Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33352d3335203d3e20323636323735.roa
File:                     323830343a333533383a3a2f33352d3335203d3e20323636323735.roa (raw, json)
Hash identifier:          k3cxBwuUhKDIYr9DFgZnZw9mEwG1saSrUks7r+hOi6s=
Subject key identifier:   F5:5B:84:87:B9:4F:8E:BA:27:2D:4D:AF:5C:B3:1B:EA:E5:90:AB:F0
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       30E5569A74AFB2037A4830C6D97887E87B33034C
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33352d3335203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:58:02 +0000
ROA not before:           Mon 29 Jul 2024 13:53:02 +0000
ROA not after:            Mon 28 Jul 2025 13:58:02 +0000
asID:                     266275
IP address blocks:        2804:3538::/35 maxlen: 35

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e5:56:9a:74:af:b2:03:7a:48:30:c6:d9:78:87:e8:7b:33:03:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:53:02 2024 GMT
            Not After : Jul 28 13:58:02 2025 GMT
        Subject: CN=F55B8487B94F8EBA272D4DAF5CB31BEAE590ABF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:9b:c0:61:98:0d:49:7a:d4:d7:4a:c4:96:
                    45:e9:b9:12:8b:24:2c:74:b6:ce:f2:4c:67:54:f2:
                    7a:0a:f0:b9:1d:cb:90:42:71:ab:e7:00:b0:34:99:
                    c4:ce:e9:36:a4:57:63:8a:f5:80:2b:38:99:71:a9:
                    b4:45:20:71:f1:de:08:a2:2a:36:bc:85:dd:6e:84:
                    be:c3:d2:67:91:78:d2:70:ea:b2:8d:92:24:26:ac:
                    61:f7:fe:2e:6c:ca:97:b0:9a:3c:59:d6:3b:bb:2b:
                    57:15:b8:ed:8f:39:ec:85:21:99:2d:5d:3e:de:71:
                    19:f4:a8:7d:15:15:8a:f6:22:af:d2:13:b5:d8:b9:
                    bc:7c:e9:57:57:01:52:44:d2:2e:cc:85:e3:96:80:
                    2d:a0:03:98:87:ec:83:29:6c:fe:a0:66:92:ad:d3:
                    81:d5:8a:dd:29:54:31:70:59:e6:7e:73:32:cb:ca:
                    0e:6b:42:61:0c:48:e2:9b:3e:70:b3:8f:cd:05:14:
                    74:1f:d4:bf:74:68:01:48:d5:5d:52:dc:62:23:62:
                    cf:e8:b6:4e:79:00:1e:39:b8:17:b8:d0:08:67:fb:
                    0d:3f:21:92:ed:11:95:7e:07:8f:43:9f:95:3a:19:
                    df:c8:bd:c0:6d:49:5b:bd:7c:e7:92:d2:2d:02:42:
                    83:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:84:87:B9:4F:8E:BA:27:2D:4D:AF:5C:B3:1B:EA:E5:90:AB:F0
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/323830343a333533383a3a2f33352d3335203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3538::/35

    Signature Algorithm: sha256WithRSAEncryption
         42:d8:cb:7f:2f:b0:d4:51:8c:81:ed:60:c2:59:11:1b:01:81:
         9b:e3:0c:5d:bf:d2:f4:01:cb:61:5d:10:02:d7:d5:c1:14:7a:
         b7:97:44:61:70:57:84:24:51:03:5e:6d:3f:9e:9f:35:97:cc:
         38:90:05:73:60:96:08:48:dd:8b:2c:12:6f:59:14:0e:24:2c:
         30:d3:95:1c:54:c9:92:15:b6:22:91:0c:8a:2f:4a:fe:83:68:
         12:29:00:a1:e3:4d:cd:db:47:9f:d0:f9:54:90:cb:94:4d:79:
         d4:1a:a7:3b:c0:c5:8d:46:0d:ef:74:36:58:f5:a8:6d:57:eb:
         63:01:39:5b:9e:d8:52:21:64:2c:a4:e6:8d:6b:a0:75:ee:19:
         98:06:3e:6f:68:83:ff:be:94:51:76:21:a4:4e:da:f2:dc:3f:
         b0:ce:1c:f8:47:d0:a8:43:31:ef:0b:31:35:a6:64:41:86:98:
         3e:b1:7d:e1:32:dd:f3:3d:71:0f:88:d9:41:1f:b5:95:d9:8a:
         55:ba:96:b9:0a:3b:f6:1b:a5:25:ed:2b:33:6f:4f:3e:65:c2:
         ad:85:e9:b1:87:37:f5:04:38:c6:36:4c:cf:83:17:08:97:df:
         a5:57:41:d3:c3:cd:0f:e6:e2:e0:0a:a7:62:03:cd:ff:93:4b:
         d0:f4:71:32
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMOVWmnSvsgN6SDDG2XiH6HszA0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg2MzgyNzZCOTI0NjZCREYwMzAzQzYxODY0OTRBQ0Y1
OUMwNEUwMjAeFw0yNDA3MjkxMzUzMDJaFw0yNTA3MjgxMzU4MDJaMDMxMTAvBgNV
BAMTKEY1NUI4NDg3Qjk0RjhFQkEyNzJENERBRjVDQjMxQkVBRTU5MEFCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepZvAYZgNSXrU10rElkXpuRKL
JCx0ts7yTGdU8noK8Lkdy5BCcavnALA0mcTO6TakV2OK9YArOJlxqbRFIHHx3gii
Kja8hd1uhL7D0meReNJw6rKNkiQmrGH3/i5sypewmjxZ1ju7K1cVuO2POeyFIZkt
XT7ecRn0qH0VFYr2Iq/SE7XYubx86VdXAVJE0i7MheOWgC2gA5iH7IMpbP6gZpKt
04HVit0pVDFwWeZ+czLLyg5rQmEMSOKbPnCzj80FFHQf1L90aAFI1V1S3GIjYs/o
tk55AB45uBe40Ahn+w0/IZLtEZV+B49Dn5U6Gd/IvcBtSVu9fOeS0i0CQoM3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9VuEh7lPjronLU2vXLMb6uWQq/AwHwYDVR0j
BBgwFoAUCGOCdrkkZr3wMDxhhklKz1nATgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5kckozRWFEQ1hTUTdZbVo5WXFEWmZGUWoxOG10bVN3UXROdFRxMnlH
S3UvMC8wODYzODI3NkI5MjQ2NkJERjAzMDNDNjE4NjQ5NEFDRjU5QzA0RTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NjM4Mjc2QjkyNDY2QkRG
MDMwM0M2MTg2NDk0QUNGNTlDMDRFMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuZHJKM0VhRENYU1E3WW1aOVlxRFpmRlFqMThtdG1Td1F0TnRUcTJ5R0t1LzAv
MzIzODMwMzQzYTMzMzUzMzM4M2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM2
MzIzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKAQ1OAAwDQYJKoZIhvcNAQELBQADggEBAELYy38v
sNRRjIHtYMJZERsBgZvjDF2/0vQBy2FdEALX1cEUereXRGFwV4QkUQNebT+enzWX
zDiQBXNglghI3YssEm9ZFA4kLDDTlRxUyZIVtiKRDIovSv6DaBIpAKHjTc3bR5/Q
+VSQy5RNedQapzvAxY1GDe90Nlj1qG1X62MBOVue2FIhZCyk5o1roHXuGZgGPm9o
g/++lFF2IaRO2vLcP7DOHPhH0KhDMe8LMTWmZEGGmD6xfeEy3fM9cQ+I2UEftZXZ
ilW6lrkKO/YbpSXtKzNvTz5lwq2F6bGHN/UEOMY2TM+DFwiX36VXQdPDzQ/m4uAK
p2IDzf+TS9D0cTI=
-----END CERTIFICATE-----