Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa
File:                     323830343a333766303a3a2f33322d3438203d3e20323636343435.roa (raw, json)
Hash identifier:          kZLO2Z0MHzcDSU29BS0/7l8tiICx7bOuGWVY05mCGvo=
Subject key identifier:   44:40:01:F6:48:AD:50:36:BA:36:AA:C6:B1:97:11:BB:AA:4F:5D:F6
Certificate issuer:       /CN=00128F95DB8A5B29D029F4525401E18331575DBD
Certificate serial:       05FD96EE1EC04741525EF53019B784CAEEFFFCFA
Authority key identifier: 00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa
Signing time:             Thu 04 Apr 2024 07:33:59 +0000
ROA not before:           Thu 04 Apr 2024 07:28:59 +0000
ROA not after:            Thu 03 Apr 2025 07:33:59 +0000
asID:                     266445
IP address blocks:        2804:37f0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fd:96:ee:1e:c0:47:41:52:5e:f5:30:19:b7:84:ca:ee:ff:fc:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00128F95DB8A5B29D029F4525401E18331575DBD
        Validity
            Not Before: Apr  4 07:28:59 2024 GMT
            Not After : Apr  3 07:33:59 2025 GMT
        Subject: CN=444001F648AD5036BA36AAC6B19711BBAA4F5DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:4a:6d:c3:f6:ce:f6:d6:6f:f7:96:8d:ed:
                    c3:dc:fa:b4:30:a6:62:67:4f:e1:5c:40:b0:47:43:
                    c7:bf:42:a2:b0:ec:b7:8d:08:62:2a:4a:29:8b:34:
                    cd:d9:ff:86:61:cc:d9:59:9e:7b:bf:6a:71:8d:36:
                    63:3b:0b:ab:87:fd:87:ac:20:72:09:e8:5f:3d:39:
                    0c:6c:54:8e:ac:b1:a8:8a:ce:e7:28:4e:ea:50:c6:
                    ba:c0:b8:bf:aa:51:30:ca:5b:70:82:56:20:9c:b3:
                    b0:c5:8d:13:c0:fe:e0:f8:76:67:f4:0c:a0:6b:bb:
                    44:72:d9:12:c4:51:89:3c:ef:fa:24:27:e0:86:e8:
                    5e:3e:fc:8c:0e:d3:a9:84:0e:10:e0:8d:f0:5d:e1:
                    a2:db:91:13:a1:46:46:e7:27:97:e8:01:90:d3:3a:
                    df:78:06:f0:db:60:61:5d:b0:8d:eb:bc:ad:3f:d6:
                    73:70:25:7a:a2:89:a3:40:9d:8b:26:47:c8:fc:db:
                    b0:42:5f:ae:de:08:b4:2d:c7:41:c3:f5:7e:cd:fc:
                    3b:bd:2a:a4:35:3b:b6:65:01:84:c4:d8:ae:5c:6c:
                    a7:e1:4f:57:13:f4:b8:71:e1:ba:d3:73:23:c0:83:
                    11:e8:5c:91:a4:d1:4a:b9:41:ae:1c:fb:49:2c:01:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:01:F6:48:AD:50:36:BA:36:AA:C6:B1:97:11:BB:AA:4F:5D:F6
            X509v3 Authority Key Identifier:
                keyid:00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:5c:e0:6f:29:50:f5:7f:2c:7e:08:10:1d:ba:da:b1:c1:
         58:b4:2c:bc:7b:c4:ba:34:2e:86:d1:d7:fa:fa:86:4f:2b:b0:
         f3:e9:56:5d:b4:7e:54:b8:f2:7a:3b:27:55:6b:ce:d6:18:de:
         66:ea:e5:a2:d5:1f:84:6c:20:63:7b:d5:f9:39:bd:56:af:a3:
         e4:89:3f:ed:0b:ee:8a:85:44:2d:91:3b:55:1b:f8:2b:e8:42:
         ca:18:83:45:b1:1e:d7:5c:13:6c:0d:03:57:6b:48:5d:f9:2e:
         ab:2b:76:92:df:14:c2:6e:35:2f:6f:28:86:06:e0:25:26:1a:
         cf:0a:67:1a:3b:10:ea:68:bf:ca:a2:89:a2:0b:43:7c:3e:e3:
         5c:c6:ee:73:19:2d:d8:12:a7:e8:bc:de:9b:b8:c4:77:dd:fe:
         04:27:76:5c:25:73:89:b9:f8:7c:5e:4c:75:63:bc:a3:37:6e:
         fc:17:3d:c7:a7:19:c3:f9:97:67:36:84:d0:f8:b1:a9:f3:82:
         66:6a:f0:da:df:71:19:81:07:0e:a5:44:5c:85:4d:e8:0e:e4:
         c3:67:2a:fa:37:30:da:16:16:98:ba:8e:f8:a4:0b:d4:3d:ac:
         75:07:3a:7c:fe:be:fa:44:83:47:bc:d9:c9:4c:03:1a:e1:af:
         a8:ac:87:1b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBf2W7h7AR0FSXvUwGbeEyu7//PowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxMjhGOTVEQjhBNUIyOUQwMjlGNDUyNTQwMUUxODMz
MTU3NURCRDAeFw0yNDA0MDQwNzI4NTlaFw0yNTA0MDMwNzMzNTlaMDMxMTAvBgNV
BAMTKDQ0NDAwMUY2NDhBRDUwMzZCQTM2QUFDNkIxOTcxMUJCQUE0RjVERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlEptw/bO9tZv95aN7cPc+rQw
pmJnT+FcQLBHQ8e/QqKw7LeNCGIqSimLNM3Z/4ZhzNlZnnu/anGNNmM7C6uH/Yes
IHIJ6F89OQxsVI6ssaiKzucoTupQxrrAuL+qUTDKW3CCViCcs7DFjRPA/uD4dmf0
DKBru0Ry2RLEUYk87/okJ+CG6F4+/IwO06mEDhDgjfBd4aLbkROhRkbnJ5foAZDT
Ot94BvDbYGFdsI3rvK0/1nNwJXqiiaNAnYsmR8j827BCX67eCLQtx0HD9X7N/Du9
KqQ1O7ZlAYTE2K5cbKfhT1cT9Lhx4brTcyPAgxHoXJGk0Uq5Qa4c+0ksAc+bAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUREAB9kitUDa6NqrGsZcRu6pPXfYwHwYDVR0j
BBgwFoAUABKPlduKWynQKfRSVAHhgzFXXb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFJRSGFIQXhGQ2FHeHVrVkdGOG5DN1UxeUY3MTZibldGN0ZwRWc2YzFz
VEIvMS8wMDEyOEY5NURCOEE1QjI5RDAyOUY0NTI1NDAxRTE4MzMxNTc1REJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMTI4Rjk1REI4QTVCMjlE
MDI5RjQ1MjU0MDFFMTgzMzE1NzVEQkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRSUUhhSEF4RkNhR3h1a1ZHRjhuQzdVMXlGNzE2Ym5XRjdGcEVnNmMxc1RCLzEv
MzIzODMwMzQzYTMzMzc2NjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzQzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ38DANBgkqhkiG9w0BAQsFAAOCAQEAVmpc4G8p
UPV/LH4IEB262rHBWLQsvHvEujQuhtHX+vqGTyuw8+lWXbR+VLjyejsnVWvO1hje
ZurlotUfhGwgY3vV+Tm9Vq+j5Ik/7QvuioVELZE7VRv4K+hCyhiDRbEe11wTbA0D
V2tIXfkuqyt2kt8Uwm41L28ohgbgJSYazwpnGjsQ6mi/yqKJogtDfD7jXMbucxkt
2BKn6Lzem7jEd93+BCd2XCVzibn4fF5MdWO8ozdu/Bc9x6cZw/mXZzaE0PixqfOC
Zmrw2t9xGYEHDqVEXIVN6A7kw2cq+jcw2hYWmLqO+KQL1D2sdQc6fP6++kSDR7zZ
yUwDGuGvqKyHGw==
-----END CERTIFICATE-----