Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3334203d3e20323636303636.roa
File:                     323830343a336130383a3a2f33322d3334203d3e20323636303636.roa (raw, json)
Hash identifier:          F31K0+uoVtwRO8icDmclQWLskbWnmBdZLD8K9YhqXRI=
Subject key identifier:   40:80:4B:C6:72:60:FD:3F:C9:A8:AE:AC:F4:17:22:65:66:D0:EF:ED
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       023B59174F88B727D8CDE38C95310F8445BDA01E
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3334203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:16:58 +0000
ROA not before:           Sat 18 Nov 2023 00:11:58 +0000
ROA not after:            Sat 16 Nov 2024 00:16:58 +0000
asID:                     266066
IP address blocks:        2804:3a08::/32 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3b:59:17:4f:88:b7:27:d8:cd:e3:8c:95:31:0f:84:45:bd:a0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:11:58 2023 GMT
            Not After : Nov 16 00:16:58 2024 GMT
        Subject: CN=40804BC67260FD3FC9A8AEACF417226566D0EFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:65:d4:04:fd:7d:0a:e3:8c:52:77:a2:2f:
                    e2:13:b7:f7:e0:fc:eb:7e:44:dc:8b:a1:55:05:6c:
                    59:71:eb:bc:1b:a4:9b:1b:5f:f0:01:da:ed:90:ee:
                    75:07:0e:08:50:a5:60:41:d4:3e:d8:ff:43:1f:02:
                    b4:1c:99:a7:98:16:29:ab:e8:be:cf:a6:2d:93:7e:
                    33:08:ce:ae:6b:90:42:0b:d9:d8:13:50:a1:6f:8f:
                    af:65:aa:0e:24:53:49:e6:e9:01:d8:28:d6:4a:54:
                    57:d6:0c:e5:81:d6:f4:e4:27:01:3e:01:b9:c1:d3:
                    b4:cd:83:93:97:29:b0:21:18:ac:35:62:df:3c:fc:
                    f7:6e:22:e3:30:00:4e:bf:2b:26:d8:8f:6d:a5:b8:
                    da:2f:c6:4d:84:a3:02:bf:94:3a:bb:d4:b2:a0:17:
                    3a:8c:36:25:36:b8:0e:39:a2:74:b4:1c:0b:f0:a4:
                    19:ab:52:9d:1b:74:c5:16:fd:04:65:3d:14:29:5b:
                    1f:55:fd:39:73:ad:a8:dc:a2:cc:7d:ec:d2:09:02:
                    7f:19:b7:b8:6c:2b:e3:3b:6c:86:d1:6e:a4:ed:c0:
                    0c:97:19:dc:e6:bd:f4:92:7a:ef:4f:95:52:f0:a1:
                    70:26:37:b6:ef:db:05:66:73:08:37:4f:9c:99:9f:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:80:4B:C6:72:60:FD:3F:C9:A8:AE:AC:F4:17:22:65:66:D0:EF:ED
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/323830343a336130383a3a2f33322d3334203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:6c:17:e7:e3:99:84:62:c7:14:00:b5:c7:5a:a4:2d:aa:
         ba:47:93:be:6e:95:cb:29:b3:99:ce:56:89:b6:9f:a9:79:78:
         8c:ce:06:3d:f7:f4:5d:79:a8:a9:cf:5c:0d:02:fe:e6:11:c9:
         8f:7d:bc:92:c5:c8:d5:81:7b:17:43:14:00:48:b4:51:55:8f:
         89:95:49:38:ab:63:a3:10:4f:65:24:23:6c:eb:09:34:bf:a1:
         f9:d7:37:ea:4d:4d:e7:04:63:db:63:b1:55:46:e8:6f:95:1c:
         19:9e:98:e2:23:37:13:d6:df:74:57:13:12:08:19:f9:29:38:
         63:bc:28:16:83:b7:ce:bc:f5:16:43:a8:10:35:61:58:ac:0d:
         b3:f8:76:43:18:46:a8:53:fc:1d:75:80:d8:19:8c:62:86:93:
         30:79:1d:fa:f9:cc:00:d0:c8:b4:ea:4a:af:f4:cf:62:99:d1:
         97:ff:ac:1a:20:88:90:37:b5:59:54:cc:3e:e5:fb:6a:4e:6a:
         07:a5:48:24:6f:c7:da:a2:bd:61:a9:05:4c:c4:a3:f1:74:41:
         d8:a2:65:d5:97:b1:b3:d7:58:71:48:7b:43:17:5b:1f:6f:66:
         8d:e7:6b:cf:86:5a:71:c3:8d:cb:1a:dd:04:38:63:7a:34:dc:
         d8:22:22:6c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAjtZF0+ItyfYzeOMlTEPhEW9oB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3NkQ4NjQzRERBQzA0RTlERjQxMDdEQzI3MTA2MjQ5
Nzg4QUY4RjAeFw0yMzExMTgwMDExNThaFw0yNDExMTYwMDE2NThaMDMxMTAvBgNV
BAMTKDQwODA0QkM2NzI2MEZEM0ZDOUE4QUVBQ0Y0MTcyMjY1NjZEMEVGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjMGXUBP19CuOMUneiL+ITt/fg
/Ot+RNyLoVUFbFlx67wbpJsbX/AB2u2Q7nUHDghQpWBB1D7Y/0MfArQcmaeYFimr
6L7Ppi2TfjMIzq5rkEIL2dgTUKFvj69lqg4kU0nm6QHYKNZKVFfWDOWB1vTkJwE+
AbnB07TNg5OXKbAhGKw1Yt88/PduIuMwAE6/KybYj22luNovxk2EowK/lDq71LKg
FzqMNiU2uA45onS0HAvwpBmrUp0bdMUW/QRlPRQpWx9V/Tlzrajcosx97NIJAn8Z
t7hsK+M7bIbRbqTtwAyXGdzmvfSSeu9PlVLwoXAmN7bv2wVmcwg3T5yZnzRRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQIBLxnJg/T/JqK6s9BciZWbQ7+0wHwYDVR0j
BBgwFoAU2XbYZD3awE6d9BB9wnEGJJeIr48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC9EOTc2RDg2NDNEREFDMDRFOURGNDEwN0RDMjcxMDYyNDk3ODhBRjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5NzZEODY0M0REQUMwNEU5
REY0MTA3REMyNzEwNjI0OTc4OEFGOEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv
MzIzODMwMzQzYTMzNjEzMDM4M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM2
MzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ6CDANBgkqhkiG9w0BAQsFAAOCAQEAbLxsF+fj
mYRixxQAtcdapC2qukeTvm6Vyymzmc5WibafqXl4jM4GPff0XXmoqc9cDQL+5hHJ
j328ksXI1YF7F0MUAEi0UVWPiZVJOKtjoxBPZSQjbOsJNL+h+dc36k1N5wRj22Ox
VUbob5UcGZ6Y4iM3E9bfdFcTEggZ+Sk4Y7woFoO3zrz1FkOoEDVhWKwNs/h2QxhG
qFP8HXWA2BmMYoaTMHkd+vnMANDItOpKr/TPYpnRl/+sGiCIkDe1WVTMPuX7ak5q
B6VIJG/H2qK9YakFTMSj8XRB2KJl1Zexs9dYcUh7QxdbH29mjedrz4ZaccONyxrd
BDhjejTc2CIibA==
-----END CERTIFICATE-----