Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa
File:                     323830343a326362383a3a2f33322d313238203d3e20323635323339.roa (raw, json)
Hash identifier:          CfprWjjbO5mJuxlgiiwXct8T93ybYUPISNxvW3Ko7Z0=
Subject key identifier:   13:0F:46:3E:D8:35:1D:51:FF:57:1C:8D:9C:BA:2B:97:16:E9:86:07
Certificate issuer:       /CN=B2929E5492924B465205088A6A13DA79D2244CF7
Certificate serial:       7A08C74B24A69192CBC6ACCA7636FC7216CDADF5
Authority key identifier: B2:92:9E:54:92:92:4B:46:52:05:08:8A:6A:13:DA:79:D2:24:4C:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2929E5492924B465205088A6A13DA79D2244CF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa
Signing time:             Thu 02 May 2024 18:07:53 +0000
ROA not before:           Thu 02 May 2024 18:02:53 +0000
ROA not after:            Thu 01 May 2025 18:07:53 +0000
asID:                     265239
IP address blocks:        2804:2cb8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:08:c7:4b:24:a6:91:92:cb:c6:ac:ca:76:36:fc:72:16:cd:ad:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2929E5492924B465205088A6A13DA79D2244CF7
        Validity
            Not Before: May  2 18:02:53 2024 GMT
            Not After : May  1 18:07:53 2025 GMT
        Subject: CN=130F463ED8351D51FF571C8D9CBA2B9716E98607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:c8:26:56:2a:b7:9e:61:14:3f:de:db:20:
                    1e:fe:bb:84:5d:31:53:a9:d7:1a:c9:ce:bf:67:5f:
                    bb:d2:88:39:ad:13:a6:3a:5c:8a:18:93:59:de:31:
                    b6:77:f2:32:2c:f0:b9:0e:d6:7a:65:06:a8:d2:bd:
                    5b:25:c8:bd:16:75:6e:a9:f8:c0:22:b0:9b:27:e6:
                    1f:81:33:fe:31:66:d5:57:b7:56:44:2e:2b:df:ec:
                    bd:2e:d1:de:a3:2b:b0:f0:bd:b4:4a:c3:15:cf:56:
                    be:24:69:67:77:c0:68:fd:b3:f7:e9:97:47:81:ff:
                    94:40:3f:95:fa:0e:39:68:45:11:18:c1:ea:3d:37:
                    1e:2f:24:a3:a3:05:4d:fa:d4:ee:d6:84:31:53:c6:
                    55:72:7e:5a:12:05:eb:d3:9f:df:95:b8:f4:8e:1f:
                    34:e8:8e:9c:66:56:6c:68:ae:44:56:fd:7a:58:fc:
                    42:ec:61:4d:44:74:42:63:43:6e:da:e8:2a:05:ff:
                    92:67:4d:c3:2f:67:6b:e8:e1:0b:d8:b7:d3:87:f5:
                    b9:20:d9:57:16:9d:58:eb:09:18:0b:a2:2a:f1:50:
                    cf:b6:34:89:9c:11:3b:d8:07:6c:01:77:3d:d6:3f:
                    36:31:af:76:e5:bb:36:f1:6c:5e:cb:f9:18:38:49:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:46:3E:D8:35:1D:51:FF:57:1C:8D:9C:BA:2B:97:16:E9:86:07
            X509v3 Authority Key Identifier:
                keyid:B2:92:9E:54:92:92:4B:46:52:05:08:8A:6A:13:DA:79:D2:24:4C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/B2929E5492924B465205088A6A13DA79D2244CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2929E5492924B465205088A6A13DA79D2244CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/323830343a326362383a3a2f33322d313238203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:58:10:44:39:31:dc:12:b6:d1:2e:ef:9f:35:b5:02:20:47:
         7a:06:8f:80:53:a3:53:7d:7a:fe:ce:1d:4d:e1:6a:ed:73:d9:
         b8:20:b3:46:6e:97:b0:84:5a:a2:90:21:2a:37:9c:76:83:1d:
         5f:9a:75:75:d1:46:5c:ac:42:c9:4d:cb:b2:ba:8a:bc:a3:03:
         f6:f8:5c:ff:5b:f5:d5:52:e3:64:f9:28:d4:ca:22:87:b9:1f:
         04:55:4d:31:53:ba:e8:52:6a:14:24:39:df:de:94:c8:a0:f5:
         81:e3:92:3f:d5:6c:a5:b1:47:a0:2b:70:f2:d3:33:93:22:66:
         e0:d0:0d:c0:bf:0c:a3:94:11:24:ca:60:8f:e8:23:52:58:1c:
         62:58:04:db:bf:11:fb:08:b2:60:f2:a6:2f:b7:86:23:2c:9b:
         d8:db:73:3e:d3:22:67:c1:0d:0a:2a:bb:cc:65:46:b4:dc:da:
         6b:5a:b2:44:0c:5b:2b:25:75:49:25:26:10:49:ac:1a:40:79:
         68:2b:5c:43:25:13:a1:ba:48:f6:e1:da:69:16:10:de:52:5f:
         cb:bf:f0:de:26:7e:f1:b9:e6:80:9a:39:02:ef:83:4e:dd:57:
         96:72:83:21:de:59:cf:00:c3:9f:38:29:28:8e:69:e1:08:46:
         e2:e8:c3:e9
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUegjHSySmkZLLxqzKdjb8chbNrfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5MjlFNTQ5MjkyNEI0NjUyMDUwODhBNkExM0RBNzlE
MjI0NENGNzAeFw0yNDA1MDIxODAyNTNaFw0yNTA1MDExODA3NTNaMDMxMTAvBgNV
BAMTKDEzMEY0NjNFRDgzNTFENTFGRjU3MUM4RDlDQkEyQjk3MTZFOTg2MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhsgmViq3nmEUP97bIB7+u4Rd
MVOp1xrJzr9nX7vSiDmtE6Y6XIoYk1neMbZ38jIs8LkO1nplBqjSvVslyL0WdW6p
+MAisJsn5h+BM/4xZtVXt1ZELivf7L0u0d6jK7DwvbRKwxXPVr4kaWd3wGj9s/fp
l0eB/5RAP5X6DjloRREYweo9Nx4vJKOjBU361O7WhDFTxlVyfloSBevTn9+VuPSO
HzTojpxmVmxorkRW/XpY/ELsYU1EdEJjQ27a6CoF/5JnTcMvZ2vo4QvYt9OH9bkg
2VcWnVjrCRgLoirxUM+2NImcETvYB2wBdz3WPzYxr3bluzbxbF7L+Rg4SWpvAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUEw9GPtg1HVH/VxyNnLorlxbphgcwHwYDVR0j
BBgwFoAUspKeVJKSS0ZSBQiKahPaedIkTPcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZLTEFmY05GNkdCazVxRUVzUGUzRENEb1BIdXNOb2k0VTY4NDJkQ2k0
d0MvMC9CMjkyOUU1NDkyOTI0QjQ2NTIwNTA4OEE2QTEzREE3OUQyMjQ0Q0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyOTI5RTU0OTI5MjRCNDY1
MjA1MDg4QTZBMTNEQTc5RDIyNDRDRjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWS0xBZmNORjZHQms1cUVFc1BlM0RDRG9QSHVzTm9pNFU2ODQyZENpNHdDLzAv
MzIzODMwMzQzYTMyNjM2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCy4MA0GCSqGSIb3DQEBCwUAA4IBAQBZWBBE
OTHcErbRLu+fNbUCIEd6Bo+AU6NTfXr+zh1N4Wrtc9m4ILNGbpewhFqikCEqN5x2
gx1fmnV10UZcrELJTcuyuoq8owP2+Fz/W/XVUuNk+SjUyiKHuR8EVU0xU7roUmoU
JDnf3pTIoPWB45I/1WylsUegK3Dy0zOTImbg0A3AvwyjlBEkymCP6CNSWBxiWATb
vxH7CLJg8qYvt4YjLJvY23M+0yJnwQ0KKrvMZUa03NprWrJEDFsrJXVJJSYQSawa
QHloK1xDJROhukj24dppFhDeUl/Lv/DeJn7xueaAmjkC74NO3VeWcoMh3lnPAMOf
OCkojmnhCEbi6MPp
-----END CERTIFICATE-----