Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
File:                     323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa (raw, json)
Hash identifier:          gkT/AAu1weRUlkb8rmUnGBcUJNKyrRWf/SHkJjtZ8r0=
Subject key identifier:   57:A9:7C:8A:49:AA:6D:AE:AE:10:B2:D1:E5:15:A5:40:17:A2:50:72
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       476729EF60B43EBD63897C65F52B35E815D1301C
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:52 +0000
ROA not before:           Thu 04 Apr 2024 07:15:52 +0000
ROA not after:            Thu 03 Apr 2025 07:20:52 +0000
asID:                     268678
IP address blocks:        2804:54ec:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:67:29:ef:60:b4:3e:bd:63:89:7c:65:f5:2b:35:e8:15:d1:30:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:52 2024 GMT
            Not After : Apr  3 07:20:52 2025 GMT
        Subject: CN=57A97C8A49AA6DAEAE10B2D1E515A54017A25072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:e7:92:7c:f7:34:52:79:63:67:0d:7b:48:
                    3b:ab:68:cf:8e:ef:d7:6f:f8:4a:af:52:fd:28:26:
                    c5:bd:da:71:53:d0:74:7b:c8:92:59:7d:ce:a5:7a:
                    72:0b:28:c5:bb:53:e4:77:7a:b8:b5:31:22:7b:3e:
                    25:d2:9c:46:28:94:fe:de:de:d5:b8:5c:88:83:70:
                    cf:13:0e:90:39:4d:f5:8d:b0:e5:73:59:04:7b:50:
                    18:29:0d:c0:d0:73:69:1f:0b:1e:d9:01:a9:72:33:
                    e2:6d:2a:aa:9e:51:eb:8a:88:74:7c:64:50:28:d5:
                    f4:68:84:4a:26:7c:55:9c:3b:83:54:4b:d8:57:a3:
                    59:9e:23:63:1b:13:c3:f4:f0:57:16:8b:65:d1:0a:
                    ff:63:3b:1b:72:8b:82:f6:0c:90:2b:36:f0:e5:46:
                    55:59:93:58:67:bc:29:c5:d2:10:fd:a4:e0:bc:63:
                    db:3d:15:fe:2a:0d:01:b9:0e:63:e0:b8:f9:56:05:
                    24:ef:c6:ac:39:ac:9a:49:54:8f:86:a9:19:e0:74:
                    54:44:b7:bb:d4:92:39:c8:a0:47:be:cc:e6:c3:6b:
                    30:6f:e5:f9:43:42:0a:85:90:ba:00:5c:91:58:2d:
                    b8:5a:65:66:37:52:53:3b:2b:08:ac:27:da:b4:44:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:7C:8A:49:AA:6D:AE:AE:10:B2:D1:E5:15:A5:40:17:A2:50:72
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a383030303a3a2f33332d3333203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:cb:c2:e4:b2:d2:85:f1:4d:89:3b:5e:d1:e9:d0:54:58:
         e9:ed:a7:6e:3b:5b:eb:f1:34:9d:6e:9e:95:16:9b:ac:e2:cb:
         04:4e:59:f4:d5:b6:1d:ec:21:f5:ff:f2:db:f2:a5:a6:b3:24:
         ee:d2:04:90:c5:91:f0:ed:51:45:6c:46:a9:ca:26:fc:98:00:
         8e:a5:df:1b:11:c2:c1:b6:87:07:e4:54:80:70:9d:45:19:9d:
         da:cc:01:d3:9d:ee:f5:5a:ca:dd:ce:8b:4b:aa:95:ed:37:ae:
         0c:48:de:94:4f:57:ad:f4:96:5e:e7:3c:9c:55:25:16:25:5d:
         97:e3:04:55:9c:f1:f2:24:00:a7:ed:d2:60:fd:97:06:1c:e9:
         32:3c:01:21:57:ba:85:2d:58:fe:3c:fc:60:f0:19:25:c4:25:
         01:71:e4:0e:88:65:1a:85:6d:42:c7:e8:3d:5c:fa:0f:a6:8d:
         44:5e:b4:c4:0f:0c:fd:cc:ea:a8:a0:28:4f:86:4f:20:1d:a7:
         ab:d2:10:ea:a8:88:88:c7:15:a3:b6:6c:73:90:bb:2c:29:66:
         9a:31:a7:4c:8a:e9:db:2e:66:67:c5:b0:b5:6e:29:fc:6c:88:
         ca:f9:e6:23:c7:2e:04:5f:e7:c0:0f:89:28:bd:ee:be:c4:e4:
         c4:9f:d3:97
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUR2cp72C0Pr1jiXxl9Ss16BXRMBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE2RDc0MDQxOTY1QzM3MjlENTU1MkJFRkIwMEU3NjdC
QjA5MUY0RTAeFw0yNDA0MDQwNzE1NTJaFw0yNTA0MDMwNzIwNTJaMDMxMTAvBgNV
BAMTKDU3QTk3QzhBNDlBQTZEQUVBRTEwQjJEMUU1MTVBNTQwMTdBMjUwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWeeSfPc0UnljZw17SDuraM+O
79dv+EqvUv0oJsW92nFT0HR7yJJZfc6lenILKMW7U+R3eri1MSJ7PiXSnEYolP7e
3tW4XIiDcM8TDpA5TfWNsOVzWQR7UBgpDcDQc2kfCx7ZAalyM+JtKqqeUeuKiHR8
ZFAo1fRohEomfFWcO4NUS9hXo1meI2MbE8P08FcWi2XRCv9jOxtyi4L2DJArNvDl
RlVZk1hnvCnF0hD9pOC8Y9s9Ff4qDQG5DmPguPlWBSTvxqw5rJpJVI+GqRngdFRE
t7vUkjnIoEe+zObDazBv5flDQgqFkLoAXJFYLbhaZWY3UlM7KwisJ9q0RBSdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUV6l8ikmqba6uELLR5RWlQBeiUHIwHwYDVR0j
BBgwFoAU4W10BBllw3KdVVK++wDnZ7sJH04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMS9FMTZENzQwNDE5NjVDMzcyOUQ1NTUyQkVGQjAwRTc2N0JCMDkxRjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxNkQ3NDA0MTk2NUMzNzI5
RDU1NTJCRUZCMDBFNzY3QkIwOTFGNEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzEv
MzIzODMwMzQzYTM1MzQ2NTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEVOyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCMt8vC5LLShfFNiTte0enQVFjp7aduO1vr8TSdbp6VFpus4ssETln01bYd
7CH1//Lb8qWmsyTu0gSQxZHw7VFFbEapyib8mACOpd8bEcLBtocH5FSAcJ1FGZ3a
zAHTne71WsrdzotLqpXtN64MSN6UT1et9JZe5zycVSUWJV2X4wRVnPHyJACn7dJg
/ZcGHOkyPAEhV7qFLVj+PPxg8BklxCUBceQOiGUahW1Cx+g9XPoPpo1EXrTEDwz9
zOqooChPhk8gHaer0hDqqIiIxxWjtmxzkLssKWaaMadMiunbLmZnxbC1bin8bIjK
+eYjxy4EX+fAD4kove6+xOTEn9OX
-----END CERTIFICATE-----