Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa
File:                     323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa (raw, json)
Hash identifier:          MfFbWNGzn6SN0POIW9ZhxKF1N1edqLn+rCaqcVAvBWw=
Subject key identifier:   DE:84:EB:FA:6A:21:38:DE:6F:CF:0B:67:7D:01:72:13:38:B0:D2:D9
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       061E2C4DF2CA7C9F3199A431960049FB1412B66F
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa
Signing time:             Thu 06 Jun 2024 12:49:34 +0000
ROA not before:           Thu 06 Jun 2024 12:44:34 +0000
ROA not after:            Thu 05 Jun 2025 12:49:34 +0000
asID:                     269457
IP address blocks:        2804:64e8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1e:2c:4d:f2:ca:7c:9f:31:99:a4:31:96:00:49:fb:14:12:b6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun  6 12:44:34 2024 GMT
            Not After : Jun  5 12:49:34 2025 GMT
        Subject: CN=DE84EBFA6A2138DE6FCF0B677D01721338B0D2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dc:e8:f7:99:8c:59:a1:74:fe:5c:2c:86:1d:
                    ce:f5:78:c3:77:96:47:fe:7e:b5:53:ee:19:06:82:
                    0b:4d:6e:05:20:27:e5:50:c6:c3:88:46:98:66:f1:
                    e2:e7:13:4d:72:64:30:d0:51:99:98:52:b8:77:59:
                    05:8e:19:f6:a3:a0:cb:f2:b7:4b:02:fa:b8:b8:cd:
                    ef:34:38:2e:01:7c:b1:0f:de:54:43:37:23:34:fb:
                    80:5f:3b:56:79:dd:8d:f4:c8:fb:23:5f:f0:13:7c:
                    d0:ca:ed:73:69:14:80:ed:39:be:cf:a7:09:99:42:
                    18:3f:0c:fd:f8:bc:5d:3e:e3:83:69:14:0d:61:69:
                    b3:90:0a:fe:53:5b:41:e4:d5:6d:a7:f8:61:72:a3:
                    3d:15:3c:6c:7b:d2:85:5b:fd:74:0f:4b:ab:d8:13:
                    56:06:40:e8:1f:b9:fc:37:7d:85:b7:22:5f:82:d5:
                    c8:4c:35:65:c3:0b:22:aa:d3:d2:e6:c0:1f:90:39:
                    6c:af:54:f9:c9:04:6d:d8:ec:bd:7f:05:80:10:bf:
                    95:59:38:9f:d7:d4:e1:b8:2e:cd:ba:77:e1:a1:6f:
                    7d:e1:b3:2b:8e:57:e9:f6:aa:4c:59:ca:11:70:a4:
                    e2:42:f6:9e:2f:8f:c0:1d:ee:b9:47:d7:fc:d5:10:
                    66:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:84:EB:FA:6A:21:38:DE:6F:CF:0B:67:7D:01:72:13:38:B0:D2:D9
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:5e:12:e3:65:04:85:b0:42:51:35:c0:ce:32:58:c0:35:
         76:a5:82:98:a3:93:85:75:74:c6:08:3c:13:18:76:42:52:2b:
         c3:94:2a:cd:2f:1d:cf:1d:1a:e0:7d:be:fd:c0:6f:29:56:58:
         e4:a4:b3:2f:26:a2:5c:8e:cc:d9:07:31:57:d9:1f:32:a2:c1:
         37:1c:ed:ce:8b:67:94:03:ce:87:a7:32:db:2c:4a:c4:a4:fe:
         c2:4d:c6:7e:c6:f2:6e:61:51:15:4e:43:ae:97:ea:37:87:b6:
         10:ec:85:b2:86:de:33:7f:9d:77:db:6e:e5:aa:26:c9:9a:06:
         aa:38:b4:44:91:2c:34:8b:71:34:ce:76:2f:77:d6:cd:27:1b:
         39:bc:db:c9:0a:a7:c2:2d:ca:0e:3e:16:bc:ae:a7:b2:8a:f2:
         cb:6d:1c:ea:3d:7d:3b:5a:95:d4:c1:f2:57:df:33:7c:2c:21:
         4a:1a:95:22:64:95:4f:69:9b:33:eb:17:93:f1:c5:fd:1b:8d:
         48:1a:10:6b:1b:22:cc:59:40:4f:1c:ff:f0:ea:41:47:ec:a5:
         f7:4c:36:42:35:1f:5f:82:ee:ed:51:61:1d:68:8d:bb:df:98:
         b8:81:e8:d8:89:f4:c3:74:68:64:35:ce:85:e7:ff:dc:ec:2a:
         7e:c3:be:0f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBh4sTfLKfJ8xmaQxlgBJ+xQStm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM2MUI3ODY2MkM0RjQ5OTRBNjA5MzFEMTZCNTM4M0Uz
QUI0RTMxOTAeFw0yNDA2MDYxMjQ0MzRaFw0yNTA2MDUxMjQ5MzRaMDMxMTAvBgNV
BAMTKERFODRFQkZBNkEyMTM4REU2RkNGMEI2NzdEMDE3MjEzMzhCMEQyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp3Oj3mYxZoXT+XCyGHc71eMN3
lkf+frVT7hkGggtNbgUgJ+VQxsOIRphm8eLnE01yZDDQUZmYUrh3WQWOGfajoMvy
t0sC+ri4ze80OC4BfLEP3lRDNyM0+4BfO1Z53Y30yPsjX/ATfNDK7XNpFIDtOb7P
pwmZQhg/DP34vF0+44NpFA1habOQCv5TW0Hk1W2n+GFyoz0VPGx70oVb/XQPS6vY
E1YGQOgfufw3fYW3Il+C1chMNWXDCyKq09LmwB+QOWyvVPnJBG3Y7L1/BYAQv5VZ
OJ/X1OG4Ls26d+Ghb33hsyuOV+n2qkxZyhFwpOJC9p4vj8Ad7rlH1/zVEGaPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU3oTr+mohON5vzwtnfQFyEziw0tkwHwYDVR0j
BBgwFoAUM2G3hmLE9JlKYJMdFrU4Pjq04xkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dl
V0MvMS8zMzYxQjc4NjYyQzRGNDk5NEE2MDkzMUQxNkI1MzgzRTNBQjRFMzE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNjFCNzg2NjJDNEY0OTk0
QTYwOTMxRDE2QjUzODNFM0FCNEUzMTkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkYTlHM2lyVDNYOVVRM2MyWjRZUXVDdG1MVXpOcTdTc1BUdWRkNldnZVdDLzEv
MzIzODMwMzQzYTM2MzQ2NTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEZOiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAAel4S42UEhbBCUTXAzjJYwDV2pYKYo5OFdXTGCDwTGHZCUivDlCrNLx3P
HRrgfb79wG8pVljkpLMvJqJcjszZBzFX2R8yosE3HO3Oi2eUA86HpzLbLErEpP7C
TcZ+xvJuYVEVTkOul+o3h7YQ7IWyht4zf513227lqibJmgaqOLREkSw0i3E0znYv
d9bNJxs5vNvJCqfCLcoOPha8rqeyivLLbRzqPX07WpXUwfJX3zN8LCFKGpUiZJVP
aZsz6xeT8cX9G41IGhBrGyLMWUBPHP/w6kFH7KX3TDZCNR9fgu7tUWEdaI2735i4
gejYifTDdGhkNc6F5//c7Cp+w74P
-----END CERTIFICATE-----