Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33332d3333203d3e20323636323735.roa
File:                     323830343a333533383a3a2f33332d3333203d3e20323636323735.roa (raw, json)
Hash identifier:          pwSVYILbA4C42pHOnt0HHdI9Pm7AjEHzzhOPrGO7pQ0=
Subject key identifier:   A2:F9:71:41:7E:6B:D8:6B:E8:69:8C:18:FE:97:43:B2:6F:96:89:BB
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       C17ABC758CA00ED6FEF219B8C66C3262594362
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33332d3333203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:15:52 +0000
ROA not before:           Mon 29 Jul 2024 13:10:52 +0000
ROA not after:            Mon 28 Jul 2025 13:15:52 +0000
asID:                     266275
IP address blocks:        2804:3538::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:7a:bc:75:8c:a0:0e:d6:fe:f2:19:b8:c6:6c:32:62:59:43:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:10:52 2024 GMT
            Not After : Jul 28 13:15:52 2025 GMT
        Subject: CN=A2F971417E6BD86BE8698C18FE9743B26F9689BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:24:76:f9:81:f2:2b:5c:be:6c:b1:06:2f:
                    a6:d3:54:71:b6:de:d6:f5:1b:e8:d6:47:3b:b6:c3:
                    7a:85:ee:c1:9d:f4:bc:3d:4e:95:8e:0e:bb:95:83:
                    dd:04:e6:00:5e:57:9a:36:1c:ed:d1:06:16:82:ae:
                    cd:26:5d:8a:5c:ac:c9:4a:af:c0:72:ff:04:f7:e2:
                    a8:01:48:e1:a2:01:77:84:00:d3:79:c3:ce:90:93:
                    c8:0c:84:51:6a:bd:7d:d1:5a:0e:97:d3:6c:73:47:
                    ee:73:21:81:6d:9d:10:05:eb:b4:6f:55:ca:a9:a8:
                    8b:e7:2a:3b:13:71:6a:6d:11:67:ab:d3:7d:eb:1e:
                    08:39:93:00:f3:5f:b6:7f:d7:b1:f5:9d:c7:9b:0f:
                    ab:9b:61:3b:4a:21:f3:ad:90:ee:fd:43:ac:d6:b5:
                    2b:c0:d6:90:75:4b:cc:2e:e2:dc:f5:29:a8:8c:c4:
                    34:63:31:36:56:40:51:4d:25:53:cb:dc:68:b4:c8:
                    ac:8c:37:85:30:05:d7:ef:e2:e8:52:d3:d0:27:1a:
                    28:d5:06:14:fd:7b:b5:f9:e0:dd:0a:03:df:4d:c4:
                    1e:23:8d:a5:dc:e9:50:6f:35:c4:56:37:24:a3:48:
                    8b:9d:65:b7:10:4a:a8:95:a4:7a:51:ca:8c:76:e7:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F9:71:41:7E:6B:D8:6B:E8:69:8C:18:FE:97:43:B2:6F:96:89:BB
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33332d3333203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:68:31:7b:d3:e3:e5:d6:58:77:75:8b:65:4c:bc:9b:d7:ae:
         6a:b9:36:0c:c5:e1:84:38:16:ae:d1:62:15:e3:03:5c:c6:38:
         bd:f0:d4:f8:1a:4b:2e:01:3b:1e:e7:6b:31:2c:e3:8d:4f:1d:
         9c:79:3b:af:2b:6c:44:cd:0f:f8:65:9a:36:24:c5:b5:e3:72:
         74:25:13:f6:35:67:b4:4b:65:27:23:14:e3:72:e3:63:bb:ae:
         30:88:ba:90:fc:e1:fe:ca:80:b9:f5:50:58:f4:12:ad:17:dd:
         fe:4e:2a:9e:f9:05:80:bc:b5:48:b9:b6:fb:1a:b7:16:a1:f0:
         dd:e4:47:eb:f0:08:e2:d1:50:fb:34:af:2f:78:d4:73:51:06:
         e0:e8:fe:8d:ba:27:94:17:ed:c1:fe:a5:96:84:7f:64:8e:bc:
         f1:5f:71:25:a5:b6:3b:75:d4:7f:de:4f:b7:bd:0c:51:af:b2:
         94:0f:bb:89:30:ba:4d:9b:56:5f:85:6f:64:80:91:70:32:07:
         7d:4f:16:8e:ef:43:5c:e4:42:66:d4:45:cb:3f:94:39:1a:ac:
         93:c1:50:b3:22:c7:60:dc:21:13:3b:5d:b5:20:06:7e:b1:e0:
         ba:28:c5:1b:65:d0:ed:a8:44:11:47:cc:4a:49:c0:5b:c0:5b:
         73:0e:6c:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAMF6vHWMoA7W/vIZuMZsMmJZQ2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg2MzgyNzZCOTI0NjZCREYwMzAzQzYxODY0OTRBQ0Y1
OUMwNEUwMjAeFw0yNDA3MjkxMzEwNTJaFw0yNTA3MjgxMzE1NTJaMDMxMTAvBgNV
BAMTKEEyRjk3MTQxN0U2QkQ4NkJFODY5OEMxOEZFOTc0M0IyNkY5Njg5QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5CR2+YHyK1y+bLEGL6bTVHG2
3tb1G+jWRzu2w3qF7sGd9Lw9TpWODruVg90E5gBeV5o2HO3RBhaCrs0mXYpcrMlK
r8By/wT34qgBSOGiAXeEANN5w86Qk8gMhFFqvX3RWg6X02xzR+5zIYFtnRAF67Rv
VcqpqIvnKjsTcWptEWer033rHgg5kwDzX7Z/17H1ncebD6ubYTtKIfOtkO79Q6zW
tSvA1pB1S8wu4tz1KaiMxDRjMTZWQFFNJVPL3Gi0yKyMN4UwBdfv4uhS09AnGijV
BhT9e7X54N0KA99NxB4jjaXc6VBvNcRWNySjSIudZbcQSqiVpHpRyox256FZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUovlxQX5r2GvoaYwY/pdDsm+WibswHwYDVR0j
BBgwFoAUCGOCdrkkZr3wMDxhhklKz1nATgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5kckozRWFEQ1hTUTdZbVo5WXFEWmZGUWoxOG10bVN3UXROdFRxMnlH
S3UvMC8wODYzODI3NkI5MjQ2NkJERjAzMDNDNjE4NjQ5NEFDRjU5QzA0RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NjM4Mjc2QjkyNDY2QkRG
MDMwM0M2MTg2NDk0QUNGNTlDMDRFMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuZHJKM0VhRENYU1E3WW1aOVlxRFpmRlFqMThtdG1Td1F0TnRUcTJ5R0t1LzAv
MzIzODMwMzQzYTMzMzUzMzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzIzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ1OAAwDQYJKoZIhvcNAQELBQADggEBACxoMXvT
4+XWWHd1i2VMvJvXrmq5NgzF4YQ4Fq7RYhXjA1zGOL3w1PgaSy4BOx7nazEs441P
HZx5O68rbETND/hlmjYkxbXjcnQlE/Y1Z7RLZScjFONy42O7rjCIupD84f7KgLn1
UFj0Eq0X3f5OKp75BYC8tUi5tvsatxah8N3kR+vwCOLRUPs0ry941HNRBuDo/o26
J5QX7cH+pZaEf2SOvPFfcSWltjt11H/eT7e9DFGvspQPu4kwuk2bVl+Fb2SAkXAy
B31PFo7vQ1zkQmbURcs/lDkarJPBULMix2DcIRM7XbUgBn6x4LooxRtl0O2oRBFH
zEpJwFvAW3MObMQ=
-----END CERTIFICATE-----