATE-----