Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/323830343a313137633a3a2f33322d3332203d3e203533303631.roa
File:                     323830343a313137633a3a2f33322d3332203d3e203533303631.roa (raw, json)
Hash identifier:          NogGxKUoxc40Apjm0VbSUWuM+ruJ8xGFtNJxgPXK2oY=
Subject key identifier:   BD:59:2F:A2:A7:29:6A:65:E0:05:3A:FB:AE:D7:13:9F:20:E8:20:B6
Certificate issuer:       /CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
Certificate serial:       09AC83DD5AE508897521C7C505B5DD9223AAC468
Authority key identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/323830343a313137633a3a2f33322d3332203d3e203533303631.roa
Signing time:             Thu 04 Apr 2024 19:52:53 +0000
ROA not before:           Thu 04 Apr 2024 19:47:53 +0000
ROA not after:            Thu 03 Apr 2025 19:52:53 +0000
asID:                     53061
IP address blocks:        2804:117c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ac:83:dd:5a:e5:08:89:75:21:c7:c5:05:b5:dd:92:23:aa:c4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
        Validity
            Not Before: Apr  4 19:47:53 2024 GMT
            Not After : Apr  3 19:52:53 2025 GMT
        Subject: CN=BD592FA2A7296A65E0053AFBAED7139F20E820B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:24:ee:98:bc:96:a2:f6:03:99:2d:ef:bf:
                    07:47:6e:80:54:ad:fb:4e:b9:c8:09:a4:ec:be:be:
                    4f:5b:0c:47:bf:7f:72:f4:a9:14:8b:48:15:58:c8:
                    67:df:37:59:7d:06:08:3a:da:6b:80:53:26:63:01:
                    10:f4:0f:d7:8a:f7:f0:4e:9c:53:1c:93:4f:53:a2:
                    6a:33:fc:b9:e1:24:38:28:87:c4:43:51:7a:61:4b:
                    33:bd:4e:3f:2e:02:c6:e2:e7:06:64:6b:6f:14:ac:
                    54:79:d1:bc:20:c2:37:0a:75:21:c1:16:98:b2:0b:
                    1b:2c:54:26:6f:46:f4:8a:d4:ff:3a:1f:43:b2:2d:
                    bf:5d:b1:c0:85:cf:6d:87:1d:6b:cb:9a:d5:6d:8b:
                    1c:5b:70:2b:0e:45:9a:dc:1b:4d:b6:02:0d:a8:e3:
                    8c:fb:17:86:c1:58:4e:d8:87:95:a5:3c:72:ca:ce:
                    89:04:09:a8:c8:56:a2:ec:3b:a1:ca:93:7b:a7:24:
                    47:90:32:52:2a:74:bc:92:12:a2:ff:d9:61:26:6f:
                    a0:bc:2b:56:ba:c7:53:48:90:59:e2:71:27:6a:5c:
                    12:84:a2:d2:f5:47:76:2e:33:64:c7:bf:e1:cd:ea:
                    78:ff:9b:8e:70:69:ab:55:29:14:a4:e5:4f:24:ef:
                    d2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:2F:A2:A7:29:6A:65:E0:05:3A:FB:AE:D7:13:9F:20:E8:20:B6
            X509v3 Authority Key Identifier:
                keyid:F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/323830343a313137633a3a2f33322d3332203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:117c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:7c:78:98:5c:60:39:36:fe:5e:13:3b:78:12:b7:b0:42:
         2b:49:a1:31:14:67:2e:5d:ec:96:ac:50:8b:33:da:93:ab:c7:
         0f:f9:b9:c3:cb:e3:43:1e:f6:86:62:a0:10:b7:dc:8e:4f:11:
         6a:53:e0:d0:77:54:85:3e:cd:50:00:49:5e:79:ed:fa:18:6d:
         23:fc:0d:f5:74:86:a9:bd:9e:c9:27:58:2b:86:25:26:d4:97:
         f9:0e:b0:b3:3d:6e:d4:82:4c:4a:65:8c:1d:ce:cf:b0:fe:26:
         cc:bb:ef:bf:fd:7e:de:6e:ac:19:26:14:02:70:37:cc:67:3f:
         06:cf:f4:6e:81:79:c0:40:7c:1c:e6:51:ae:7b:74:7e:e1:d9:
         f6:62:c6:0c:6d:d5:6b:eb:9a:ba:24:2c:49:20:49:d6:68:54:
         ad:4c:3c:63:4a:ac:86:02:aa:b9:81:78:fc:0c:21:87:a6:58:
         c1:46:a7:3d:b8:61:4c:d5:ed:e7:5e:cd:95:7d:4c:bf:d2:ba:
         b8:b5:9a:32:40:02:c7:00:02:92:0b:bb:5e:9b:f3:5a:34:2e:
         ed:91:eb:98:96:56:65:f5:1d:db:45:49:1b:e1:33:76:4b:c0:
         c3:ab:97:38:b4:7c:bb:37:66:ed:ad:bb:4d:45:b2:71:3d:34:
         9d:06:f5:b2
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCayD3VrlCIl1IcfFBbXdkiOqxGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQzNTBEMEY3OTQwRDJDOUUxOTNBMjdDMEExNEI2NTEz
OTYxNDFENjAeFw0yNDA0MDQxOTQ3NTNaFw0yNTA0MDMxOTUyNTNaMDMxMTAvBgNV
BAMTKEJENTkyRkEyQTcyOTZBNjVFMDA1M0FGQkFFRDcxMzlGMjBFODIwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42STumLyWovYDmS3vvwdHboBU
rftOucgJpOy+vk9bDEe/f3L0qRSLSBVYyGffN1l9Bgg62muAUyZjARD0D9eK9/BO
nFMck09Tomoz/LnhJDgoh8RDUXphSzO9Tj8uAsbi5wZka28UrFR50bwgwjcKdSHB
FpiyCxssVCZvRvSK1P86H0OyLb9dscCFz22HHWvLmtVtixxbcCsORZrcG022Ag2o
44z7F4bBWE7Yh5WlPHLKzokECajIVqLsO6HKk3unJEeQMlIqdLySEqL/2WEmb6C8
K1a6x1NIkFnicSdqXBKEotL1R3YuM2THv+HN6nj/m45waatVKRSk5U8k79IZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUvVkvoqcpamXgBTr7rtcTnyDoILYwHwYDVR0j
BBgwFoAU9DUND3lA0snhk6J8ChS2UTlhQdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMS9GNDM1MEQwRjc5NDBEMkM5RTE5M0EyN0MwQTE0QjY1MTM5NjE0MUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MzUwRDBGNzk0MEQyQzlF
MTkzQTI3QzBBMTRCNjUxMzk2MTQxRDYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzEv
MzIzODMwMzQzYTMxMzEzNzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMzMw
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEEXwwDQYJKoZIhvcNAQELBQADggEBAG/ifHiYXGA5
Nv5eEzt4ErewQitJoTEUZy5d7JasUIsz2pOrxw/5ucPL40Me9oZioBC33I5PEWpT
4NB3VIU+zVAASV557foYbSP8DfV0hqm9nsknWCuGJSbUl/kOsLM9btSCTEpljB3O
z7D+Jsy777/9ft5urBkmFAJwN8xnPwbP9G6BecBAfBzmUa57dH7h2fZixgxt1Wvr
mrokLEkgSdZoVK1MPGNKrIYCqrmBePwMIYemWMFGpz24YUzV7edezZV9TL/Suri1
mjJAAscAApILu16b81o0Lu2R65iWVmX1HdtFSRvhM3ZLwMOrlzi0fLs3Zu2tu01F
snE9NJ0G9bI=
-----END CERTIFICATE-----