Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d3332203d3e20323639313437.roa
File:                     323830343a363032303a3a2f33322d3332203d3e20323639313437.roa (raw, json)
Hash identifier:          5Z79cspFmLWcg9opANdQohZJiUm5pEUbeWHPmuL6sIo=
Subject key identifier:   33:F2:43:17:2A:05:C6:9E:1C:B2:B6:FB:59:87:C6:80:BC:2F:45:C0
Certificate issuer:       /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
Certificate serial:       76FFFB42539E8119E155C999BDA49677B32FFE02
Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d3332203d3e20323639313437.roa
Signing time:             Fri 03 May 2024 19:01:55 +0000
ROA not before:           Fri 03 May 2024 18:56:55 +0000
ROA not after:            Fri 02 May 2025 19:01:55 +0000
asID:                     269147
IP address blocks:        2804:6020::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ff:fb:42:53:9e:81:19:e1:55:c9:99:bd:a4:96:77:b3:2f:fe:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
        Validity
            Not Before: May  3 18:56:55 2024 GMT
            Not After : May  2 19:01:55 2025 GMT
        Subject: CN=33F243172A05C69E1CB2B6FB5987C680BC2F45C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:fd:e6:cc:97:6e:f5:b5:6f:68:46:1d:fe:
                    33:44:3d:6b:69:20:52:f6:fa:40:94:b7:6e:c2:3e:
                    0c:68:33:b1:39:30:03:38:5f:d3:b4:6d:76:8e:64:
                    d4:48:a1:15:04:72:4c:74:5e:c1:8a:e7:65:e9:75:
                    c2:28:a5:82:01:dc:97:bf:73:bf:ed:0e:3d:29:3d:
                    8b:e4:ed:5c:7a:cf:07:36:8d:d0:02:4c:21:82:4a:
                    9a:0b:4c:a7:c8:2b:29:dd:5b:70:c1:1c:e3:bf:f0:
                    00:e1:a4:9f:54:57:0b:17:74:2a:13:78:7e:4c:2d:
                    4d:a5:e8:85:06:0a:1c:79:c0:fc:a0:13:28:2f:31:
                    f5:e9:e9:7a:2b:80:c8:54:83:b2:e7:53:64:44:d0:
                    41:c4:2b:f3:03:26:85:c8:53:37:1f:79:d2:67:c9:
                    09:79:36:fa:f1:e6:0e:a0:7b:5c:40:85:6a:94:59:
                    21:01:3f:da:25:e0:dd:66:f6:72:ca:72:63:46:81:
                    8f:0c:e8:ff:eb:7c:48:d0:f0:08:b6:a6:ee:42:8a:
                    07:a2:b5:3c:54:8a:c7:10:ab:87:7c:7b:45:f7:43:
                    99:96:fc:d7:47:c9:74:e8:ed:e1:8f:67:6b:5f:88:
                    1b:10:c7:a7:7b:d4:18:6b:f4:8e:88:14:cf:86:a4:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:43:17:2A:05:C6:9E:1C:B2:B6:FB:59:87:C6:80:BC:2F:45:C0
            X509v3 Authority Key Identifier:
                keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d3332203d3e20323639313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:8e:c8:e0:3d:1c:97:30:15:19:bd:06:ed:60:43:ee:84:
         9c:c4:e1:85:39:45:c0:a0:d5:cf:34:df:cb:e6:ae:8c:c6:57:
         00:5e:a9:04:b9:ec:58:03:3d:5e:2f:ed:91:f6:de:4a:fa:3a:
         00:d9:24:8f:a1:8f:3a:5a:c8:b5:92:14:68:b7:e7:5b:55:a6:
         f3:37:7b:78:23:85:35:83:19:9f:51:0e:10:31:40:25:aa:4c:
         83:bf:23:20:97:a3:ab:2d:8d:d7:8f:05:30:09:0d:19:11:14:
         e9:71:29:e0:3f:8f:57:67:d3:11:c9:8f:64:40:ba:43:5a:3e:
         52:57:d5:b7:5f:8b:47:b5:63:c1:0f:0e:d5:32:08:1d:f8:23:
         fe:26:0c:52:14:a3:98:b5:87:62:02:32:40:4d:c8:63:0b:55:
         3e:a1:46:52:b4:30:0a:50:3f:40:b4:b1:10:23:33:5e:f4:07:
         c2:a6:de:17:52:0a:61:e4:dc:b4:44:5d:95:b4:4d:bc:34:f1:
         e8:87:50:e2:2f:8d:99:92:9e:69:c6:32:6e:40:f6:7f:93:e9:
         ee:24:56:5e:65:94:ba:ff:f6:66:5f:88:ea:26:5f:95:2e:8f:
         4f:cd:45:b2:8b:7b:f7:02:22:e8:41:20:99:c7:5d:84:66:1d:
         a0:4a:5c:cd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdv/7QlOegRnhVcmZvaSWd7Mv/gIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwMjk5MEI2QkFFM0RCNzI0OUFGNTJCRTNGOUNBNTFG
MDk3QTZBNzAeFw0yNDA1MDMxODU2NTVaFw0yNTA1MDIxOTAxNTVaMDMxMTAvBgNV
BAMTKDMzRjI0MzE3MkEwNUM2OUUxQ0IyQjZGQjU5ODdDNjgwQkMyRjQ1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3f3mzJdu9bVvaEYd/jNEPWtp
IFL2+kCUt27CPgxoM7E5MAM4X9O0bXaOZNRIoRUEckx0XsGK52XpdcIopYIB3Je/
c7/tDj0pPYvk7Vx6zwc2jdACTCGCSpoLTKfIKyndW3DBHOO/8ADhpJ9UVwsXdCoT
eH5MLU2l6IUGChx5wPygEygvMfXp6XorgMhUg7LnU2RE0EHEK/MDJoXIUzcfedJn
yQl5Nvrx5g6ge1xAhWqUWSEBP9ol4N1m9nLKcmNGgY8M6P/rfEjQ8Ai2pu5Cigei
tTxUiscQq4d8e0X3Q5mW/NdHyXTo7eGPZ2tfiBsQx6d71Bhr9I6IFM+GpI+rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUM/JDFyoFxp4csrb7WYfGgLwvRcAwHwYDVR0j
BBgwFoAUeQKZC2uuPbckmvUr4/nKUfCXpqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG9jUkZhUDhGUmVLZzdQMXlWZzY2b2JBb2JNdldaejZMaU1jQU1yRnFS
emUvMC83OTAyOTkwQjZCQUUzREI3MjQ5QUY1MkJFM0Y5Q0E1MUYwOTdBNkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5MDI5OTBCNkJBRTNEQjcy
NDlBRjUyQkUzRjlDQTUxRjA5N0E2QTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvY1JGYVA4RlJlS2c3UDF5Vmc2Nm9iQW9iTXZXWno2TGlNY0FNckZxUnplLzAv
MzIzODMwMzQzYTM2MzAzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgIDANBgkqhkiG9w0BAQsFAAOCAQEAK36OyOA9
HJcwFRm9Bu1gQ+6EnMThhTlFwKDVzzTfy+aujMZXAF6pBLnsWAM9Xi/tkfbeSvo6
ANkkj6GPOlrItZIUaLfnW1Wm8zd7eCOFNYMZn1EOEDFAJapMg78jIJejqy2N148F
MAkNGREU6XEp4D+PV2fTEcmPZEC6Q1o+UlfVt1+LR7VjwQ8O1TIIHfgj/iYMUhSj
mLWHYgIyQE3IYwtVPqFGUrQwClA/QLSxECMzXvQHwqbeF1IKYeTctERdlbRNvDTx
6IdQ4i+NmZKeacYybkD2f5Pp7iRWXmWUuv/2Zl+I6iZflS6PT81Fsot79wIi6EEg
mcddhGYdoEpczQ==
-----END CERTIFICATE-----