Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
File:                     323830343a333237343a3a2f33322d3438203d3e20323635303739.roa (raw, json)
Hash identifier:          g2fZ6iKUlCJNupp4u8mMXlG11K5M1p+JiDT0umfD6h8=
Subject key identifier:   1F:2C:80:0F:EF:88:93:1A:59:57:A3:67:52:94:33:44:A0:3C:A5:FB
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       42AA64CB9E971A5F28FC68F0F9F0480E0670DD83
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
Signing time:             Thu 31 Oct 2024 18:02:56 +0000
ROA not before:           Thu 31 Oct 2024 17:57:56 +0000
ROA not after:            Thu 30 Oct 2025 18:02:56 +0000
asID:                     265079
IP address blocks:        2804:3274::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:aa:64:cb:9e:97:1a:5f:28:fc:68:f0:f9:f0:48:0e:06:70:dd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:57:56 2024 GMT
            Not After : Oct 30 18:02:56 2025 GMT
        Subject: CN=1F2C800FEF88931A5957A36752943344A03CA5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:cb:16:b6:c1:e4:7e:f2:98:b7:e2:c9:b3:
                    2e:16:57:f6:36:9b:a6:64:ab:6b:f2:3e:36:a6:2c:
                    e3:85:14:2d:39:0f:0d:9f:89:ce:da:cf:eb:2c:23:
                    3d:08:ab:62:8f:f3:28:42:ba:ab:6a:01:d0:eb:b0:
                    52:a2:4b:42:50:20:42:ad:a0:26:50:8a:f5:d3:f5:
                    06:1a:e8:3a:d7:30:9c:81:f7:3b:32:f9:bb:0a:91:
                    34:1f:a0:20:cc:07:3e:3f:07:ba:9b:54:84:d1:ea:
                    b4:85:f8:b7:a9:37:72:e0:3e:e0:57:93:40:d1:79:
                    46:69:5d:ba:9c:51:d5:11:f3:f4:ed:ce:bf:75:a5:
                    18:b4:70:51:38:d2:3f:9e:f0:7e:90:fd:d7:a1:60:
                    3b:9f:ce:88:22:49:9f:fb:8e:39:28:f8:b2:12:21:
                    c2:e9:2e:66:8d:d2:fe:94:f9:66:e4:c8:7f:95:ca:
                    e6:b2:db:ba:c7:83:fe:56:4b:66:56:3d:8e:e5:1b:
                    66:53:d6:1a:0c:8d:a3:9b:4c:9c:95:c9:76:e2:0a:
                    a8:7b:6b:bc:73:5d:3a:b6:54:32:5c:ff:12:48:99:
                    e2:10:a1:3c:0f:37:51:5c:9a:3b:4e:41:1f:fb:be:
                    1e:1b:7c:16:ac:28:ee:df:3d:19:3b:17:88:8c:68:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2C:80:0F:EF:88:93:1A:59:57:A3:67:52:94:33:44:A0:3C:A5:FB
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3274::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:10:5d:9d:e2:a4:e4:b7:eb:a1:76:e8:5b:c5:47:71:21:00:
         99:f1:54:b1:7b:4c:2b:34:20:16:61:d5:39:0c:9c:69:a0:9e:
         7d:eb:f7:d1:a8:70:e4:73:67:4b:33:d9:71:d3:ad:31:3b:89:
         df:6e:30:10:79:95:29:53:9f:d1:04:67:15:e6:eb:a3:28:47:
         3d:01:ba:56:b3:7c:a9:20:fc:49:ea:95:b5:9f:df:b8:cc:85:
         12:da:ca:d6:ae:88:39:60:04:83:33:29:bc:7c:13:8e:b5:24:
         74:74:9c:18:d9:ba:34:8f:6d:e5:a0:e9:e7:df:53:f5:c1:e7:
         e2:d3:3f:96:83:7b:d4:82:6d:f7:6a:24:e9:cf:cf:df:fb:ac:
         fd:bf:c5:29:f4:03:5e:26:e5:9c:ac:73:b2:34:e9:d3:89:59:
         c5:53:a6:6c:51:3d:11:fe:c7:52:39:df:a1:b4:5f:75:c9:61:
         ad:1d:b6:22:84:1d:9e:32:06:1c:41:76:75:bb:b7:39:b9:ad:
         04:d3:e9:52:ef:30:2d:a3:8b:b9:8b:c7:d0:3b:ab:a8:5d:42:
         32:65:12:71:0c:80:3b:d1:d8:89:f9:f9:ca:f4:28:9e:56:3d:
         72:cd:9a:95:aa:7d:68:06:09:ab:e7:c5:65:bf:dc:5f:f5:93:
         d0:49:85:b8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQqpky56XGl8o/Gjw+fBIDgZw3YMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzU3NTZaFw0yNTEwMzAxODAyNTZaMDMxMTAvBgNV
BAMTKDFGMkM4MDBGRUY4ODkzMUE1OTU3QTM2NzUyOTQzMzQ0QTAzQ0E1RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DMsWtsHkfvKYt+LJsy4WV/Y2
m6Zkq2vyPjamLOOFFC05Dw2fic7az+ssIz0Iq2KP8yhCuqtqAdDrsFKiS0JQIEKt
oCZQivXT9QYa6DrXMJyB9zsy+bsKkTQfoCDMBz4/B7qbVITR6rSF+LepN3LgPuBX
k0DReUZpXbqcUdUR8/Ttzr91pRi0cFE40j+e8H6Q/dehYDufzogiSZ/7jjko+LIS
IcLpLmaN0v6U+WbkyH+Vyuay27rHg/5WS2ZWPY7lG2ZT1hoMjaObTJyVyXbiCqh7
a7xzXTq2VDJc/xJImeIQoTwPN1FcmjtOQR/7vh4bfBasKO7fPRk7F4iMaPslAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHyyAD++IkxpZV6NnUpQzRKA8pfswHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzIzODMwMzQzYTMzMzIzNzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQydDANBgkqhkiG9w0BAQsFAAOCAQEAQRBdneKk
5LfroXboW8VHcSEAmfFUsXtMKzQgFmHVOQycaaCefev30ahw5HNnSzPZcdOtMTuJ
324wEHmVKVOf0QRnFebroyhHPQG6VrN8qSD8SeqVtZ/fuMyFEtrK1q6IOWAEgzMp
vHwTjrUkdHScGNm6NI9t5aDp599T9cHn4tM/loN71IJt92ok6c/P3/us/b/FKfQD
XiblnKxzsjTp04lZxVOmbFE9Ef7HUjnfobRfdclhrR22IoQdnjIGHEF2dbu3Obmt
BNPpUu8wLaOLuYvH0DurqF1CMmUScQyAO9HYifn5yvQonlY9cs2alap9aAYJq+fF
Zb/cX/WT0EmFuA==
-----END CERTIFICATE-----