Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a3a2f33332d3333203d3e20323635313538.roa
File:                     323830343a326238383a3a2f33332d3333203d3e20323635313538.roa (raw, json)
Hash identifier:          iV4EFl1CRtUQkk8HEA1b6vG6EEVCgcDx2ZZr5gGeOp4=
Subject key identifier:   C8:0D:94:1F:15:29:FC:C1:69:B4:4B:E5:8D:07:0E:75:ED:89:C5:E6
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       4203C6E333CDA7F5C4DE791BAF593E0A8C0F2596
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a3a2f33332d3333203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:12 +0000
ROA not before:           Fri 05 Apr 2024 02:41:12 +0000
ROA not after:            Fri 04 Apr 2025 02:46:12 +0000
asID:                     265158
IP address blocks:        2804:2b88::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:c6:e3:33:cd:a7:f5:c4:de:79:1b:af:59:3e:0a:8c:0f:25:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:12 2024 GMT
            Not After : Apr  4 02:46:12 2025 GMT
        Subject: CN=C80D941F1529FCC169B44BE58D070E75ED89C5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:01:73:fb:71:3e:7e:f7:b7:c8:84:9f:2c:
                    c3:d3:48:da:a4:d9:35:0b:9a:6b:3e:0c:88:41:e6:
                    2c:df:01:9a:a2:2c:a0:2a:b7:51:b1:2e:fd:4e:eb:
                    36:ea:96:8a:f2:0b:51:07:47:fe:d1:67:f6:26:01:
                    10:a3:98:8b:e4:84:d5:c8:29:c6:0d:00:ac:ee:e2:
                    fe:3f:94:75:28:d1:47:ff:d4:d2:a1:22:5c:64:e0:
                    b3:db:e7:8b:62:f2:4a:3a:9b:6e:85:4b:03:f2:74:
                    e0:ed:31:b6:72:a1:fb:63:f0:1d:85:56:d5:ae:27:
                    db:96:da:a6:59:e5:45:df:71:eb:2f:c1:52:50:ef:
                    f1:49:09:54:9e:16:54:55:18:00:7b:1d:46:26:d7:
                    2f:4d:eb:74:9e:5d:5b:66:21:39:3d:b2:4c:7a:9e:
                    e6:d8:92:94:1e:29:2f:d9:7b:c7:f3:19:3f:d8:0d:
                    64:38:c3:27:bc:40:d4:a4:5b:b7:58:f5:22:e5:e0:
                    93:9b:9c:ac:8c:94:32:68:ca:61:05:22:ee:da:05:
                    08:cb:e5:20:64:80:35:69:d9:1d:6c:98:d4:14:01:
                    23:1d:92:7d:32:3a:26:62:dd:6e:8c:84:5f:ea:f2:
                    37:9e:8e:79:83:f7:83:2f:64:2c:3a:26:7c:9d:e0:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:94:1F:15:29:FC:C1:69:B4:4B:E5:8D:07:0E:75:ED:89:C5:E6
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/323830343a326238383a3a2f33332d3333203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b88::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:62:48:4d:2a:1d:f5:3b:4e:1d:c7:36:95:71:74:94:89:
         3f:23:ad:43:8a:cd:c3:65:f3:0b:26:0b:56:75:a1:84:38:59:
         e0:41:f9:b6:81:27:9a:94:aa:65:cb:ac:a8:20:11:e9:e9:31:
         83:56:04:0e:e3:65:af:a9:fa:f2:5b:4a:9d:6e:4d:75:77:23:
         60:82:23:ca:e1:73:78:01:5d:96:c1:41:36:f7:c6:e8:4a:6d:
         ee:8c:6c:93:31:25:8f:90:c0:e2:80:1c:1c:e3:96:5a:3a:4b:
         a5:cd:f3:a8:58:1f:aa:6f:e1:49:87:45:16:be:df:a7:49:96:
         bc:1a:3e:78:72:c9:05:b3:69:88:0a:d9:1b:aa:d8:5b:2b:e3:
         74:d6:d5:57:90:59:d8:1a:cc:f9:6b:fc:4f:83:64:52:58:c8:
         2c:ba:41:1a:2a:88:a8:5e:04:c2:3f:99:2d:e5:55:b5:eb:c4:
         74:1f:05:0b:8b:f4:de:0c:2a:95:f9:b5:f1:c0:b1:c9:ec:40:
         1b:9b:75:81:a4:e5:b8:62:ad:4a:ac:32:6b:57:bc:f0:a6:59:
         a7:d6:c7:69:ec:92:2a:d0:da:74:7c:dc:a5:72:0c:64:f7:2d:
         9e:0d:6f:b5:6e:dd:a7:74:4d:ae:07:5e:13:98:47:76:03:88:
         70:23:c3:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQgPG4zPNp/XE3nkbr1k+CowPJZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBCQkY1RTU0RkNCNkJGQjZFOUJEOEU1MkE2MzkyRkFG
NEQ0QzhEMTAeFw0yNDA0MDUwMjQxMTJaFw0yNTA0MDQwMjQ2MTJaMDMxMTAvBgNV
BAMTKEM4MEQ5NDFGMTUyOUZDQzE2OUI0NEJFNThEMDcwRTc1RUQ4OUM1RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSAFz+3E+fve3yISfLMPTSNqk
2TULmms+DIhB5izfAZqiLKAqt1GxLv1O6zbqloryC1EHR/7RZ/YmARCjmIvkhNXI
KcYNAKzu4v4/lHUo0Uf/1NKhIlxk4LPb54ti8ko6m26FSwPydODtMbZyoftj8B2F
VtWuJ9uW2qZZ5UXfcesvwVJQ7/FJCVSeFlRVGAB7HUYm1y9N63SeXVtmITk9skx6
nubYkpQeKS/Ze8fzGT/YDWQ4wye8QNSkW7dY9SLl4JObnKyMlDJoymEFIu7aBQjL
5SBkgDVp2R1smNQUASMdkn0yOiZi3W6MhF/q8jeejnmD94MvZCw6Jnyd4LDbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyA2UHxUp/MFptEvljQcOde2JxeYwHwYDVR0j
BBgwFoAUYLv15U/La/tum9jlKmOS+vTUyNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtTSExVV2NyOUU2YlJpcW1LdUFtSGRNYWRVdXg0YVYxS1JNREVUdlA2
bmUvMS82MEJCRjVFNTRGQ0I2QkZCNkU5QkQ4RTUyQTYzOTJGQUY0RDRDOEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQkJGNUU1NEZDQjZCRkI2
RTlCRDhFNTJBNjM5MkZBRjRENEM4RDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrU0hMVVdjcjlFNmJSaXFtS3VBbUhkTWFkVXV4NGFWMUtSTURFVHZQNm5lLzEv
MzIzODMwMzQzYTMyNjIzODM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzEzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQriAAwDQYJKoZIhvcNAQELBQADggEBAEH3YkhN
Kh31O04dxzaVcXSUiT8jrUOKzcNl8wsmC1Z1oYQ4WeBB+baBJ5qUqmXLrKggEenp
MYNWBA7jZa+p+vJbSp1uTXV3I2CCI8rhc3gBXZbBQTb3xuhKbe6MbJMxJY+QwOKA
HBzjllo6S6XN86hYH6pv4UmHRRa+36dJlrwaPnhyyQWzaYgK2Ruq2Fsr43TW1VeQ
WdgazPlr/E+DZFJYyCy6QRoqiKheBMI/mS3lVbXrxHQfBQuL9N4MKpX5tfHAscns
QBubdYGk5bhirUqsMmtXvPCmWafWx2nskirQ2nR83KVyDGT3LZ4Nb7Vu3ad0Ta4H
XhOYR3YDiHAjwww=
-----END CERTIFICATE-----