Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33322d3332203d3e20323730363135.roa (raw, json)
Hash identifier:          J+ADdWXjwm2TwANLkXUgeVHScT2VKE76M0S16yKbexE=
Subject key identifier:   34:54:5C:29:3E:4C:76:EC:4B:76:7D:62:46:CB:54:75:A3:A2:E1:E9
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       197AEF372BF25CEAAF9CA8B62FB53B982E5E1F65
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:15 +0000
ROA not before:           Thu 04 Apr 2024 16:02:15 +0000
ROA not after:            Thu 03 Apr 2025 16:07:15 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7a:ef:37:2b:f2:5c:ea:af:9c:a8:b6:2f:b5:3b:98:2e:5e:1f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:15 2024 GMT
            Not After : Apr  3 16:07:15 2025 GMT
        Subject: CN=34545C293E4C76EC4B767D6246CB5475A3A2E1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:93:e9:d1:ca:18:cf:e0:4e:65:e3:99:66:
                    0f:3b:0f:2b:7d:59:3b:47:c6:0d:3c:73:36:3e:07:
                    7c:72:a4:23:f2:5e:70:d3:eb:ca:3e:d6:76:d1:0c:
                    7d:e4:bb:ba:1e:32:e6:65:31:6f:79:67:23:00:39:
                    73:2d:dc:79:9b:d8:0a:f7:f7:66:81:19:f5:8f:ef:
                    0b:f2:5c:b0:14:3f:2b:6a:df:f9:23:90:79:33:4d:
                    43:65:6f:ce:29:b9:e0:4c:dc:e4:41:4c:76:22:2b:
                    f6:94:81:9d:8e:61:cf:a6:cd:4e:30:11:38:e3:ed:
                    9b:f2:8e:d6:4d:e5:44:36:8f:7e:af:4d:b3:77:f3:
                    62:fa:33:46:79:f7:e1:2f:49:ff:76:ef:8c:21:e8:
                    b2:85:fd:9d:74:68:cb:80:ee:f8:7a:0c:7e:97:f7:
                    d9:15:06:4b:0c:6b:f4:af:f7:a8:4b:fe:0f:a9:e9:
                    ff:76:bd:c9:18:51:3c:79:c0:23:ad:8b:fc:df:a8:
                    91:bc:82:df:0c:a6:6a:11:fa:1d:f3:f7:95:68:6d:
                    6c:8d:f9:39:de:e3:c7:5f:87:23:fe:5f:ea:a3:f2:
                    fd:a0:3f:d9:dc:93:53:7a:67:04:f1:f6:bf:91:e9:
                    10:f0:11:74:b9:fd:81:e7:4a:69:8d:76:32:2f:a1:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:5C:29:3E:4C:76:EC:4B:76:7D:62:46:CB:54:75:A3:A2:E1:E9
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:09:77:5b:90:9c:36:63:c0:c2:0f:9d:ac:73:34:7f:37:
         4a:84:81:33:b1:98:f7:0a:bf:60:55:bb:a4:4c:f5:ec:e8:64:
         9e:63:89:20:1d:78:95:2d:3f:76:fb:5e:9c:28:0b:cd:91:8d:
         f3:97:8e:51:86:1a:88:9e:03:4e:f1:66:5c:21:1f:24:52:08:
         2d:59:b0:6f:bc:e7:52:62:31:a5:5e:74:17:7c:a4:7c:21:be:
         cf:ee:81:d1:4b:51:cc:0f:c1:61:80:16:7f:b8:01:aa:b1:15:
         f0:9a:98:c4:47:2a:0d:6a:13:89:e4:a5:c8:03:eb:e3:93:39:
         d1:0e:91:4b:0a:67:9b:e5:27:a1:65:24:78:bc:77:a9:a4:0f:
         13:a1:c0:86:0c:18:39:75:15:10:de:6b:87:43:a6:b1:26:e6:
         98:25:81:6b:5f:57:16:c0:65:04:47:2f:a1:41:87:14:2e:b8:
         21:ea:4f:31:18:a6:61:d2:59:22:7d:4a:84:ea:8a:f6:f3:b9:
         62:5e:3f:a4:33:b6:b6:e7:91:2b:66:f3:e7:dd:2d:1f:5f:75:
         8a:d6:dc:6b:31:0b:57:a1:21:d9:a0:25:d1:5b:a1:ae:5f:0f:
         df:51:30:98:de:8d:33:b0:81:49:3f:10:c0:15:06:4f:91:51:
         be:26:ea:2b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGXrvNyvyXOqvnKi2L7U7mC5eH2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4QjE3RkFCQTIyNjg5RkFBNDc2OUI2ODM5NEE0MDE2
NTk0OTZBNzAeFw0yNDA0MDQxNjAyMTVaFw0yNTA0MDMxNjA3MTVaMDMxMTAvBgNV
BAMTKDM0NTQ1QzI5M0U0Qzc2RUM0Qjc2N0Q2MjQ2Q0I1NDc1QTNBMkUxRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9C5Pp0coYz+BOZeOZZg87Dyt9
WTtHxg08czY+B3xypCPyXnDT68o+1nbRDH3ku7oeMuZlMW95ZyMAOXMt3Hmb2Ar3
92aBGfWP7wvyXLAUPytq3/kjkHkzTUNlb84pueBM3ORBTHYiK/aUgZ2OYc+mzU4w
ETjj7ZvyjtZN5UQ2j36vTbN382L6M0Z59+EvSf9274wh6LKF/Z10aMuA7vh6DH6X
99kVBksMa/Sv96hL/g+p6f92vckYUTx5wCOti/zfqJG8gt8MpmoR+h3z95VobWyN
+Tne48dfhyP+X+qj8v2gP9nck1N6ZwTx9r+R6RDwEXS5/YHnSmmNdjIvoUo3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUNFRcKT5MduxLdn1iRstUdaOi4ekwHwYDVR0j
BBgwFoAUEosX+roiaJ+qR2m2g5SkAWWUlqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRQMjJ6QTlZMmdqcmg0WGJVVFJFenF1aEREY0dVY05iQnJIQ0M2amNy
cjYvMS8xMjhCMTdGQUJBMjI2ODlGQUE0NzY5QjY4Mzk0QTQwMTY1OTQ5NkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyOEIxN0ZBQkEyMjY4OUZB
QTQ3NjlCNjgzOTRBNDAxNjU5NDk2QTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkUDIyekE5WTJnanJoNFhiVVRSRXpxdWhERGNHVWNOYkJySENDNmpjcnI2LzEv
MzIzODMwMzQzYTM2NjU2MjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzYzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARuuDANBgkqhkiG9w0BAQsFAAOCAQEASjAJd1uQ
nDZjwMIPnaxzNH83SoSBM7GY9wq/YFW7pEz17OhknmOJIB14lS0/dvtenCgLzZGN
85eOUYYaiJ4DTvFmXCEfJFIILVmwb7znUmIxpV50F3ykfCG+z+6B0UtRzA/BYYAW
f7gBqrEV8JqYxEcqDWoTieSlyAPr45M50Q6RSwpnm+UnoWUkeLx3qaQPE6HAhgwY
OXUVEN5rh0OmsSbmmCWBa19XFsBlBEcvoUGHFC64IepPMRimYdJZIn1KhOqK9vO5
Yl4/pDO2tueRK2bz590tH191itbcazELV6Eh2aAl0Vuhrl8P31EwmN6NM7CBST8Q
wBUGT5FRvibqKw==
-----END CERTIFICATE-----