Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
File:                     323830343a353363343a3a2f33322d313238203d3e20323638363035.roa (raw, json)
Hash identifier:          jno9LcnQqi8nCELKAH4ddElkHf9ZZmTtqoJnpG2/hnk=
Subject key identifier:   F1:0A:9A:61:3F:02:83:07:87:97:BA:48:05:41:0E:B5:86:7F:84:6E
Certificate issuer:       /CN=10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A
Certificate serial:       513E45C25C26743FB076F61FCC63BFD83022AD5C
Authority key identifier: 10:C0:A2:0A:E6:37:3B:7B:3C:E5:CF:D1:0D:A7:B3:3F:66:0E:B8:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
Signing time:             Mon 05 Aug 2024 20:53:54 +0000
ROA not before:           Mon 05 Aug 2024 20:48:54 +0000
ROA not after:            Mon 04 Aug 2025 20:53:54 +0000
asID:                     268605
IP address blocks:        2804:53c4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:45:c2:5c:26:74:3f:b0:76:f6:1f:cc:63:bf:d8:30:22:ad:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A
        Validity
            Not Before: Aug  5 20:48:54 2024 GMT
            Not After : Aug  4 20:53:54 2025 GMT
        Subject: CN=F10A9A613F0283078797BA4805410EB5867F846E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:a8:4e:17:bc:00:9b:27:cc:b2:22:87:d7:
                    eb:8d:2d:56:df:c5:60:cd:73:bf:e7:da:2f:27:70:
                    f2:21:3c:53:dd:32:d6:55:e6:75:ee:1e:08:fe:b5:
                    99:89:62:29:82:d8:ab:f0:d1:10:75:19:e8:12:33:
                    8b:06:9e:f1:f2:d0:5f:c5:ef:c6:a4:b4:11:70:96:
                    6c:b6:69:a9:8f:8f:93:68:02:e8:5a:77:9d:fb:fe:
                    4a:42:d4:e9:9a:d9:9b:49:83:3e:b2:3f:a1:04:da:
                    f1:6a:52:20:bc:82:74:21:57:9d:8a:8d:0e:11:e1:
                    16:43:17:ea:52:46:98:de:57:d6:f7:cf:c9:fa:7f:
                    bc:d2:19:ce:ee:d2:18:cf:b1:88:c6:76:64:9b:38:
                    cb:16:e4:2a:8b:95:4e:93:af:5f:aa:4e:4e:99:e5:
                    2e:13:fb:5f:64:95:1b:32:50:40:80:21:5c:08:1c:
                    0d:17:eb:34:f9:94:b8:e6:a8:9d:91:61:e7:07:31:
                    fa:d4:b5:f0:0c:eb:de:dd:f9:f7:8d:05:2d:07:bf:
                    77:60:07:ec:28:1c:5d:27:2f:d5:b5:b5:68:25:19:
                    b4:b3:5e:e0:3a:bd:e7:87:19:0d:f0:a1:6b:72:29:
                    cf:29:51:28:bc:30:38:6d:27:01:42:57:2a:96:46:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:9A:61:3F:02:83:07:87:97:BA:48:05:41:0E:B5:86:7F:84:6E
            X509v3 Authority Key Identifier:
                keyid:10:C0:A2:0A:E6:37:3B:7B:3C:E5:CF:D1:0D:A7:B3:3F:66:0E:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10C0A20AE6373B7B3CE5CFD10DA7B33F660EB88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:6b:bd:ea:8f:b9:c9:a1:5b:c2:fd:b6:bb:35:c3:b6:96:5e:
         c5:45:c3:38:f5:9f:d8:d2:3d:eb:dc:6e:40:47:98:a2:18:da:
         83:f6:56:4b:5c:51:7a:4c:d7:ef:5a:fe:b6:4b:d1:7f:2a:f3:
         9b:f6:bb:28:5b:d9:cc:1e:65:8f:72:c1:3f:51:cb:6f:f8:a0:
         39:e9:80:d6:63:11:e9:9c:f1:37:d2:5e:9f:ad:35:dd:e8:75:
         7c:6d:79:97:59:6f:54:16:35:59:42:6e:b4:e5:a6:71:ce:d3:
         41:3d:1f:7a:d2:86:50:fc:f0:24:09:0e:9c:8a:e4:74:db:61:
         48:2d:f7:3c:31:3b:70:1b:8e:30:a1:6e:5c:6f:a2:bf:ec:29:
         96:93:8e:67:5c:28:f6:24:41:e9:ce:82:78:da:54:e8:5c:7a:
         35:3d:54:50:0f:0a:fd:32:db:e2:57:3f:d8:5d:1f:38:e1:66:
         a7:a8:55:1a:3f:8f:57:2a:88:b5:19:55:07:87:ea:9c:83:d1:
         14:3a:7d:40:6f:d0:d1:78:a5:ec:6d:18:7e:37:ec:f4:68:d9:
         5f:a1:14:7c:64:ff:8a:61:86:b2:cd:5a:df:6b:6d:47:22:1c:
         90:d6:44:3a:f0:19:d1:70:d9:b0:71:17:9a:2e:79:2a:65:ac:
         6b:cc:78:44
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUT5FwlwmdD+wdvYfzGO/2DAirVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDMEEyMEFFNjM3M0I3QjNDRTVDRkQxMERBN0IzM0Y2
NjBFQjg4QTAeFw0yNDA4MDUyMDQ4NTRaFw0yNTA4MDQyMDUzNTRaMDMxMTAvBgNV
BAMTKEYxMEE5QTYxM0YwMjgzMDc4Nzk3QkE0ODA1NDEwRUI1ODY3Rjg0NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1qhOF7wAmyfMsiKH1+uNLVbf
xWDNc7/n2i8ncPIhPFPdMtZV5nXuHgj+tZmJYimC2Kvw0RB1GegSM4sGnvHy0F/F
78aktBFwlmy2aamPj5NoAuhad537/kpC1Oma2ZtJgz6yP6EE2vFqUiC8gnQhV52K
jQ4R4RZDF+pSRpjeV9b3z8n6f7zSGc7u0hjPsYjGdmSbOMsW5CqLlU6Tr1+qTk6Z
5S4T+19klRsyUECAIVwIHA0X6zT5lLjmqJ2RYecHMfrUtfAM697d+feNBS0Hv3dg
B+woHF0nL9W1tWglGbSzXuA6veeHGQ3woWtyKc8pUSi8MDhtJwFCVyqWRqVTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU8QqaYT8CgweHl7pIBUEOtYZ/hG4wHwYDVR0j
BBgwFoAUEMCiCuY3O3s85c/RDaezP2YOuIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODJjRVVDQkI4Y2tXckVpYm11TGhBajNiRWJSZEpXdlBuRXp6R3BMUzRy
M1cvMC8xMEMwQTIwQUU2MzczQjdCM0NFNUNGRDEwREE3QjMzRjY2MEVCODhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQzBBMjBBRTYzNzNCN0Iz
Q0U1Q0ZEMTBEQTdCMzNGNjYwRUI4OEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgyY0VVQ0JCOGNrV3JFaWJtdUxoQWozYkViUmRKV3ZQbkV6ekdwTFM0cjNXLzAv
MzIzODMwMzQzYTM1MzM2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFPEMA0GCSqGSIb3DQEBCwUAA4IBAQCUa73q
j7nJoVvC/ba7NcO2ll7FRcM49Z/Y0j3r3G5AR5iiGNqD9lZLXFF6TNfvWv62S9F/
KvOb9rsoW9nMHmWPcsE/Uctv+KA56YDWYxHpnPE30l6frTXd6HV8bXmXWW9UFjVZ
Qm605aZxztNBPR960oZQ/PAkCQ6ciuR022FILfc8MTtwG44woW5cb6K/7CmWk45n
XCj2JEHpzoJ42lToXHo1PVRQDwr9MtviVz/YXR844WanqFUaP49XKoi1GVUHh+qc
g9EUOn1Ab9DReKXsbRh+N+z0aNlfoRR8ZP+KYYayzVrfa21HIhyQ1kQ68BnRcNmw
cReaLnkqZaxrzHhE
-----END CERTIFICATE-----