Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f33322d313238203d3e20323632373133.roa
File:                     323830343a3634303a3a2f33322d313238203d3e20323632373133.roa (raw, json)
Hash identifier:          haMbdn0HkVQGq8Rz+KdQ0z1sLm50BVe/owZeA8UIuYA=
Subject key identifier:   46:29:7C:44:E0:86:AF:49:5D:33:79:8F:8D:9B:05:38:14:F5:6D:41
Certificate issuer:       /CN=D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08
Certificate serial:       5694C78413A9C9FD2D9DD373BD7462E1BBA655D7
Authority key identifier: D3:0A:7F:0D:5F:EF:AA:89:69:BA:F3:36:EF:F4:2D:A0:F4:69:AC:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f33322d313238203d3e20323632373133.roa
Signing time:             Tue 27 Aug 2024 16:04:37 +0000
ROA not before:           Tue 27 Aug 2024 15:59:37 +0000
ROA not after:            Tue 26 Aug 2025 16:04:37 +0000
asID:                     262713
IP address blocks:        2804:640::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:94:c7:84:13:a9:c9:fd:2d:9d:d3:73:bd:74:62:e1:bb:a6:55:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08
        Validity
            Not Before: Aug 27 15:59:37 2024 GMT
            Not After : Aug 26 16:04:37 2025 GMT
        Subject: CN=46297C44E086AF495D33798F8D9B053814F56D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:0a:cf:2c:d1:91:19:b6:46:54:37:89:c8:
                    e5:5d:b2:0f:95:33:67:84:97:b0:41:c8:87:e1:a3:
                    ed:82:43:bb:6c:17:9b:40:09:47:48:d4:85:a0:61:
                    1c:a1:94:c3:92:f8:67:5a:30:fd:46:ba:93:f1:be:
                    a5:c2:14:29:93:24:03:84:90:2b:41:36:54:89:b7:
                    cb:73:b7:7f:a4:c7:d8:64:b1:99:ee:19:d2:09:88:
                    2d:a8:0b:83:1e:67:21:23:00:7a:91:ad:63:22:c6:
                    95:0b:0a:e1:ac:58:77:fc:98:37:6d:0f:80:6f:83:
                    9c:1d:d2:20:bf:f5:31:fd:fd:bd:96:ae:8a:bd:0e:
                    32:a2:13:92:b4:f8:cf:25:34:7c:f4:e1:ef:4f:c8:
                    32:80:30:0a:85:c1:c7:1d:c7:49:0c:c3:99:55:15:
                    0f:5a:cc:b5:67:25:72:3c:f3:30:8d:eb:8b:d6:42:
                    0c:7c:0b:95:cd:7d:e4:a9:bd:09:45:4f:f8:cd:11:
                    19:a2:e2:ec:7f:72:fe:ed:a9:3e:52:e5:17:52:78:
                    9a:59:26:1c:37:7d:0c:52:fb:0c:4d:8a:5d:bb:76:
                    9e:36:fc:e0:72:a2:e3:80:37:e5:04:99:37:fb:24:
                    4d:c6:3e:b7:17:c0:94:9b:b7:55:06:3c:6e:2d:b9:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:29:7C:44:E0:86:AF:49:5D:33:79:8F:8D:9B:05:38:14:F5:6D:41
            X509v3 Authority Key Identifier:
                keyid:D3:0A:7F:0D:5F:EF:AA:89:69:BA:F3:36:EF:F4:2D:A0:F4:69:AC:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D30A7F0D5FEFAA8969BAF336EFF42DA0F469AC08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f33322d313238203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:38:06:66:0e:97:f7:04:d1:75:87:c1:88:bb:fe:24:26:
         7f:eb:61:da:92:65:c9:85:d0:af:7c:17:c1:b5:d9:da:c7:b7:
         21:38:95:c6:84:82:44:f0:3a:73:63:7f:eb:8a:85:40:55:67:
         6d:0f:11:9a:cc:48:48:5d:bb:e0:d3:a8:fc:3b:4f:59:17:7c:
         aa:5f:50:53:3e:68:d6:5d:a1:1b:00:35:f1:60:63:f6:1a:36:
         5c:ab:3b:4b:b7:f3:d6:4a:fd:6a:4e:8a:57:4b:6f:6c:17:79:
         97:b7:78:ee:7e:41:d9:ca:5e:74:6c:85:6b:6f:d0:d9:45:fc:
         67:b2:25:24:9c:f9:c6:08:07:d7:f6:ae:ab:62:ff:d8:89:f6:
         7d:b8:51:50:3d:a0:d4:5d:2d:07:70:f4:96:c8:56:77:2f:ca:
         8f:ba:e5:df:de:4d:45:27:17:3b:3c:26:cb:d0:11:a0:35:3d:
         a6:cf:85:7c:e8:bf:54:16:b3:b6:78:0d:2a:85:f8:17:3f:57:
         8d:81:d8:b3:bc:57:94:bb:82:f7:86:b3:7c:8d:65:1d:74:ae:
         4d:30:66:ff:52:5c:d6:97:1f:8a:ab:a7:c3:ea:8d:1a:cd:08:
         28:63:13:8b:c7:44:a8:cf:cd:3a:02:0a:37:69:3a:15:8d:83:
         6e:30:8f:c6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVpTHhBOpyf0tndNzvXRi4bumVdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMwQTdGMEQ1RkVGQUE4OTY5QkFGMzM2RUZGNDJEQTBG
NDY5QUMwODAeFw0yNDA4MjcxNTU5MzdaFw0yNTA4MjYxNjA0MzdaMDMxMTAvBgNV
BAMTKDQ2Mjk3QzQ0RTA4NkFGNDk1RDMzNzk4RjhEOUIwNTM4MTRGNTZENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGvwrPLNGRGbZGVDeJyOVdsg+V
M2eEl7BByIfho+2CQ7tsF5tACUdI1IWgYRyhlMOS+GdaMP1GupPxvqXCFCmTJAOE
kCtBNlSJt8tzt3+kx9hksZnuGdIJiC2oC4MeZyEjAHqRrWMixpULCuGsWHf8mDdt
D4Bvg5wd0iC/9TH9/b2Wroq9DjKiE5K0+M8lNHz04e9PyDKAMAqFwccdx0kMw5lV
FQ9azLVnJXI88zCN64vWQgx8C5XNfeSpvQlFT/jNERmi4ux/cv7tqT5S5RdSeJpZ
Jhw3fQxS+wxNil27dp42/OByouOAN+UEmTf7JE3GPrcXwJSbt1UGPG4tuS1HAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURil8ROCGr0ldM3mPjZsFOBT1bUEwHwYDVR0j
BBgwFoAU0wp/DV/vqolpuvM27/QtoPRprAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN043aVRUNHFHNTRvcmFTY3RlODFja1ZRWThxTWF3QjJwRjMxWDU1RTZY
OTEvMC9EMzBBN0YwRDVGRUZBQTg5NjlCQUYzMzZFRkY0MkRBMEY0NjlBQzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMEE3RjBENUZFRkFBODk2
OUJBRjMzNkVGRjQyREEwRjQ2OUFDMDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdON2lUVDRxRzU0b3JhU2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAv
MzIzODMwMzQzYTM2MzQzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMy
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQGQDANBgkqhkiG9w0BAQsFAAOCAQEAPKA4BmYO
l/cE0XWHwYi7/iQmf+th2pJlyYXQr3wXwbXZ2se3ITiVxoSCRPA6c2N/64qFQFVn
bQ8RmsxISF274NOo/DtPWRd8ql9QUz5o1l2hGwA18WBj9ho2XKs7S7fz1kr9ak6K
V0tvbBd5l7d47n5B2cpedGyFa2/Q2UX8Z7IlJJz5xggH1/auq2L/2In2fbhRUD2g
1F0tB3D0lshWdy/Kj7rl395NRScXOzwmy9ARoDU9ps+FfOi/VBaztngNKoX4Fz9X
jYHYs7xXlLuC94azfI1lHXSuTTBm/1Jc1pcfiqunw+qNGs0IKGMTi8dEqM/NOgIK
N2k6FY2DbjCPxg==
-----END CERTIFICATE-----