Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/323830343a316431343a3a2f33322d3332203d3e203631363934.roa
File:                     323830343a316431343a3a2f33322d3332203d3e203631363934.roa (raw, json)
Hash identifier:          LW9BfGFeSUqOEI4NZFDx4NZtXvymCeyXjLhG/re2ABk=
Subject key identifier:   4F:7D:CC:C9:E3:A8:09:CA:CC:68:09:5A:07:8B:9A:29:3F:44:72:B8
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       265D3D4B3A02B8011048B431C662A84FB0EBFB90
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/323830343a316431343a3a2f33322d3332203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:06 +0000
ROA not before:           Wed 03 Apr 2024 19:14:06 +0000
ROA not after:            Wed 02 Apr 2025 19:19:06 +0000
asID:                     61694
IP address blocks:        2804:1d14::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5d:3d:4b:3a:02:b8:01:10:48:b4:31:c6:62:a8:4f:b0:eb:fb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:06 2024 GMT
            Not After : Apr  2 19:19:06 2025 GMT
        Subject: CN=4F7DCCC9E3A809CACC68095A078B9A293F4472B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:e5:9f:e5:ce:d8:10:22:3f:3e:f3:a2:c2:
                    96:4d:97:83:a7:0d:53:89:67:65:cb:c5:0a:b4:57:
                    ed:eb:8a:f1:ea:93:52:55:b4:6b:76:d3:6e:df:74:
                    d3:0b:78:57:3e:2b:07:f7:b8:f7:5b:bd:c4:32:ba:
                    b4:38:d7:87:95:d3:48:85:ca:0a:76:20:9c:c2:ba:
                    4e:b8:fe:dc:51:89:76:f4:9b:f7:1d:69:13:f8:1d:
                    04:b2:05:8a:98:1e:03:8e:91:f4:73:20:66:ca:57:
                    47:78:15:38:b5:50:06:01:d5:45:a4:62:e0:e4:4f:
                    14:21:20:c8:68:16:87:47:57:a4:7c:77:dd:4d:af:
                    33:2f:1a:14:d9:eb:67:92:b4:3e:9a:11:f8:c7:b8:
                    17:28:b4:ae:9c:1a:dd:c6:0c:e9:3a:6a:ff:88:b3:
                    f6:40:14:27:d8:f6:29:0c:bc:ca:c6:f4:b6:6d:b8:
                    42:e8:be:75:00:a9:4b:5e:90:1b:2d:2d:51:91:39:
                    dd:f1:0f:0e:36:41:3e:e3:05:38:ae:3f:2b:ef:43:
                    b2:79:5b:d2:9d:47:79:8d:2e:19:a1:1e:ce:30:bc:
                    1d:92:89:97:98:e4:70:74:29:e5:e5:d2:5e:4e:73:
                    9a:72:bb:4f:8a:14:ea:81:3a:02:76:0f:98:0b:80:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7D:CC:C9:E3:A8:09:CA:CC:68:09:5A:07:8B:9A:29:3F:44:72:B8
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/323830343a316431343a3a2f33322d3332203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:9c:2d:b7:42:31:2c:5f:ae:57:bc:d1:f5:cf:2c:39:b3:02:
         75:11:10:42:81:e7:78:4e:a5:36:f5:28:50:8f:83:5a:23:11:
         1a:d3:38:3d:97:4f:d8:4f:78:e3:33:d7:82:84:06:df:ea:3c:
         0e:fa:c6:31:5f:57:bd:e6:69:32:4a:f8:12:b1:d8:9e:a4:91:
         aa:a9:18:f1:f6:23:a1:bf:5c:87:97:52:c8:37:a4:cf:9c:9e:
         11:47:0a:52:ef:b0:6d:23:7a:cc:6f:56:b1:4f:41:42:0c:83:
         bb:f6:b6:7c:0c:81:3c:98:91:12:26:d0:37:d2:54:f9:63:f5:
         52:9e:40:8b:e4:6a:78:e8:91:6b:01:61:e3:39:c9:24:87:08:
         10:92:7a:de:39:55:22:69:13:cb:a6:f6:df:25:6f:22:36:dc:
         72:a0:33:b9:ec:72:a0:9b:92:ac:6b:e2:d1:b9:39:b7:d9:57:
         ac:14:59:41:6b:9d:87:5f:ab:57:46:95:19:4e:52:5f:09:09:
         71:e3:22:06:97:fe:09:a4:53:aa:65:e6:3a:26:32:cc:e0:1c:
         22:e9:ad:f5:0f:fb:a1:e7:e5:8e:93:cf:1b:89:57:6f:05:8e:
         82:53:0c:70:ca:6e:2c:77:7a:6f:45:ef:2d:4b:f8:13:5a:49:
         08:25:e2:2f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJl09SzoCuAEQSLQxxmKoT7Dr+5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5RTNCOEM0NEU4MTdCMTJFOUUwQTNFNTM3MTM1ODk1
NTNGREU0NzAeFw0yNDA0MDMxOTE0MDZaFw0yNTA0MDIxOTE5MDZaMDMxMTAvBgNV
BAMTKDRGN0RDQ0M5RTNBODA5Q0FDQzY4MDk1QTA3OEI5QTI5M0Y0NDcyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/OWf5c7YECI/PvOiwpZNl4On
DVOJZ2XLxQq0V+3rivHqk1JVtGt2027fdNMLeFc+Kwf3uPdbvcQyurQ414eV00iF
ygp2IJzCuk64/txRiXb0m/cdaRP4HQSyBYqYHgOOkfRzIGbKV0d4FTi1UAYB1UWk
YuDkTxQhIMhoFodHV6R8d91NrzMvGhTZ62eStD6aEfjHuBcotK6cGt3GDOk6av+I
s/ZAFCfY9ikMvMrG9LZtuELovnUAqUtekBstLVGROd3xDw42QT7jBTiuPyvvQ7J5
W9KdR3mNLhmhHs4wvB2SiZeY5HB0KeXl0l5Oc5pyu0+KFOqBOgJ2D5gLgGBpAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUT33MyeOoCcrMaAlaB4uaKT9EcrgwHwYDVR0j
BBgwFoAU7p47jEToF7Eungo+U3E1iVU/3kcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtlTGRUREVCUnMzYlVOYnE5RVFkU1VwQlFIQ0dieG9qNXBHN3dYamdL
YWsvMS9FRTlFM0I4QzQ0RTgxN0IxMkU5RTBBM0U1MzcxMzU4OTU1M0ZERTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFOUUzQjhDNDRFODE3QjEy
RTlFMEEzRTUzNzEzNTg5NTUzRkRFNDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrZUxkVERFQlJzM2JVTmJxOUVRZFNVcEJRSENHYnhvajVwRzd3WGpnS2FrLzEv
MzIzODMwMzQzYTMxNjQzMTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM2
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEHRQwDQYJKoZIhvcNAQELBQADggEBANicLbdCMSxf
rle80fXPLDmzAnUREEKB53hOpTb1KFCPg1ojERrTOD2XT9hPeOMz14KEBt/qPA76
xjFfV73maTJK+BKx2J6kkaqpGPH2I6G/XIeXUsg3pM+cnhFHClLvsG0jesxvVrFP
QUIMg7v2tnwMgTyYkRIm0DfSVPlj9VKeQIvkanjokWsBYeM5ySSHCBCSet45VSJp
E8um9t8lbyI23HKgM7nscqCbkqxr4tG5ObfZV6wUWUFrnYdfq1dGlRlOUl8JCXHj
IgaX/gmkU6pl5jomMszgHCLprfUP+6Hn5Y6TzxuJV28FjoJTDHDKbix3em9F7y1L
+BNaSQgl4i8=
-----END CERTIFICATE-----