Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33382d313238203d3e20323637323831.roa
File:                     323830343a346231303a3a2f33382d313238203d3e20323637323831.roa (raw, json)
Hash identifier:          ifzEoWlv2gadOHGQ18A1MAaVz11clX2zdiyiwZXThno=
Subject key identifier:   87:91:0E:69:23:45:90:49:51:3F:A5:9C:31:91:85:B2:A5:2E:10:61
Certificate issuer:       /CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
Certificate serial:       0149ADBD3169CA171B28443A29ACB56FEBE562A5
Authority key identifier: E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33382d313238203d3e20323637323831.roa
Signing time:             Fri 24 May 2024 19:37:09 +0000
ROA not before:           Fri 24 May 2024 19:32:09 +0000
ROA not after:            Fri 23 May 2025 19:37:09 +0000
asID:                     267281
IP address blocks:        2804:4b10::/38 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:49:ad:bd:31:69:ca:17:1b:28:44:3a:29:ac:b5:6f:eb:e5:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
        Validity
            Not Before: May 24 19:32:09 2024 GMT
            Not After : May 23 19:37:09 2025 GMT
        Subject: CN=87910E6923459049513FA59C319185B2A52E1061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:ea:00:cf:55:02:32:3f:ae:3c:fa:f4:b7:
                    3b:c0:30:ab:8f:d8:f2:fa:88:5b:ad:3c:42:dc:a7:
                    60:a1:6a:ce:ea:18:90:41:0d:53:45:3e:67:21:06:
                    37:dd:6b:79:40:42:6d:d2:a7:39:9c:84:a6:86:07:
                    ff:0b:71:d2:61:e3:ca:2b:cf:16:1b:ac:c7:69:9c:
                    10:ea:51:ab:0f:4d:2a:b3:f0:ae:73:e2:68:1e:d4:
                    77:ca:73:77:c0:2f:77:0c:14:65:68:12:7d:ea:04:
                    f5:3e:ec:09:1c:0d:52:4f:34:b3:e9:da:33:ea:3f:
                    1e:46:a6:56:44:11:ac:14:6d:b4:6e:2f:d5:71:d5:
                    d8:63:d7:bc:2e:7f:e6:8b:17:14:9e:58:33:f0:76:
                    9e:1d:81:77:c0:4e:21:0b:ee:48:87:a3:b2:bd:23:
                    ed:15:8f:cd:3f:bc:f9:de:78:ee:b4:3d:bd:91:e5:
                    1f:52:bd:22:57:75:f9:44:6a:91:3b:94:d2:25:bf:
                    25:a6:ec:cc:d7:8f:73:27:6f:3d:00:fb:92:1c:cd:
                    96:a8:55:f0:72:7f:a3:f0:c0:32:ac:39:21:e2:aa:
                    b2:0a:fa:20:c9:f8:4b:1c:50:5f:26:d3:db:54:af:
                    c4:af:02:87:12:87:40:94:95:63:1b:d8:15:94:0c:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:0E:69:23:45:90:49:51:3F:A5:9C:31:91:85:B2:A5:2E:10:61
            X509v3 Authority Key Identifier:
                keyid:E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33382d313238203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         34:98:fd:7e:b1:f0:93:a9:f7:3b:97:62:ae:7f:07:82:60:ac:
         10:d8:6b:64:0f:d7:a3:41:4e:94:be:25:42:2d:86:53:d6:c6:
         f2:8a:76:6e:54:a8:78:41:a0:6f:62:c9:f9:02:f9:f8:0d:0d:
         2a:b3:af:c0:12:2d:ed:b4:0f:09:b2:92:23:cb:f6:6b:92:37:
         b9:d3:12:c4:92:fb:3b:72:da:36:3b:3d:9f:8e:cc:04:10:00:
         ea:e6:91:b4:8b:e4:b1:8b:2b:21:06:a9:95:0d:b4:73:19:e5:
         e8:93:f9:47:8d:1b:86:ab:9d:bc:36:f7:a1:d4:9d:2f:c7:7f:
         f6:09:aa:2b:c7:8e:18:ab:eb:4e:c2:38:00:5e:70:70:8d:4b:
         a8:64:22:74:e4:f6:83:c7:79:10:c2:89:e4:f8:14:74:6c:c8:
         a4:ae:9d:c6:2b:04:6e:ab:c8:5f:8d:b3:a2:85:e1:91:fb:2f:
         aa:53:b5:0f:e3:7e:4a:f8:0a:0c:ba:76:6d:75:51:38:52:30:
         37:af:49:40:56:1d:4b:26:85:5e:15:b0:b8:0d:11:5c:fa:ca:
         4f:f3:8c:db:53:b8:89:c0:58:89:51:1e:4c:e8:8d:24:cb:c2:
         c8:b6:55:6d:95:3f:21:b1:4a:df:8e:fe:3d:25:20:6a:a3:11:
         41:d3:6e:42
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAUmtvTFpyhcbKEQ6Kay1b+vlYqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRThCM0FCNTE0OTg0QkZCNzQ5ODFEMTQxNkZCNTIzNThB
NUE3OTZCRTAeFw0yNDA1MjQxOTMyMDlaFw0yNTA1MjMxOTM3MDlaMDMxMTAvBgNV
BAMTKDg3OTEwRTY5MjM0NTkwNDk1MTNGQTU5QzMxOTE4NUIyQTUyRTEwNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BeoAz1UCMj+uPPr0tzvAMKuP
2PL6iFutPELcp2Chas7qGJBBDVNFPmchBjfda3lAQm3SpzmchKaGB/8LcdJh48or
zxYbrMdpnBDqUasPTSqz8K5z4mge1HfKc3fAL3cMFGVoEn3qBPU+7AkcDVJPNLPp
2jPqPx5GplZEEawUbbRuL9Vx1dhj17wuf+aLFxSeWDPwdp4dgXfATiEL7kiHo7K9
I+0Vj80/vPneeO60Pb2R5R9SvSJXdflEapE7lNIlvyWm7MzXj3Mnbz0A+5IczZao
VfByf6PwwDKsOSHiqrIK+iDJ+EscUF8m09tUr8SvAocSh0CUlWMb2BWUDFRrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUh5EOaSNFkElRP6WcMZGFsqUuEGEwHwYDVR0j
BBgwFoAU6LOrUUmEv7dJgdFBb7UjWKWnlr4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ZuZHh2NUs3TUR1R3lZS3NyRUJWa0xram9nNkx0a1VxV255NFlVTWY0
WnYvMC9FOEIzQUI1MTQ5ODRCRkI3NDk4MUQxNDE2RkI1MjM1OEE1QTc5NkJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4QjNBQjUxNDk4NEJGQjc0
OTgxRDE0MTZGQjUyMzU4QTVBNzk2QkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2bmR4djVLN01EdUd5WUtzckVCVmtMa2pvZzZMdGtVcVdueTRZVU1mNFp2LzAv
MzIzODMwMzQzYTM0NjIzMTMwM2EzYTJmMzMzODJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgIoBEsQADANBgkqhkiG9w0BAQsFAAOCAQEANJj9
frHwk6n3O5dirn8HgmCsENhrZA/Xo0FOlL4lQi2GU9bG8op2blSoeEGgb2LJ+QL5
+A0NKrOvwBIt7bQPCbKSI8v2a5I3udMSxJL7O3LaNjs9n47MBBAA6uaRtIvksYsr
IQaplQ20cxnl6JP5R40bhqudvDb3odSdL8d/9gmqK8eOGKvrTsI4AF5wcI1LqGQi
dOT2g8d5EMKJ5PgUdGzIpK6dxisEbqvIX42zooXhkfsvqlO1D+N+SvgKDLp2bXVR
OFIwN69JQFYdSyaFXhWwuA0RXPrKT/OM21O4icBYiVEeTOiNJMvCyLZVbZU/IbFK
347+PSUgaqMRQdNuQg==
-----END CERTIFICATE-----