Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/1/323830343a313131303a3a2f33322d3336203d3e20323632393031.roa
File:                     323830343a313131303a3a2f33322d3336203d3e20323632393031.roa (raw, json)
Hash identifier:          kLucPW9pP+b52fscYLf+RpcWlqAe8UsRwF/Qxh4pwHc=
Subject key identifier:   CA:8A:B6:1D:7C:EA:B4:3F:8B:FF:47:B2:E5:F0:BE:71:8F:77:38:58
Certificate issuer:       /CN=5189A5086845CADD80AAF9ACE2AFF4234FE63364
Certificate serial:       4B18B8C1FC80032735CC1E241E2BD6B62F644FED
Authority key identifier: 51:89:A5:08:68:45:CA:DD:80:AA:F9:AC:E2:AF:F4:23:4F:E6:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5189A5086845CADD80AAF9ACE2AFF4234FE63364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/1/323830343a313131303a3a2f33322d3336203d3e20323632393031.roa
Signing time:             Thu 04 Apr 2024 08:01:09 +0000
ROA not before:           Thu 04 Apr 2024 07:56:09 +0000
ROA not after:            Thu 03 Apr 2025 08:01:09 +0000
asID:                     262901
IP address blocks:        2804:1110::/32 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:18:b8:c1:fc:80:03:27:35:cc:1e:24:1e:2b:d6:b6:2f:64:4f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5189A5086845CADD80AAF9ACE2AFF4234FE63364
        Validity
            Not Before: Apr  4 07:56:09 2024 GMT
            Not After : Apr  3 08:01:09 2025 GMT
        Subject: CN=CA8AB61D7CEAB43F8BFF47B2E5F0BE718F773858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:bf:74:9c:6f:56:f8:25:2e:05:87:25:f4:
                    2a:fb:b1:26:49:4a:c4:40:e7:89:ba:dd:4d:a7:4e:
                    d7:a7:e3:28:bd:ae:25:25:00:d2:88:43:de:ec:2d:
                    e4:82:85:09:0c:2a:95:f1:4a:c9:26:bf:d3:9a:ac:
                    41:d4:55:0c:de:6c:e3:16:b8:17:e1:d1:71:13:a1:
                    35:6a:34:11:02:d1:f6:f8:ef:c5:8a:03:c7:19:7e:
                    cf:53:37:7b:e5:f9:7f:a8:c3:d7:0b:e6:2e:53:58:
                    d6:d1:54:91:d5:14:eb:55:cb:ea:b8:ba:25:cd:d6:
                    e0:21:24:11:ac:39:fe:10:91:33:a7:21:a6:21:80:
                    57:84:3c:86:0f:70:3d:42:72:c6:79:84:e9:5e:78:
                    e0:4a:e6:b2:78:3a:a1:59:26:09:74:fe:9a:cc:b8:
                    ed:eb:80:82:fa:25:47:76:15:e1:d4:bb:70:7a:55:
                    a7:e0:94:95:56:92:65:28:b8:fc:ed:fe:c3:a8:47:
                    08:57:16:57:a2:b7:c4:ed:82:27:3f:6a:a3:ac:f0:
                    b8:ab:a7:53:67:f6:4e:57:5b:4b:bc:9d:34:c6:8c:
                    fa:7b:21:68:e7:b7:d4:40:d3:99:38:a7:7e:87:49:
                    41:7d:2e:32:88:e8:53:92:9f:5d:2a:38:a9:fc:c3:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8A:B6:1D:7C:EA:B4:3F:8B:FF:47:B2:E5:F0:BE:71:8F:77:38:58
            X509v3 Authority Key Identifier:
                keyid:51:89:A5:08:68:45:CA:DD:80:AA:F9:AC:E2:AF:F4:23:4F:E6:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/1/5189A5086845CADD80AAF9ACE2AFF4234FE63364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5189A5086845CADD80AAF9ACE2AFF4234FE63364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/1/323830343a313131303a3a2f33322d3336203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1110::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:eb:d0:ec:4f:ee:53:f1:1c:a5:bd:97:40:95:63:bb:2d:
         f3:e8:23:fc:da:06:59:da:c9:93:b6:ad:9b:07:95:59:69:49:
         af:c8:11:3e:13:67:21:9a:b7:c3:4e:14:8a:74:ab:a7:54:5d:
         89:16:a4:b9:28:f5:56:1d:df:fa:69:b4:cf:07:45:4d:e8:2d:
         33:33:af:ce:fa:d6:c1:bd:6d:2b:10:0a:95:84:81:1d:17:d9:
         5f:09:e0:74:93:1a:43:5f:54:8d:f6:bd:57:6a:37:75:70:24:
         69:a1:2c:dd:6d:cf:6d:11:0e:bd:cf:c9:5f:ac:2c:ef:0b:95:
         69:ac:b8:04:ab:73:66:fe:79:0b:1c:b9:ff:04:68:c8:73:f6:
         3b:ad:7c:17:a7:81:df:ee:fd:37:88:51:e0:cc:29:39:0c:5d:
         9d:7e:49:eb:b2:eb:fb:76:d6:e8:ad:69:96:a2:93:37:5f:e5:
         8d:8d:dd:ca:29:91:c0:ab:23:12:54:83:50:67:8e:05:88:c8:
         73:a9:6f:3a:c2:b5:9a:41:96:f6:3f:42:e0:59:ce:66:d1:3f:
         df:4a:88:7d:d3:c7:1f:5f:fc:06:e9:12:11:37:30:34:aa:47:
         ba:4f:86:ea:b4:5f:91:cb:27:9a:8b:05:89:91:e8:3f:bf:b7:
         bf:08:f5:c9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSxi4wfyAAyc1zB4kHivWti9kT+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE4OUE1MDg2ODQ1Q0FERDgwQUFGOUFDRTJBRkY0MjM0
RkU2MzM2NDAeFw0yNDA0MDQwNzU2MDlaFw0yNTA0MDMwODAxMDlaMDMxMTAvBgNV
BAMTKENBOEFCNjFEN0NFQUI0M0Y4QkZGNDdCMkU1RjBCRTcxOEY3NzM4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkr90nG9W+CUuBYcl9Cr7sSZJ
SsRA54m63U2nTten4yi9riUlANKIQ97sLeSChQkMKpXxSskmv9OarEHUVQzebOMW
uBfh0XEToTVqNBEC0fb478WKA8cZfs9TN3vl+X+ow9cL5i5TWNbRVJHVFOtVy+q4
uiXN1uAhJBGsOf4QkTOnIaYhgFeEPIYPcD1CcsZ5hOleeOBK5rJ4OqFZJgl0/prM
uO3rgIL6JUd2FeHUu3B6VafglJVWkmUouPzt/sOoRwhXFleit8Ttgic/aqOs8Lir
p1Nn9k5XW0u8nTTGjPp7IWjnt9RA05k4p36HSUF9LjKI6FOSn10qOKn8wxttAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyoq2HXzqtD+L/0ey5fC+cY93OFgwHwYDVR0j
BBgwFoAUUYmlCGhFyt2Aqvms4q/0I0/mM2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVzMjYxWWpxV2JQR1V1NnpIRzdnOHZvWGNpdzlDNTVMS201bUp2NUFH
cGovMS81MTg5QTUwODY4NDVDQUREODBBQUY5QUNFMkFGRjQyMzRGRTYzMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxODlBNTA4Njg0NUNBREQ4
MEFBRjlBQ0UyQUZGNDIzNEZFNjMzNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFczI2MVlqcVdiUEdVdTZ6SEc3Zzh2b1hjaXc5QzU1TEttNW1KdjVBR3BqLzEv
MzIzODMwMzQzYTMxMzEzMTMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjMy
MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQREDANBgkqhkiG9w0BAQsFAAOCAQEAM9br0OxP
7lPxHKW9l0CVY7st8+gj/NoGWdrJk7atmweVWWlJr8gRPhNnIZq3w04UinSrp1Rd
iRakuSj1Vh3f+mm0zwdFTegtMzOvzvrWwb1tKxAKlYSBHRfZXwngdJMaQ19Ujfa9
V2o3dXAkaaEs3W3PbREOvc/JX6ws7wuVaay4BKtzZv55Cxy5/wRoyHP2O618F6eB
3+79N4hR4MwpOQxdnX5J67Lr+3bW6K1plqKTN1/ljY3dyimRwKsjElSDUGeOBYjI
c6lvOsK1mkGW9j9C4FnOZtE/30qIfdPHH1/8BukSETcwNKpHuk+G6rRfkcsnmosF
iZHoP7+3vwj1yQ==
-----END CERTIFICATE-----