Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa
File:                     323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa (raw, json)
Hash identifier:          t4RMSFVnXZO+JgxzoJ4Kpj1dhguyW+HteoD0XB6IdFY=
Subject key identifier:   26:87:81:9A:22:F7:CE:F4:79:F2:B9:E5:C8:95:76:42:EE:69:86:CD
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       5070646100E9252CFC7B35AFF56C0C16ACDF7189
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:46 +0000
ROA not before:           Thu 04 Apr 2024 07:15:46 +0000
ROA not after:            Thu 03 Apr 2025 07:20:46 +0000
asID:                     268678
IP address blocks:        2804:54ec:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:70:64:61:00:e9:25:2c:fc:7b:35:af:f5:6c:0c:16:ac:df:71:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:46 2024 GMT
            Not After : Apr  3 07:20:46 2025 GMT
        Subject: CN=2687819A22F7CEF479F2B9E5C8957642EE6986CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:b0:b8:d8:7a:9d:ef:2e:5c:fb:08:10:5b:
                    d2:c6:5c:bb:b1:04:44:19:dd:03:c6:cc:18:4a:8d:
                    43:5d:8a:b1:83:71:51:0d:04:bb:c3:9b:54:c5:b6:
                    52:50:33:44:f9:5b:7a:72:30:9a:3b:a0:50:fd:eb:
                    91:f1:76:0a:f7:97:61:ee:f3:9d:89:80:d5:54:b1:
                    8a:ce:39:1e:61:20:bd:45:4a:23:74:9b:a3:4c:6c:
                    29:51:1c:42:e6:ff:b0:d6:08:d6:10:ea:81:c8:ef:
                    3a:c9:20:5a:1a:19:39:19:b4:a6:84:50:a1:82:af:
                    c1:d6:67:51:e9:7e:2a:be:34:24:3b:90:19:23:79:
                    d7:00:6b:43:b6:70:1c:9c:96:fe:e6:5c:b7:f3:f3:
                    cb:7a:57:59:9f:3b:ba:8a:b1:30:1c:26:91:ac:2f:
                    59:46:3d:82:d1:e2:90:7a:07:82:0b:1e:c5:a3:73:
                    d4:d1:4c:ae:1d:7b:53:55:5d:49:f0:4a:0b:a3:00:
                    ca:71:80:27:44:5d:84:36:76:fb:c5:27:90:5d:ca:
                    ac:7f:aa:5f:c4:93:f7:4e:67:95:91:e6:c7:0a:90:
                    dc:09:aa:fc:1f:b2:0f:2b:b8:72:d0:8b:f6:4b:49:
                    13:f5:d5:e1:5d:f6:c3:db:c7:5a:92:0e:da:91:e8:
                    de:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:87:81:9A:22:F7:CE:F4:79:F2:B9:E5:C8:95:76:42:EE:69:86:CD
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/323830343a353465633a633030303a3a2f33342d3334203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54ec:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:27:0d:66:14:0d:06:ff:af:8c:4d:ae:54:3e:75:e8:0d:
         69:b2:93:80:83:7e:4f:bb:ef:33:4f:03:7b:2f:26:a3:6d:23:
         43:cc:b2:e5:63:60:7b:7f:9c:c3:29:d6:80:32:96:a4:77:0b:
         95:b9:e7:87:7d:88:0a:00:79:15:c8:39:87:e2:3c:b8:99:56:
         a2:e7:b2:b2:86:20:de:a9:db:86:b2:b1:47:2d:c9:36:a4:60:
         9f:8b:27:4a:9e:b5:ad:43:16:19:ea:64:8e:13:f6:76:15:25:
         8e:11:24:e1:55:08:fb:15:b4:df:ce:9a:32:a7:ba:9e:df:2e:
         14:a3:c4:f9:93:2e:d8:f3:69:e6:cf:c0:59:97:9c:39:db:44:
         f1:9a:f7:b9:89:69:ad:2e:ed:3d:7a:fe:cf:55:77:f1:41:1b:
         d5:c0:22:3f:47:72:a4:b0:d8:5b:c3:f3:68:57:a2:54:cc:92:
         74:72:27:3a:49:ae:8e:b0:6c:16:0e:21:f7:4a:c6:10:d9:0a:
         ed:72:92:d6:9d:09:5a:a2:11:37:c8:14:61:6d:35:51:75:8d:
         7c:77:d9:8d:8a:8e:55:9b:ab:74:61:87:f8:93:35:84:aa:04:
         d8:e9:3d:27:2e:12:a2:bd:6b:91:8a:dd:06:47:5b:2c:4a:99:
         66:2e:3e:b9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUHBkYQDpJSz8ezWv9WwMFqzfcYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE2RDc0MDQxOTY1QzM3MjlENTU1MkJFRkIwMEU3NjdC
QjA5MUY0RTAeFw0yNDA0MDQwNzE1NDZaFw0yNTA0MDMwNzIwNDZaMDMxMTAvBgNV
BAMTKDI2ODc4MTlBMjJGN0NFRjQ3OUYyQjlFNUM4OTU3NjQyRUU2OTg2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrvbC42Hqd7y5c+wgQW9LGXLux
BEQZ3QPGzBhKjUNdirGDcVENBLvDm1TFtlJQM0T5W3pyMJo7oFD965Hxdgr3l2Hu
852JgNVUsYrOOR5hIL1FSiN0m6NMbClRHELm/7DWCNYQ6oHI7zrJIFoaGTkZtKaE
UKGCr8HWZ1Hpfiq+NCQ7kBkjedcAa0O2cByclv7mXLfz88t6V1mfO7qKsTAcJpGs
L1lGPYLR4pB6B4ILHsWjc9TRTK4de1NVXUnwSgujAMpxgCdEXYQ2dvvFJ5Bdyqx/
ql/Ek/dOZ5WR5scKkNwJqvwfsg8ruHLQi/ZLSRP11eFd9sPbx1qSDtqR6N4nAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJoeBmiL3zvR58rnlyJV2Qu5phs0wHwYDVR0j
BBgwFoAU4W10BBllw3KdVVK++wDnZ7sJH04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMS9FMTZENzQwNDE5NjVDMzcyOUQ1NTUyQkVGQjAwRTc2N0JCMDkxRjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxNkQ3NDA0MTk2NUMzNzI5
RDU1NTJCRUZCMDBFNzY3QkIwOTFGNEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzEv
MzIzODMwMzQzYTM1MzQ2NTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQARwycNZhQNBv+vjE2uVD516A1pspOAg35Pu+8zTwN7LyajbSNDzLLlY2B7
f5zDKdaAMpakdwuVueeHfYgKAHkVyDmH4jy4mVai57KyhiDeqduGsrFHLck2pGCf
iydKnrWtQxYZ6mSOE/Z2FSWOESThVQj7FbTfzpoyp7qe3y4Uo8T5ky7Y82nmz8BZ
l5w520Txmve5iWmtLu09ev7PVXfxQRvVwCI/R3KksNhbw/NoV6JUzJJ0cic6Sa6O
sGwWDiH3SsYQ2QrtcpLWnQlaohE3yBRhbTVRdY18d9mNio5Vm6t0YYf4kzWEqgTY
6T0nLhKivWuRit0GR1ssSplmLj65
-----END CERTIFICATE-----