Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33322d3332203d3e20323633353733.roa
File:                     323830343a6634303a3a2f33322d3332203d3e20323633353733.roa (raw, json)
Hash identifier:          r/lSh+s4i19GMnZTXURW5hPiFSz3HjLYqMs347fhHtk=
Subject key identifier:   35:54:F7:19:B2:90:B7:0D:AC:B8:5E:18:1E:18:97:B5:F8:21:32:BA
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       552677BC061F0D36F7710908F10808958585AEDD
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33322d3332203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:03 +0000
ROA not before:           Wed 12 Jul 2023 14:15:03 +0000
ROA not after:            Wed 10 Jul 2024 14:20:03 +0000
asID:                     263573
IP address blocks:        2804:f40::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:26:77:bc:06:1f:0d:36:f7:71:09:08:f1:08:08:95:85:85:ae:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:03 2023 GMT
            Not After : Jul 10 14:20:03 2024 GMT
        Subject: CN=3554F719B290B70DACB85E181E1897B5F82132BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:c4:92:bc:e2:f9:39:c5:23:11:a6:58:38:
                    fd:ad:62:be:39:fd:6b:d3:10:51:1c:2c:f5:ce:be:
                    77:56:4f:63:7e:98:fd:ae:99:f0:20:d2:ea:6d:2d:
                    9b:5e:c2:bb:84:78:29:39:f0:10:a8:5e:42:b6:90:
                    e0:c8:e6:61:bc:e2:cb:95:7f:94:5e:ba:02:0b:e7:
                    04:67:65:f0:f6:e7:2d:4d:43:b6:b5:9b:2b:5c:39:
                    44:14:6a:c2:67:d1:79:89:3b:0d:3a:f5:4e:42:14:
                    99:51:7c:0c:25:e0:31:8a:f8:48:87:8f:52:ef:46:
                    ae:dd:64:c3:98:34:c8:d5:8b:5f:db:4e:4f:a8:b5:
                    9a:a7:a8:c1:4a:ee:8c:bf:88:f7:82:0b:fb:12:2e:
                    5c:04:7d:3b:ff:ce:5f:50:5f:ea:f6:80:4f:f4:03:
                    4a:5f:05:4b:12:cb:80:b2:dc:73:e1:37:0f:e3:07:
                    a0:e6:1e:67:0c:75:c8:80:ab:d2:14:4d:30:25:3b:
                    c2:1a:65:02:31:60:a6:5d:bf:c5:c6:cd:bb:f0:22:
                    64:b4:4c:b2:fe:f0:06:bc:2a:47:1b:69:fd:d4:d9:
                    a3:3c:6d:64:4d:f4:6f:50:2b:26:8a:c7:e5:85:5c:
                    48:e7:df:83:9e:04:f4:0f:54:5f:ba:71:82:c1:c4:
                    03:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:54:F7:19:B2:90:B7:0D:AC:B8:5E:18:1E:18:97:B5:F8:21:32:BA
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/323830343a6634303a3a2f33322d3332203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:fe:ab:b4:d2:9a:b8:0a:98:dd:91:bd:35:fe:6c:ac:1c:
         9f:a0:61:89:03:d7:ce:e6:d5:3d:98:61:7e:57:be:5d:6c:29:
         8f:27:1a:f7:2c:a7:07:6f:7c:72:1c:d2:36:ac:6d:85:83:ac:
         71:5b:8c:8b:07:1f:f1:7c:89:c6:aa:53:4a:e1:10:19:18:e8:
         29:76:e9:ea:42:8b:82:be:d9:23:ba:38:d5:e7:28:2b:10:21:
         ad:46:ac:a3:b6:3d:24:4a:83:17:44:b8:43:4a:14:52:08:f8:
         b6:9d:f6:92:a1:00:87:7b:6e:ec:84:ba:0f:1e:c2:30:db:f8:
         99:a9:7d:17:ba:0f:0a:5f:4b:ad:60:9e:ff:43:ac:b6:e5:f0:
         0f:35:84:34:9e:1d:8d:4b:98:a5:b2:95:18:ca:26:2f:ed:f6:
         7f:6c:bb:61:58:d5:fb:76:94:8e:bf:3e:7b:5c:15:3b:c0:a4:
         aa:95:6f:b2:21:c1:0a:17:d1:44:b5:b9:78:26:c0:d3:a4:26:
         f7:6f:e4:77:60:17:76:b1:af:c8:46:48:7f:2f:7b:1b:27:c3:
         e7:10:a0:e6:bd:cd:76:2d:bc:99:8f:f3:16:ab:7a:c0:8c:28:
         d3:71:e7:b1:a3:1d:d5:4a:3b:41:15:92:a4:13:e3:08:39:0b:
         24:07:cd:6e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUVSZ3vAYfDTb3cQkI8QgIlYWFrt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ1REQ3MEUyRUY2NDc5ODMwNjZBMTI1MTU1NzMwOEQ3
ODBDREY1RTAeFw0yMzA3MTIxNDE1MDNaFw0yNDA3MTAxNDIwMDNaMDMxMTAvBgNV
BAMTKDM1NTRGNzE5QjI5MEI3MERBQ0I4NUUxODFFMTg5N0I1RjgyMTMyQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7sSSvOL5OcUjEaZYOP2tYr45
/WvTEFEcLPXOvndWT2N+mP2umfAg0uptLZtewruEeCk58BCoXkK2kODI5mG84suV
f5ReugIL5wRnZfD25y1NQ7a1mytcOUQUasJn0XmJOw069U5CFJlRfAwl4DGK+EiH
j1LvRq7dZMOYNMjVi1/bTk+otZqnqMFK7oy/iPeCC/sSLlwEfTv/zl9QX+r2gE/0
A0pfBUsSy4Cy3HPhNw/jB6DmHmcMdciAq9IUTTAlO8IaZQIxYKZdv8XGzbvwImS0
TLL+8Aa8Kkcbaf3U2aM8bWRN9G9QKyaKx+WFXEjn34OeBPQPVF+6cYLBxAPjAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUNVT3GbKQtw2suF4YHhiXtfghMrowHwYDVR0j
BBgwFoAUpF3XDi72R5gwZqElFVcwjXgM314wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Od0p2dEdMeTRaV0dqRlNtNjk3MUhHank1VUQ5Q1JrcTEzRm9QZFhxYTl4
LzAvQTQ1REQ3MEUyRUY2NDc5ODMwNjZBMTI1MTU1NzMwOEQ3ODBDREY1RS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9BNDVERDcwRTJFRjY0Nzk4MzA2
NkExMjUxNTU3MzA4RDc4MENERjVFLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
d0p2dEdMeTRaV0dqRlNtNjk3MUhHank1VUQ5Q1JrcTEzRm9QZFhxYTl4LzAvMzIz
ODMwMzQzYTY2MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1Mzcz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgED0AwDQYJKoZIhvcNAQELBQADggEBAAQO/qu00pq4Cpjd
kb01/mysHJ+gYYkD187m1T2YYX5Xvl1sKY8nGvcspwdvfHIc0jasbYWDrHFbjIsH
H/F8icaqU0rhEBkY6Cl26epCi4K+2SO6ONXnKCsQIa1GrKO2PSRKgxdEuENKFFII
+Lad9pKhAId7buyEug8ewjDb+JmpfRe6DwpfS61gnv9DrLbl8A81hDSeHY1LmKWy
lRjKJi/t9n9su2FY1ft2lI6/PntcFTvApKqVb7IhwQoX0US1uXgmwNOkJvdv5Hdg
F3axr8hGSH8vexsnw+cQoOa9zXYtvJmP8xaresCMKNNx57GjHdVKO0EVkqQT4wg5
CyQHzW4=
-----END CERTIFICATE-----