Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/323030313a313261633a3a2f33322d3438203d3e203238333632.roa
File:                     323030313a313261633a3a2f33322d3438203d3e203238333632.roa (raw, json)
Hash identifier:          /tstJh7TNjRtCjmzn0x2oDe5HvH72Zgqc0ub7AAUOeo=
Subject key identifier:   0F:0A:01:7E:65:1C:52:E8:7D:A5:7A:9F:D3:0E:17:A4:7D:2B:32:40
Certificate issuer:       /CN=82F50432BA8427D157709F5EB0F6ECA7498B3E40
Certificate serial:       496484CE447826524F30A82EF233EE2FEB5E5512
Authority key identifier: 82:F5:04:32:BA:84:27:D1:57:70:9F:5E:B0:F6:EC:A7:49:8B:3E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82F50432BA8427D157709F5EB0F6ECA7498B3E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/323030313a313261633a3a2f33322d3438203d3e203238333632.roa
Signing time:             Thu 04 Apr 2024 16:06:27 +0000
ROA not before:           Thu 04 Apr 2024 16:01:27 +0000
ROA not after:            Thu 03 Apr 2025 16:06:27 +0000
asID:                     28362
IP address blocks:        2001:12ac::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:84:ce:44:78:26:52:4f:30:a8:2e:f2:33:ee:2f:eb:5e:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82F50432BA8427D157709F5EB0F6ECA7498B3E40
        Validity
            Not Before: Apr  4 16:01:27 2024 GMT
            Not After : Apr  3 16:06:27 2025 GMT
        Subject: CN=0F0A017E651C52E87DA57A9FD30E17A47D2B3240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:3f:b2:8e:b1:ab:b0:da:4b:6f:a9:89:c8:
                    b6:37:67:2c:55:89:95:0e:2f:0e:df:52:dc:d3:bf:
                    d4:54:71:e2:d4:5d:07:50:eb:15:07:40:53:0a:5c:
                    21:f0:fc:3c:88:d2:45:78:13:36:ef:d1:68:94:df:
                    f0:f9:e5:68:86:8c:bc:34:9a:5d:52:cb:12:f8:af:
                    48:05:9a:6a:ad:cd:5e:44:5c:25:94:6d:54:45:1c:
                    4a:97:36:f1:b0:e7:3d:cb:24:80:c4:03:6e:5b:2b:
                    74:4b:72:fe:ea:3d:fd:65:75:e8:9e:c7:47:93:37:
                    bc:2c:4f:d6:e9:4d:10:5f:a5:f1:5d:28:a1:02:30:
                    14:f6:d2:e2:6d:ec:25:0b:1f:73:fb:55:a2:71:4d:
                    34:fb:04:e8:74:85:59:91:17:ac:94:85:39:25:ba:
                    52:08:34:a7:3a:cf:b9:60:56:15:09:36:b4:53:5d:
                    59:19:d4:eb:79:87:70:a6:71:47:76:11:75:ad:55:
                    f1:e3:eb:91:6f:2a:77:c3:98:e4:34:04:d8:a9:55:
                    24:55:75:76:05:f3:28:89:31:02:3e:29:6a:9b:46:
                    a8:04:8d:b5:0a:fb:62:64:e5:86:d4:f2:f4:98:ce:
                    40:3b:3b:5c:e1:56:13:83:35:11:3d:d9:b9:64:c6:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:01:7E:65:1C:52:E8:7D:A5:7A:9F:D3:0E:17:A4:7D:2B:32:40
            X509v3 Authority Key Identifier:
                keyid:82:F5:04:32:BA:84:27:D1:57:70:9F:5E:B0:F6:EC:A7:49:8B:3E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/82F50432BA8427D157709F5EB0F6ECA7498B3E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82F50432BA8427D157709F5EB0F6ECA7498B3E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dmsnqSrinoGdoAzkC8Zt9xsD3Wy9KngBdEaxJrb8dvS/1/323030313a313261633a3a2f33322d3438203d3e203238333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:82:ba:b9:fa:f2:26:55:5f:c3:a7:13:78:1e:a8:fd:01:
         8f:d0:b9:19:ff:27:01:21:57:c3:70:a9:86:7b:98:ba:f0:d4:
         5e:4e:9a:7d:0e:7f:4e:90:5b:66:ec:aa:d0:14:eb:36:b0:ec:
         fd:53:7f:c9:38:cf:e9:d7:1a:56:7e:7a:04:0c:69:ee:4d:1a:
         e4:31:36:92:c2:b9:a8:8d:19:80:7c:06:23:0a:f4:00:75:76:
         70:79:a1:25:34:7b:cc:a5:87:a2:d2:d0:74:46:06:7e:d1:1a:
         c4:a5:39:78:64:02:99:b7:a0:31:a1:88:a6:2a:27:52:4e:bd:
         60:1f:d7:98:d9:92:3b:a1:e3:5e:e0:20:ac:9e:1b:66:75:51:
         3a:fc:dd:67:de:ab:c2:e4:59:7b:d5:7b:ec:4e:30:52:27:7c:
         84:2d:a3:84:cb:e3:74:b9:22:36:29:7e:23:6f:41:31:fb:0f:
         ea:f7:13:cd:9f:da:da:64:83:cb:a3:1f:6c:d8:d2:b1:5a:9e:
         e4:8b:55:63:f8:1b:75:bd:3d:80:09:7a:41:e4:68:44:fa:f3:
         50:48:b9:f0:63:12:6d:fe:b7:17:92:a7:4d:a5:7a:38:2c:57:
         aa:e5:a1:f6:29:8a:d7:92:b7:2e:8b:bc:bf:45:be:0f:85:f5:
         f3:b6:31:0b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSWSEzkR4JlJPMKgu8jPuL+teVRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGNTA0MzJCQTg0MjdEMTU3NzA5RjVFQjBGNkVDQTc0
OThCM0U0MDAeFw0yNDA0MDQxNjAxMjdaFw0yNTA0MDMxNjA2MjdaMDMxMTAvBgNV
BAMTKDBGMEEwMTdFNjUxQzUyRTg3REE1N0E5RkQzMEUxN0E0N0QyQjMyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxTj+yjrGrsNpLb6mJyLY3ZyxV
iZUOLw7fUtzTv9RUceLUXQdQ6xUHQFMKXCHw/DyI0kV4Ezbv0WiU3/D55WiGjLw0
ml1SyxL4r0gFmmqtzV5EXCWUbVRFHEqXNvGw5z3LJIDEA25bK3RLcv7qPf1ldeie
x0eTN7wsT9bpTRBfpfFdKKECMBT20uJt7CULH3P7VaJxTTT7BOh0hVmRF6yUhTkl
ulIINKc6z7lgVhUJNrRTXVkZ1Ot5h3CmcUd2EXWtVfHj65FvKnfDmOQ0BNipVSRV
dXYF8yiJMQI+KWqbRqgEjbUK+2Jk5YbU8vSYzkA7O1zhVhODNRE92blkxo//AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDwoBfmUcUuh9pXqf0w4XpH0rMkAwHwYDVR0j
BBgwFoAUgvUEMrqEJ9FXcJ9esPbsp0mLPkAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2Rtc25xU3Jpbm9HZG9BemtDOFp0OXhzRDNXeTlLbmdCZEVheEpyYjhk
dlMvMS84MkY1MDQzMkJBODQyN0QxNTc3MDlGNUVCMEY2RUNBNzQ5OEIzRTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgyRjUwNDMyQkE4NDI3RDE1
NzcwOUY1RUIwRjZFQ0E3NDk4QjNFNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdkbXNucVNyaW5vR2RvQXprQzhadDl4c0QzV3k5S25nQmRFYXhKcmI4ZHZTLzEv
MzIzMDMwMzEzYTMxMzI2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzODMz
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACABEqwwDQYJKoZIhvcNAQELBQADggEBAG9mgrq5+vIm
VV/DpxN4Hqj9AY/QuRn/JwEhV8NwqYZ7mLrw1F5Omn0Of06QW2bsqtAU6zaw7P1T
f8k4z+nXGlZ+egQMae5NGuQxNpLCuaiNGYB8BiMK9AB1dnB5oSU0e8ylh6LS0HRG
Bn7RGsSlOXhkApm3oDGhiKYqJ1JOvWAf15jZkjuh417gIKyeG2Z1UTr83Wfeq8Lk
WXvVe+xOMFInfIQto4TL43S5IjYpfiNvQTH7D+r3E82f2tpkg8ujH2zY0rFanuSL
VWP4G3W9PYAJekHkaET681BIufBjEm3+txeSp02lejgsV6rlofYpiteSty6LvL9F
vg+F9fO2MQs=
-----END CERTIFICATE-----