Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/323830343a333466633a3a2f33322d313238203d3e20323635343933.roa
File:                     323830343a333466633a3a2f33322d313238203d3e20323635343933.roa (raw, json)
Hash identifier:          ugHhkZv0MWMELOyGGZl3C34yz9SnWPHtRvjh2+Pri28=
Subject key identifier:   C0:C8:ED:DF:82:C3:79:9A:AF:AC:CA:42:97:4D:50:CD:BB:B6:D0:62
Certificate issuer:       /CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
Certificate serial:       716B6A02655D17D85C9AF59F8B9AE58FA3002A10
Authority key identifier: 87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/323830343a333466633a3a2f33322d313238203d3e20323635343933.roa
Signing time:             Wed 21 Aug 2024 19:24:28 +0000
ROA not before:           Wed 21 Aug 2024 19:19:28 +0000
ROA not after:            Wed 20 Aug 2025 19:24:28 +0000
asID:                     265493
IP address blocks:        2804:34fc::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6b:6a:02:65:5d:17:d8:5c:9a:f5:9f:8b:9a:e5:8f:a3:00:2a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
        Validity
            Not Before: Aug 21 19:19:28 2024 GMT
            Not After : Aug 20 19:24:28 2025 GMT
        Subject: CN=C0C8EDDF82C3799AAFACCA42974D50CDBBB6D062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:4a:3f:65:7b:a5:89:85:3a:27:4b:3c:d5:
                    0a:d1:67:c3:61:00:1d:4e:a3:a6:e5:26:f2:7b:0a:
                    91:7b:02:14:4a:f6:1c:54:1c:04:6c:61:9b:ae:28:
                    4b:90:ff:a4:3e:c8:d4:4c:7c:33:ce:36:64:3a:28:
                    55:ed:c0:80:07:a4:2a:20:a0:ff:1f:53:7f:3d:55:
                    50:15:68:69:37:1c:ae:d6:8f:24:8b:a3:98:f3:df:
                    8c:cf:4e:ea:f5:45:8a:86:fe:1d:5e:c7:d3:ed:b3:
                    f0:a3:18:8e:81:d0:e4:7a:a8:86:cb:d8:03:9f:d9:
                    e8:0f:b1:0a:75:ae:41:be:43:f7:01:03:61:d1:0c:
                    d9:5b:e8:fa:f5:68:e8:53:9f:12:b9:9b:10:8f:f2:
                    5e:61:16:6a:27:af:32:72:35:25:5f:aa:a0:fa:27:
                    82:66:e9:ea:b4:7a:56:4e:9b:55:4a:9e:82:54:07:
                    bb:73:ee:41:6d:8d:c4:14:4f:c8:78:21:0c:35:e2:
                    b3:b2:03:72:4a:92:f5:9c:3d:24:76:b7:fc:00:0a:
                    f8:47:ee:93:aa:d3:3b:6e:c8:55:3e:90:b1:1a:2d:
                    95:eb:66:13:3f:e9:da:c6:05:d7:d9:93:27:8f:9c:
                    9f:a7:7c:bd:00:6a:dd:dd:a7:b2:aa:7f:8f:54:df:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:ED:DF:82:C3:79:9A:AF:AC:CA:42:97:4D:50:CD:BB:B6:D0:62
            X509v3 Authority Key Identifier:
                keyid:87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/323830343a333466633a3a2f33322d313238203d3e20323635343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:78:28:d8:4c:57:b1:8e:0b:19:7f:5c:b0:36:5b:5f:b1:
         2e:84:78:11:92:42:ba:c0:5f:1b:9b:18:a7:82:7c:0d:37:2b:
         0f:fa:a8:2f:87:93:69:4a:93:e4:2c:f5:05:82:18:e8:b2:b2:
         02:98:ad:04:0e:5b:eb:fa:8f:78:d9:4f:06:b7:7d:d2:5f:bc:
         07:7d:c7:84:a5:ca:29:4f:18:28:c9:42:8e:76:de:f3:33:28:
         fa:fb:c7:cf:ab:8e:28:f9:ec:b4:be:3b:af:73:68:f8:dd:54:
         d5:d7:2c:ce:b5:2b:61:66:d6:16:99:84:86:42:13:c3:84:bc:
         cb:e0:f3:34:70:74:73:ed:93:c2:f7:df:34:3f:71:bb:9b:2f:
         b8:6f:8f:f1:b0:2c:7b:6e:68:e2:25:c0:3d:3d:1f:16:03:ac:
         68:07:24:10:6a:9e:03:c6:39:51:5d:3d:e1:6e:12:a1:51:ed:
         14:cb:97:49:ec:33:f4:b6:13:70:93:91:f6:33:40:d3:95:dd:
         ed:11:e8:b6:1b:ae:fc:df:83:0a:83:cb:64:06:35:a8:ad:4b:
         8f:56:1a:be:59:56:e0:f0:b7:24:c6:94:a5:8b:6b:1b:72:28:
         77:11:81:fb:a7:8c:2f:dc:3f:e2:29:a8:70:96:f2:ab:3c:ab:
         36:24:b8:ab
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcWtqAmVdF9hcmvWfi5rlj6MAKhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcxN0IwMEFEMThFODM3RDY2NTFCMTNFRjdDRUYwRDg5
NDlCMzc0ODAeFw0yNDA4MjExOTE5MjhaFw0yNTA4MjAxOTI0MjhaMDMxMTAvBgNV
BAMTKEMwQzhFRERGODJDMzc5OUFBRkFDQ0E0Mjk3NEQ1MENEQkJCNkQwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkh0o/ZXuliYU6J0s81QrRZ8Nh
AB1Oo6blJvJ7CpF7AhRK9hxUHARsYZuuKEuQ/6Q+yNRMfDPONmQ6KFXtwIAHpCog
oP8fU389VVAVaGk3HK7WjySLo5jz34zPTur1RYqG/h1ex9Pts/CjGI6B0OR6qIbL
2AOf2egPsQp1rkG+Q/cBA2HRDNlb6Pr1aOhTnxK5mxCP8l5hFmonrzJyNSVfqqD6
J4Jm6eq0elZOm1VKnoJUB7tz7kFtjcQUT8h4IQw14rOyA3JKkvWcPSR2t/wACvhH
7pOq0ztuyFU+kLEaLZXrZhM/6drGBdfZkyePnJ+nfL0Aat3dp7Kqf49U33xPAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUwMjt34LDeZqvrMpCl01Qzbu20GIwHwYDVR0j
BBgwFoAUhxewCtGOg31mUbE+987w2JSbN0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUg1ekhhb3R4TGhKWGZxc0RpUEIyR0wzVGdXeW15VEJ4dUhoMktmWTRz
V0gvMC84NzE3QjAwQUQxOEU4MzdENjY1MUIxM0VGN0NFRjBEODk0OUIzNzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MTdCMDBBRDE4RTgzN0Q2
NjUxQjEzRUY3Q0VGMEQ4OTQ5QjM3NDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVINXpIYW90eExoSlhmcXNEaVBCMkdMM1RnV3lteVRCeHVIaDJLZlk0c1dILzAv
MzIzODMwMzQzYTMzMzQ2NjYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzNDM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDT8MA0GCSqGSIb3DQEBCwUAA4IBAQAQpXgo
2ExXsY4LGX9csDZbX7EuhHgRkkK6wF8bmxingnwNNysP+qgvh5NpSpPkLPUFghjo
srICmK0EDlvr+o942U8Gt33SX7wHfceEpcopTxgoyUKOdt7zMyj6+8fPq44o+ey0
vjuvc2j43VTV1yzOtSthZtYWmYSGQhPDhLzL4PM0cHRz7ZPC9980P3G7my+4b4/x
sCx7bmjiJcA9PR8WA6xoByQQap4DxjlRXT3hbhKhUe0Uy5dJ7DP0thNwk5H2M0DT
ld3tEei2G67834MKg8tkBjWorUuPVhq+WVbg8LckxpSli2sbcih3EYH7p4wv3D/i
KahwlvKrPKs2JLir
-----END CERTIFICATE-----