Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa
File:                     323830343a356466303a3a2f33322d3332203d3e20323639303032.roa (raw, json)
Hash identifier:          viB3Ex8oQDcpMF784xHnYd/8J3UWEb9/idcZfLPeesc=
Subject key identifier:   B8:26:47:FC:2A:1C:72:D0:8F:91:F0:61:6C:A3:3D:C3:64:56:EC:6C
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       5129052F67D256D27944ED05571CA53D0F12DB8B
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:45 +0000
ROA not before:           Thu 04 Apr 2024 02:56:45 +0000
ROA not after:            Thu 03 Apr 2025 03:01:45 +0000
asID:                     269002
IP address blocks:        2804:5df0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:29:05:2f:67:d2:56:d2:79:44:ed:05:57:1c:a5:3d:0f:12:db:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:45 2024 GMT
            Not After : Apr  3 03:01:45 2025 GMT
        Subject: CN=B82647FC2A1C72D08F91F0616CA33DC36456EC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:0f:b8:7a:48:b7:99:bd:d0:5f:f0:f9:a4:
                    81:cb:24:66:c4:4e:1f:c7:78:e2:67:c4:69:b0:53:
                    13:5e:ab:ed:a6:9b:74:41:62:e6:5f:56:68:39:c0:
                    a3:63:5c:d7:ad:89:2c:f7:13:cb:62:09:42:27:2e:
                    c3:22:11:95:ef:fd:9d:b1:70:62:96:13:b2:aa:0b:
                    4c:3c:13:05:b6:db:78:0c:21:5f:20:7e:98:fb:f2:
                    2a:5d:f5:4d:3b:ac:e7:e2:f3:58:5c:82:22:09:32:
                    b6:67:f2:4d:e3:f2:79:42:9c:93:ae:c5:50:92:e0:
                    99:4c:f2:2c:8e:d9:71:c4:e1:db:e1:63:7d:14:8e:
                    52:0c:1e:ce:03:92:74:8b:04:42:cf:f2:81:48:3e:
                    f9:7c:0f:a7:05:e7:75:e1:13:ff:ac:c1:fb:c7:2c:
                    83:fc:a8:db:63:44:72:eb:42:35:6f:d7:49:17:71:
                    62:ae:f0:af:50:9b:b5:ac:c2:fa:f4:91:a4:51:21:
                    20:59:d7:00:ac:89:e6:00:ce:fd:40:68:4c:5e:fb:
                    dd:5e:1a:64:eb:70:3e:cc:25:c0:d7:3a:88:6f:67:
                    0f:4d:00:3e:43:2f:0f:6d:41:ba:7e:05:18:0f:c7:
                    6d:ab:be:13:88:53:03:a4:99:ac:c1:99:e3:62:f7:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:47:FC:2A:1C:72:D0:8F:91:F0:61:6C:A3:3D:C3:64:56:EC:6C
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/323830343a356466303a3a2f33322d3332203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:42:f2:ac:6a:98:f9:d7:4b:23:80:c9:7e:e6:4b:ed:3f:ec:
         be:2a:11:b0:39:a7:19:b5:f9:00:3f:4c:0f:75:4e:d8:aa:04:
         eb:f4:24:07:72:d9:3b:e1:a1:68:5e:48:ec:92:37:2c:fb:8b:
         c7:57:54:a8:ff:23:11:b7:fe:71:8c:30:d8:ba:32:56:78:21:
         d9:db:06:ff:a2:d4:5e:b8:6c:50:83:f5:a2:8e:a6:2b:e0:ad:
         cd:f0:97:7c:4f:af:51:18:e2:bc:0b:fa:e9:04:61:1b:15:17:
         ab:bb:46:28:a5:74:af:98:d9:36:36:25:06:84:6b:8e:68:7d:
         c5:fa:c7:66:9c:87:68:87:54:56:cd:d1:d1:d8:11:8c:b8:9e:
         f4:15:80:f7:19:0a:f3:cb:e3:ec:16:a0:8e:19:c0:fc:0c:8b:
         af:c3:6a:c1:b7:29:bd:cc:95:e9:30:f4:4d:79:e2:66:95:07:
         a7:36:02:9b:2a:a5:94:09:8b:e9:39:43:ce:42:7a:bb:c9:fb:
         97:90:8e:66:d0:54:30:61:38:a2:f6:ad:11:5e:c6:c0:d6:82:
         b6:b3:bd:df:d0:05:cf:22:76:39:7a:ad:b1:2c:d2:25:13:67:
         9d:dc:29:3c:60:b1:f5:fc:10:22:3d:ff:48:8f:30:26:f1:4e:
         c8:54:e5:b6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUSkFL2fSVtJ5RO0FVxylPQ8S24swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVFNzdFQzM3QTMzNkYwNzFGODU1NjVFMjY3NDQ5MDNC
QjNERUMwRDAeFw0yNDA0MDQwMjU2NDVaFw0yNTA0MDMwMzAxNDVaMDMxMTAvBgNV
BAMTKEI4MjY0N0ZDMkExQzcyRDA4RjkxRjA2MTZDQTMzREMzNjQ1NkVDNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Fg+4eki3mb3QX/D5pIHLJGbE
Th/HeOJnxGmwUxNeq+2mm3RBYuZfVmg5wKNjXNetiSz3E8tiCUInLsMiEZXv/Z2x
cGKWE7KqC0w8EwW223gMIV8gfpj78ipd9U07rOfi81hcgiIJMrZn8k3j8nlCnJOu
xVCS4JlM8iyO2XHE4dvhY30UjlIMHs4DknSLBELP8oFIPvl8D6cF53XhE/+swfvH
LIP8qNtjRHLrQjVv10kXcWKu8K9Qm7Wswvr0kaRRISBZ1wCsieYAzv1AaExe+91e
GmTrcD7MJcDXOohvZw9NAD5DLw9tQbp+BRgPx22rvhOIUwOkmazBmeNi9xDZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUuCZH/CocctCPkfBhbKM9w2RW7GwwHwYDVR0j
BBgwFoAUxed+w3ozbwcfhVZeJnRJA7s97A0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2tBTHRDV2RaVTczVUhkQnlDcUwxQ21BblFrYnM2UGJxZDlWRGgyeHVO
bU0vMS9DNUU3N0VDMzdBMzM2RjA3MUY4NTU2NUUyNjc0NDkwM0JCM0RFQzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1RTc3RUMzN0EzMzZGMDcx
Rjg1NTY1RTI2NzQ0OTAzQkIzREVDMEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdrQUx0Q1dkWlU3M1VIZEJ5Q3FMMUNtQW5Ra2JzNlBicWQ5VkRoMnh1Tm1NLzEv
MzIzODMwMzQzYTM1NjQ2NjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzAzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARd8DANBgkqhkiG9w0BAQsFAAOCAQEAZ0LyrGqY
+ddLI4DJfuZL7T/svioRsDmnGbX5AD9MD3VO2KoE6/QkB3LZO+GhaF5I7JI3LPuL
x1dUqP8jEbf+cYww2LoyVngh2dsG/6LUXrhsUIP1oo6mK+CtzfCXfE+vURjivAv6
6QRhGxUXq7tGKKV0r5jZNjYlBoRrjmh9xfrHZpyHaIdUVs3R0dgRjLie9BWA9xkK
88vj7BagjhnA/AyLr8NqwbcpvcyV6TD0TXniZpUHpzYCmyqllAmL6TlDzkJ6u8n7
l5COZtBUMGE4ovatEV7GwNaCtrO939AFzyJ2OXqtsSzSJRNnndwpPGCx9fwQIj3/
SI8wJvFOyFTltg==
-----END CERTIFICATE-----