Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3332203d3e20323732363932.roa
File:                     323830343a383732633a3a2f33322d3332203d3e20323732363932.roa (raw, json)
Hash identifier:          9NbKddbevP+PaLmzNOfACvYGKnf+AJl5Hir0JtX7So8=
Subject key identifier:   E4:A7:89:FB:85:3D:A6:2D:02:37:5A:06:72:AD:FD:BE:6E:3E:67:A0
Certificate issuer:       /CN=4F7CCCE2E8D5357A6F0169832CB5F0005A40F95A
Certificate serial:       7D6BB01ABDB77F0CE787E553C945266444FAF2BC
Authority key identifier: 4F:7C:CC:E2:E8:D5:35:7A:6F:01:69:83:2C:B5:F0:00:5A:40:F9:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7CCCE2E8D5357A6F0169832CB5F0005A40F95A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3332203d3e20323732363932.roa
Signing time:             Thu 20 Jul 2023 15:04:00 +0000
ROA not before:           Thu 20 Jul 2023 14:59:00 +0000
ROA not after:            Thu 18 Jul 2024 15:04:00 +0000
asID:                     272692
IP address blocks:        2804:872c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6b:b0:1a:bd:b7:7f:0c:e7:87:e5:53:c9:45:26:64:44:fa:f2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7CCCE2E8D5357A6F0169832CB5F0005A40F95A
        Validity
            Not Before: Jul 20 14:59:00 2023 GMT
            Not After : Jul 18 15:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:11:4e:05:95:9b:9a:fc:50:1f:1a:8e:fa:
                    f3:1c:75:94:96:f3:ab:c7:1f:dd:04:9e:73:eb:ce:
                    6f:00:07:55:76:dc:02:d3:f6:13:83:8c:d1:27:01:
                    af:73:e5:ab:04:28:40:d4:74:a6:99:32:05:c7:c3:
                    37:d6:67:80:c7:9d:ed:d8:c1:c7:63:47:e1:99:f9:
                    fc:29:d9:f1:1d:c7:67:1d:82:a6:ed:c0:53:08:25:
                    6f:fe:5b:fd:5f:3f:53:b7:7a:ad:c2:10:6d:67:47:
                    ec:4e:5e:e1:e8:65:ce:df:b7:38:40:16:6f:84:72:
                    f9:61:fb:28:79:e3:56:7f:9f:59:17:50:17:68:5c:
                    2b:e2:ef:dc:c4:12:39:b2:4a:ea:c4:2c:32:b9:e2:
                    1d:a7:eb:ea:d9:71:30:71:f8:7b:8c:11:2a:f0:df:
                    46:5b:42:82:b5:4b:9a:6d:c7:c9:98:af:f6:b6:49:
                    95:0e:d2:47:48:15:3b:a9:2a:99:f8:8a:07:6e:33:
                    f1:62:04:11:e6:8e:d3:7c:08:56:5f:74:f4:76:fc:
                    27:72:fe:e5:ae:89:3f:f2:9c:8f:b8:e4:21:a3:b3:
                    cf:1b:2a:a0:a3:ac:ae:6f:f8:0f:0f:5c:28:75:72:
                    64:25:d8:fe:a3:d7:87:b1:72:e1:f8:c6:bf:ed:f4:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:89:FB:85:3D:A6:2D:02:37:5A:06:72:AD:FD:BE:6E:3E:67:A0
            X509v3 Authority Key Identifier:
                keyid:4F:7C:CC:E2:E8:D5:35:7A:6F:01:69:83:2C:B5:F0:00:5A:40:F9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/4F7CCCE2E8D5357A6F0169832CB5F0005A40F95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F7CCCE2E8D5357A6F0169832CB5F0005A40F95A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7KJUPuzHFHfjpkmf2G1MigoZ8F7jaC33Gd2KaXwDKLQ/0/323830343a383732633a3a2f33322d3332203d3e20323732363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:872c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:2e:21:3a:d6:27:65:6f:e1:97:b0:28:01:ff:2c:7d:a0:
         ad:24:90:4d:05:f2:ae:81:00:35:3a:d2:86:21:6e:98:9f:76:
         f4:b5:2b:fe:67:62:f8:e4:7e:29:df:dc:fa:07:b1:93:23:07:
         9b:df:b9:34:40:59:f5:8b:3d:a8:2c:b5:bf:d8:3c:3d:0e:eb:
         79:6e:5a:b7:82:98:4e:e5:02:2d:6f:2a:b6:43:04:05:fc:32:
         65:cc:53:5d:55:06:67:1c:31:1d:44:93:e1:27:1c:bf:ca:51:
         26:a8:70:be:26:2e:bd:b0:58:15:84:62:a1:15:1d:bf:27:20:
         77:0e:c5:8c:8d:6b:42:f0:88:b4:6c:28:84:d6:07:df:83:96:
         21:70:22:df:26:ff:6d:43:f9:6a:23:25:d8:f9:c9:1c:a0:41:
         93:72:e8:2f:0e:80:21:a8:91:00:78:eb:80:a0:08:34:dd:8f:
         87:43:34:0a:e8:fe:a1:01:6e:80:e2:e8:10:0c:19:06:3e:39:
         33:72:bd:b6:54:3f:8a:eb:e7:8c:fa:55:b7:97:06:52:2d:05:
         c6:01:9e:c0:5c:25:bd:fb:96:46:15:70:80:3c:d2:00:6a:1a:
         f6:6b:ca:11:a9:73:2a:cd:e7:29:b7:72:fc:a1:3a:85:98:bc:
         bd:3b:6f:9c
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUfWuwGr23fwznh+VTyUUmZET68rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY3Q0NDRTJFOEQ1MzU3QTZGMDE2OTgzMkNCNUYwMDA1
QTQwRjk1QTAeFw0yMzA3MjAxNDU5MDBaFw0yNDA3MTgxNTA0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg3NTExNEUwNTk1OUI5QUZD
NTAxRjFBOEVGQUYzMUM3NTk0OTZGM0FCQzcxRkREMDQ5RTczRUJDRTZGMDAwNzU1
NzZEQzAyRDNGNjEzODM4Q0QxMjcwMUFGNzNFNUFCMDQyODQwRDQ3NEE2OTkzMjA1
QzdDMzM3RDY2NzgwQzc5REVERDhDMUM3NjM0N0UxOTlGOUZDMjlEOUYxMURDNzY3
MUQ4MkE2RURDMDUzMDgyNTZGRkU1QkZENUYzRjUzQjc3QUFEQzIxMDZENjc0N0VD
NEU1RUUxRTg2NUNFREZCNzM4NDAxNjZGODQ3MkY5NjFGQjI4NzlFMzU2N0Y5RjU5
MTc1MDE3Njg1QzJCRTJFRkRDQzQxMjM5QjI0QUVBQzQyQzMyQjlFMjFEQTdFQkVB
RDk3MTMwNzFGODdCOEMxMTJBRjBERjQ2NUI0MjgyQjU0QjlBNkRDN0M5OThBRkY2
QjY0OTk1MEVEMjQ3NDgxNTNCQTkyQTk5Rjg4QTA3NkUzM0YxNjIwNDExRTY4RUQz
N0MwODU2NUY3NEY0NzZGQzI3NzJGRUU1QUU4OTNGRjI5QzhGQjhFNDIxQTNCM0NG
MUIyQUEwQTNBQ0FFNkZGODBGMEY1QzI4NzU3MjY0MjVEOEZFQTNENzg3QjE3MkUx
RjhDNkJGRURGNDQxODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqHURTgWVm5r8UB8ajvrzHHWUlvOrxx/dBJ5z685vAAdVdtwC0/YT
g4zRJwGvc+WrBChA1HSmmTIFx8M31meAx53t2MHHY0fhmfn8KdnxHcdnHYKm7cBT
CCVv/lv9Xz9Tt3qtwhBtZ0fsTl7h6GXO37c4QBZvhHL5YfsoeeNWf59ZF1AXaFwr
4u/cxBI5skrqxCwyueIdp+vq2XEwcfh7jBEq8N9GW0KCtUuabcfJmK/2tkmVDtJH
SBU7qSqZ+IoHbjPxYgQR5o7TfAhWX3T0dvwncv7lrok/8pyPuOQho7PPGyqgo6yu
b/gPD1wodXJkJdj+o9eHsXLh+Ma/7fRBgQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FOSnifuFPaYtAjdaBnKt/b5uPmegMB8GA1UdIwQYMBaAFE98zOLo1TV6bwFpgyy1
8ABaQPlaMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y3S0pVUHV6SEZIZmpw
a21mMkcxTWlnb1o4RjdqYUMzM0dkMkthWHdES0xRLzAvNEY3Q0NDRTJFOEQ1MzU3
QTZGMDE2OTgzMkNCNUYwMDA1QTQwRjk1QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80RjdDQ0NFMkU4RDUzNTdBNkYwMTY5ODMyQ0I1RjAwMDVBNDBG
OTVBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GN0tKVVB1ekhGSGZqcGttZjJH
MU1pZ29aOEY3amFDMzNHZDJLYVh3REtMUS8wLzMyMzgzMDM0M2EzODM3MzI2MzNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzczMjM2MzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
hywwDQYJKoZIhvcNAQELBQADggEBAFj0LiE61idlb+GXsCgB/yx9oK0kkE0F8q6B
ADU60oYhbpifdvS1K/5nYvjkfinf3PoHsZMjB5vfuTRAWfWLPagstb/YPD0O63lu
WreCmE7lAi1vKrZDBAX8MmXMU11VBmccMR1Ek+EnHL/KUSaocL4mLr2wWBWEYqEV
Hb8nIHcOxYyNa0LwiLRsKITWB9+DliFwIt8m/21D+WojJdj5yRygQZNy6C8OgCGo
kQB464CgCDTdj4dDNAro/qEBboDi6BAMGQY+OTNyvbZUP4rr54z6VbeXBlItBcYB
nsBcJb37lkYVcIA80gBqGvZryhGpcyrN5ym3cvyhOoWYvL07b5w=
-----END CERTIFICATE-----