Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/323830343a363661343a3a2f33322d313238203d3e20323639353733.roa
File:                     323830343a363661343a3a2f33322d313238203d3e20323639353733.roa (raw, json)
Hash identifier:          eMuEcTlj2DBBJ3B3t9Yj/B1JUMqT7B/ME7wc6TXmJFI=
Subject key identifier:   DF:35:EE:88:98:02:13:0A:71:42:50:DE:3F:01:9C:59:FC:69:83:B8
Certificate issuer:       /CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
Certificate serial:       509C7063C177CB08CE0367064F25B2DA7EE190B7
Authority key identifier: 2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/323830343a363661343a3a2f33322d313238203d3e20323639353733.roa
Signing time:             Wed 10 Jul 2024 18:27:28 +0000
ROA not before:           Wed 10 Jul 2024 18:22:28 +0000
ROA not after:            Wed 09 Jul 2025 18:27:28 +0000
asID:                     269573
IP address blocks:        2804:66a4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9c:70:63:c1:77:cb:08:ce:03:67:06:4f:25:b2:da:7e:e1:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
        Validity
            Not Before: Jul 10 18:22:28 2024 GMT
            Not After : Jul  9 18:27:28 2025 GMT
        Subject: CN=DF35EE889802130A714250DE3F019C59FC6983B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:58:80:83:40:45:cd:17:85:16:2b:dd:1a:
                    42:86:fd:99:46:0e:84:55:1d:6a:c4:60:88:c3:ef:
                    59:60:97:18:da:85:b6:07:17:e5:0c:70:ca:a0:f1:
                    82:c8:a9:fb:46:54:55:58:85:ee:6e:3f:2b:ac:3f:
                    2b:8b:b5:7a:fa:6e:5e:c5:6c:da:ce:a9:b4:86:03:
                    29:0e:c7:4a:d2:4e:d9:93:11:19:42:31:69:eb:ad:
                    92:b4:51:e3:9a:68:09:9c:18:5b:9b:f9:e2:51:9f:
                    f0:ce:c7:49:64:f4:a1:1c:42:5d:fd:d6:31:ca:4b:
                    1e:f4:d0:40:27:cf:5c:9f:e9:e1:11:56:f5:d6:05:
                    c2:bd:70:ee:1e:02:57:83:ea:29:b4:3c:88:0d:2e:
                    02:76:e1:b5:cf:ec:bf:1b:29:6a:18:c9:76:11:52:
                    7f:ef:30:89:88:73:a1:2b:b0:ae:ae:06:b7:8f:51:
                    60:66:74:f0:60:47:c6:1b:18:67:b7:4f:22:03:0d:
                    f5:88:49:7c:c6:eb:e7:be:9d:4c:b4:63:dd:0a:66:
                    56:7d:54:b8:df:03:e8:79:26:4f:96:4b:0f:95:7c:
                    ce:74:6d:10:a7:0b:96:b2:84:b9:f5:45:ab:6a:bb:
                    f7:b0:1f:e3:d1:64:01:4f:59:e2:8a:20:c8:96:83:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:EE:88:98:02:13:0A:71:42:50:DE:3F:01:9C:59:FC:69:83:B8
            X509v3 Authority Key Identifier:
                keyid:2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/323830343a363661343a3a2f33322d313238203d3e20323639353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:f4:1b:aa:8d:90:bb:58:62:3c:fd:d8:10:8b:ba:1a:85:
         d4:9d:8c:88:47:b0:57:8f:df:a8:8e:da:db:f0:49:6e:0a:a6:
         90:61:32:17:3d:f9:ce:da:b0:92:c3:c3:73:0e:5e:5c:ea:46:
         a4:b3:e1:ae:09:70:61:53:47:5d:8f:80:5e:8c:49:df:ee:75:
         62:6d:9a:51:ee:08:6c:a4:0c:61:2f:7a:5d:0c:76:38:eb:8a:
         d1:1d:ae:d4:01:d9:2d:36:e1:1b:1e:01:4b:e8:70:8f:c1:a4:
         f1:f7:af:aa:32:61:bb:40:d3:87:0c:db:9d:7e:0d:ec:4e:00:
         57:65:86:76:5e:51:15:93:f9:ba:15:e0:d6:bd:cd:35:43:c6:
         0f:8f:7a:35:d1:15:70:53:15:26:6f:f4:b8:24:10:e0:db:9b:
         3d:87:76:18:99:d5:fb:8c:f0:94:e7:dd:b3:56:7a:fd:d2:20:
         e4:f8:5a:c9:34:87:e9:48:27:1f:fc:e8:a4:d3:b9:55:4d:09:
         a2:5e:78:b5:1c:3b:97:a0:97:2d:d1:b8:15:54:79:88:c8:48:
         a7:b9:ed:a2:52:16:1d:af:02:0d:67:4c:72:9c:28:6e:e4:d1:
         97:02:b2:3b:97:50:0f:16:fc:02:16:d7:1a:a9:cf:ea:5a:cd:
         3b:dd:61:b8
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUJxwY8F3ywjOA2cGTyWy2n7hkLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRCREQzQ0QzOTY2Mzg2ODI0NENGNTRFNjNGQzBCNTM3
RTgyRUE5QjAeFw0yNDA3MTAxODIyMjhaFw0yNTA3MDkxODI3MjhaMDMxMTAvBgNV
BAMTKERGMzVFRTg4OTgwMjEzMEE3MTQyNTBERTNGMDE5QzU5RkM2OTgzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhliAg0BFzReFFivdGkKG/ZlG
DoRVHWrEYIjD71lglxjahbYHF+UMcMqg8YLIqftGVFVYhe5uPyusPyuLtXr6bl7F
bNrOqbSGAykOx0rSTtmTERlCMWnrrZK0UeOaaAmcGFub+eJRn/DOx0lk9KEcQl39
1jHKSx700EAnz1yf6eERVvXWBcK9cO4eAleD6im0PIgNLgJ24bXP7L8bKWoYyXYR
Un/vMImIc6ErsK6uBrePUWBmdPBgR8YbGGe3TyIDDfWISXzG6+e+nUy0Y90KZlZ9
VLjfA+h5Jk+WSw+VfM50bRCnC5ayhLn1Ratqu/ewH+PRZAFPWeKKIMiWg5uDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU3zXuiJgCEwpxQlDePwGcWfxpg7gwHwYDVR0j
BBgwFoAULb3TzTlmOGgkTPVOY/wLU36C6pswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhQd0ZLZTZNY1JkYTltYUpDWm1SS0o2bUttYzEyUng4TUpRTTRWNXVB
OTMvMC8yREJERDNDRDM5NjYzODY4MjQ0Q0Y1NEU2M0ZDMEI1MzdFODJFQTlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEQkREM0NEMzk2NjM4Njgy
NDRDRjU0RTYzRkMwQjUzN0U4MkVBOUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIUHdGS2U2TWNSZGE5bWFKQ1ptUktKNm1LbWMxMlJ4OE1KUU00VjV1QTkzLzAv
MzIzODMwMzQzYTM2MzY2MTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGakMA0GCSqGSIb3DQEBCwUAA4IBAQA1TvQb
qo2Qu1hiPP3YEIu6GoXUnYyIR7BXj9+ojtrb8EluCqaQYTIXPfnO2rCSw8NzDl5c
6kaks+GuCXBhU0ddj4BejEnf7nVibZpR7ghspAxhL3pdDHY464rRHa7UAdktNuEb
HgFL6HCPwaTx96+qMmG7QNOHDNudfg3sTgBXZYZ2XlEVk/m6FeDWvc01Q8YPj3o1
0RVwUxUmb/S4JBDg25s9h3YYmdX7jPCU592zVnr90iDk+FrJNIfpSCcf/Oik07lV
TQmiXni1HDuXoJct0bgVVHmIyEinue2iUhYdrwINZ0xynChu5NGXArI7l1APFvwC
Ftcaqc/qWs073WG4
-----END CERTIFICATE-----