Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/323830343a356337303a3a2f33322d313238203d3e20323638393039.roa
File:                     323830343a356337303a3a2f33322d313238203d3e20323638393039.roa (raw, json)
Hash identifier:          jAQbJZBADgrPN8IgTzmnvTOrETpN9MZBUbSVavyMO/o=
Subject key identifier:   0A:DA:F6:FD:63:84:5B:06:40:20:7B:E9:03:18:4F:5D:25:AF:25:F0
Certificate issuer:       /CN=D36EAE79059103C5416DAC3F9185031E78EF7E52
Certificate serial:       206900A2A02902DD6B37596B31F7603658C1588A
Authority key identifier: D3:6E:AE:79:05:91:03:C5:41:6D:AC:3F:91:85:03:1E:78:EF:7E:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/323830343a356337303a3a2f33322d313238203d3e20323638393039.roa
Signing time:             Wed 03 Apr 2024 22:47:50 +0000
ROA not before:           Wed 03 Apr 2024 22:42:50 +0000
ROA not after:            Wed 02 Apr 2025 22:47:50 +0000
asID:                     268909
IP address blocks:        2804:5c70::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:69:00:a2:a0:29:02:dd:6b:37:59:6b:31:f7:60:36:58:c1:58:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36EAE79059103C5416DAC3F9185031E78EF7E52
        Validity
            Not Before: Apr  3 22:42:50 2024 GMT
            Not After : Apr  2 22:47:50 2025 GMT
        Subject: CN=0ADAF6FD63845B0640207BE903184F5D25AF25F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:af:46:49:62:ae:c2:8b:17:04:60:fa:68:
                    e5:db:2d:e5:1d:33:38:b6:bb:f0:5a:1f:42:9c:ee:
                    c8:77:c7:2c:2d:72:56:2b:83:81:a7:ce:96:dd:10:
                    f7:89:cd:5a:0a:f7:4b:b6:c5:a7:d1:82:f7:20:cf:
                    dc:08:f3:98:a6:f0:ce:88:17:84:e5:a8:98:00:ce:
                    ad:e1:c5:41:01:43:66:26:be:c3:2f:07:a4:41:b6:
                    61:f3:75:b1:61:6e:ba:74:9e:7c:e5:d7:e0:98:e7:
                    82:1e:f4:8f:4b:77:11:06:a9:69:5b:d3:62:58:0c:
                    91:8f:b7:52:ad:04:00:f9:54:53:17:bc:80:f9:1a:
                    67:17:bb:af:97:69:5e:5a:01:1b:04:25:c9:28:0d:
                    f0:bb:0e:f1:f9:11:96:0e:4d:b6:aa:8d:27:62:15:
                    b9:be:a0:b9:74:d9:c2:c2:17:a3:95:7f:61:1e:a6:
                    65:9e:60:93:81:e7:89:6a:fa:96:52:22:e6:72:9a:
                    39:a4:88:52:07:d7:d2:8c:2c:cc:71:7d:94:22:a4:
                    60:78:9f:c4:4f:43:00:ed:d3:9c:f8:96:99:d8:ec:
                    60:6e:57:e7:56:bf:f4:1c:f3:4d:de:b5:0b:d8:13:
                    10:09:4a:c7:c5:ee:34:db:9e:ab:8c:c7:be:fb:89:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DA:F6:FD:63:84:5B:06:40:20:7B:E9:03:18:4F:5D:25:AF:25:F0
            X509v3 Authority Key Identifier:
                keyid:D3:6E:AE:79:05:91:03:C5:41:6D:AC:3F:91:85:03:1E:78:EF:7E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/323830343a356337303a3a2f33322d313238203d3e20323638393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c70::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ee:1e:f8:66:3d:93:3a:ab:b7:52:e9:c8:e8:39:97:fa:16:
         1e:39:31:5b:76:77:ef:06:11:18:7c:b5:88:20:54:64:c8:3b:
         f6:f2:62:23:e1:d6:8b:fb:4e:aa:93:f9:cb:a6:46:a1:2e:0c:
         d8:d2:94:6b:1f:9a:f6:19:24:43:22:7d:13:41:d8:49:4c:60:
         9c:cc:3a:33:c9:b5:23:6f:ae:68:0b:05:33:3b:9a:49:89:0b:
         7e:8a:56:99:7d:e6:4e:ba:bb:f9:64:49:76:18:9e:58:c9:c6:
         24:52:a2:67:be:35:1a:66:c6:06:6f:df:45:e1:86:63:9c:fb:
         ae:f3:e8:f1:c3:9c:c8:4d:e8:d4:fe:ec:b2:6b:74:d8:a8:68:
         2d:5e:fc:f2:5a:88:a6:b4:b3:36:69:ca:71:fb:07:ee:a4:5a:
         6c:c1:e3:d3:78:74:c5:26:d4:69:dc:ea:b7:1d:cb:02:81:09:
         ba:a8:da:92:15:36:55:7b:18:3e:b8:bd:75:fd:21:79:54:70:
         f8:c7:86:73:2c:dd:1b:16:92:38:be:1b:1c:c9:a6:76:1f:3a:
         7f:b9:82:24:d1:74:bc:04:20:1f:de:d6:b9:0b:f1:97:80:98:
         c1:a6:ea:38:82:bc:89:49:0d:83:f3:27:2c:b5:b3:5e:17:ab:
         9b:f5:1d:c4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIGkAoqApAt1rN1lrMfdgNljBWIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM2RUFFNzkwNTkxMDNDNTQxNkRBQzNGOTE4NTAzMUU3
OEVGN0U1MjAeFw0yNDA0MDMyMjQyNTBaFw0yNTA0MDIyMjQ3NTBaMDMxMTAvBgNV
BAMTKDBBREFGNkZENjM4NDVCMDY0MDIwN0JFOTAzMTg0RjVEMjVBRjI1RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlq9GSWKuwosXBGD6aOXbLeUd
Mzi2u/BaH0Kc7sh3xywtclYrg4GnzpbdEPeJzVoK90u2xafRgvcgz9wI85im8M6I
F4TlqJgAzq3hxUEBQ2YmvsMvB6RBtmHzdbFhbrp0nnzl1+CY54Ie9I9LdxEGqWlb
02JYDJGPt1KtBAD5VFMXvID5GmcXu6+XaV5aARsEJckoDfC7DvH5EZYOTbaqjSdi
Fbm+oLl02cLCF6OVf2EepmWeYJOB54lq+pZSIuZymjmkiFIH19KMLMxxfZQipGB4
n8RPQwDt05z4lpnY7GBuV+dWv/Qc803etQvYExAJSsfF7jTbnquMx777iaW1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUCtr2/WOEWwZAIHvpAxhPXSWvJfAwHwYDVR0j
BBgwFoAU026ueQWRA8VBbaw/kYUDHnjvflIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnNpcW9LWWI0N0xXMXBRV0R6eWViemJnWkVxdHdpU1BSdENiUjdDdGk2
R2YvMS9EMzZFQUU3OTA1OTEwM0M1NDE2REFDM0Y5MTg1MDMxRTc4RUY3RTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNkVBRTc5MDU5MTAzQzU0
MTZEQUMzRjkxODUwMzFFNzhFRjdFNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZzaXFvS1liNDdMVzFwUVdEenllYnpiZ1pFcXR3aVNQUnRDYlI3Q3RpNkdmLzEv
MzIzODMwMzQzYTM1NjMzNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFxwMA0GCSqGSIb3DQEBCwUAA4IBAQCQ7h74
Zj2TOqu3UunI6DmX+hYeOTFbdnfvBhEYfLWIIFRkyDv28mIj4daL+06qk/nLpkah
LgzY0pRrH5r2GSRDIn0TQdhJTGCczDozybUjb65oCwUzO5pJiQt+ilaZfeZOurv5
ZEl2GJ5YycYkUqJnvjUaZsYGb99F4YZjnPuu8+jxw5zITejU/uyya3TYqGgtXvzy
WoimtLM2acpx+wfupFpswePTeHTFJtRp3Oq3HcsCgQm6qNqSFTZVexg+uL11/SF5
VHD4x4ZzLN0bFpI4vhscyaZ2Hzp/uYIk0XS8BCAf3ta5C/GXgJjBpuo4gryJSQ2D
8ycstbNeF6ub9R3E
-----END CERTIFICATE-----