Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa
File:                     323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier:          RQGSgnwjPhMML/mniloqSOkd6CzVoAeSpj57JbTT/Vs=
Subject key identifier:   1D:3B:B0:22:59:02:50:FB:D1:67:2E:DE:5F:9B:B8:8B:BF:EC:1C:D2
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       6032109541740AC0351DD4DED23F0A2AE93EBFAF
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:58 +0000
ROA not before:           Wed 08 May 2024 18:15:58 +0000
ROA not after:            Wed 07 May 2025 18:20:58 +0000
asID:                     52932
IP address blocks:        2804:28b0:4000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:32:10:95:41:74:0a:c0:35:1d:d4:de:d2:3f:0a:2a:e9:3e:bf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:58 2024 GMT
            Not After : May  7 18:20:58 2025 GMT
        Subject: CN=1D3BB022590250FBD1672EDE5F9BB88BBFEC1CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:9a:2d:d3:21:59:7d:a1:0d:60:b8:d4:bb:
                    17:df:b5:dc:79:60:41:82:2a:da:84:29:57:23:f3:
                    7b:84:17:31:e2:5d:17:6d:c6:ea:5b:84:86:04:13:
                    74:6b:e3:4e:e3:04:a9:63:1c:4d:3c:86:9e:9a:83:
                    ee:7a:ff:f0:14:16:a8:1c:13:1b:da:9f:3c:93:8a:
                    12:f3:ef:60:0a:e0:9f:6f:b3:ae:f6:9f:f6:0a:9e:
                    7a:0c:a1:2e:5d:25:db:4d:4c:c6:69:53:18:40:6c:
                    42:fa:e4:64:dc:b0:44:c3:a1:23:ad:15:9d:09:c0:
                    d3:3a:e9:58:7a:c0:64:32:08:86:f2:a9:53:d6:b3:
                    7b:e1:8b:95:2a:fd:0a:ee:7a:34:95:96:5e:db:32:
                    39:d7:b8:9c:87:e9:d8:c8:07:11:8a:bb:c7:63:b2:
                    4c:a7:21:54:ea:90:ba:e6:0e:31:5d:e6:36:3c:48:
                    aa:78:4b:dc:df:a8:20:e8:cd:b5:1e:68:67:83:ba:
                    63:12:d4:50:84:a8:6f:b0:ee:f9:dd:86:5d:69:1a:
                    81:93:91:b9:bf:a4:84:95:cd:38:f4:1c:e1:98:0a:
                    28:4b:fb:5a:7a:9c:c6:21:5d:b2:4f:bf:0c:60:3a:
                    5f:2c:9e:e0:62:25:83:3e:47:ee:bc:5f:c3:11:ab:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:B0:22:59:02:50:FB:D1:67:2E:DE:5F:9B:B8:8B:BF:EC:1C:D2
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/323830343a323862303a343030303a3a2f33342d3334203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:71:32:a6:71:6b:4a:fa:b7:85:20:e3:4e:55:c8:ca:62:
         7c:aa:26:3a:7a:09:71:96:28:27:ab:cc:39:e2:c0:20:66:7e:
         9c:05:0c:4f:45:1a:1d:24:fe:78:e3:ca:70:5f:46:ae:50:0e:
         16:60:10:42:b4:67:ef:ad:3c:05:cd:7e:db:8a:02:f9:5c:44:
         95:ed:d6:a0:ed:c7:a7:1f:00:95:fd:50:e3:00:84:38:d1:77:
         2b:2b:d2:49:c7:3d:a0:20:9c:dd:9a:49:fa:31:e7:56:47:8c:
         53:5a:f0:9e:6e:c3:52:0d:39:62:f6:bb:f2:7a:9a:e8:fe:bc:
         dd:1d:77:f7:47:72:18:16:a2:fd:c7:79:c8:27:ab:2c:e5:3c:
         45:62:df:dc:4a:5a:55:4e:fc:81:36:5f:ff:1f:f6:cf:a1:e7:
         38:e6:ca:68:8b:ab:17:e8:b5:6a:a9:c9:93:c2:6d:ab:db:64:
         3f:dc:ff:75:77:dd:6a:01:b9:2a:0f:53:6d:f0:2d:b5:ac:2a:
         c9:42:69:15:28:21:27:c4:17:8d:8b:78:41:33:de:85:cd:f7:
         2d:f2:ca:b8:d9:0a:4c:4d:40:98:f9:1f:fb:19:8d:f5:8b:a5:
         0a:1a:1a:99:f7:cd:f3:9c:3f:92:b3:32:ca:15:bd:8d:2d:69:
         e7:b0:39:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUYDIQlUF0CsA1HdTe0j8KKuk+v68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2QUQyRjVGNUJDRTdFOURDRkY3RjNDM0VFQzRCRTAx
MjBFMUM0QzAeFw0yNDA1MDgxODE1NThaFw0yNTA1MDcxODIwNThaMDMxMTAvBgNV
BAMTKDFEM0JCMDIyNTkwMjUwRkJEMTY3MkVERTVGOUJCODhCQkZFQzFDRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+5ot0yFZfaENYLjUuxfftdx5
YEGCKtqEKVcj83uEFzHiXRdtxupbhIYEE3Rr407jBKljHE08hp6ag+56//AUFqgc
ExvanzyTihLz72AK4J9vs672n/YKnnoMoS5dJdtNTMZpUxhAbEL65GTcsETDoSOt
FZ0JwNM66Vh6wGQyCIbyqVPWs3vhi5Uq/QruejSVll7bMjnXuJyH6djIBxGKu8dj
skynIVTqkLrmDjFd5jY8SKp4S9zfqCDozbUeaGeDumMS1FCEqG+w7vndhl1pGoGT
kbm/pISVzTj0HOGYCihL+1p6nMYhXbJPvwxgOl8snuBiJYM+R+68X8MRq9AbAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHTuwIlkCUPvRZy7eX5u4i7/sHNIwHwYDVR0j
BBgwFoAU6mrS9fW85+nc/388PuxL4BIOHEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC9FQTZBRDJGNUY1QkNFN0U5RENGRjdGM0MzRUVDNEJFMDEyMEUxQzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNkFEMkY1RjVCQ0U3RTlE
Q0ZGN0YzQzNFRUM0QkUwMTIwRTFDNEMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V2NrNkJvNG1RMUJ1eEJGYkdiQW1RVVkyeFVuMmFoZHVtNU0yemR6UEdkLzAv
MzIzODMwMzQzYTMyMzg2MjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM1MzIzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBCiwQDANBgkqhkiG9w0BAQsFAAOC
AQEACbhxMqZxa0r6t4Ug405VyMpifKomOnoJcZYoJ6vMOeLAIGZ+nAUMT0UaHST+
eOPKcF9GrlAOFmAQQrRn7608Bc1+24oC+VxEle3WoO3Hpx8Alf1Q4wCEONF3KyvS
Scc9oCCc3ZpJ+jHnVkeMU1rwnm7DUg05Yva78nqa6P683R1390dyGBai/cd5yCer
LOU8RWLf3EpaVU78gTZf/x/2z6HnOObKaIurF+i1aqnJk8Jtq9tkP9z/dXfdagG5
Kg9TbfAttawqyUJpFSghJ8QXjYt4QTPehc33LfLKuNkKTE1AmPkf+xmN9YulChoa
mffN85w/krMyyhW9jS1p57A5EQ==
-----END CERTIFICATE-----