Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/323830343a326437383a3a2f33322d3332203d3e20323635323835.roa
File:                     323830343a326437383a3a2f33322d3332203d3e20323635323835.roa (raw, json)
Hash identifier:          rUR6dfzzmgRSOkugp/ytbwTTQg9S2kvITau8u1Hr0wY=
Subject key identifier:   B3:B0:86:AF:C9:5A:F7:C5:58:6A:16:5A:19:DC:99:A8:A1:45:1D:62
Certificate issuer:       /CN=A5CAB69B324D77E7069383E1585A8C071704B85E
Certificate serial:       52ED1A904A9BE38B0EF5C850DD361F9DE5B25A7C
Authority key identifier: A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/323830343a326437383a3a2f33322d3332203d3e20323635323835.roa
Signing time:             Tue 16 Apr 2024 14:05:51 +0000
ROA not before:           Tue 16 Apr 2024 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 14:05:51 +0000
asID:                     265285
IP address blocks:        2804:2d78::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ed:1a:90:4a:9b:e3:8b:0e:f5:c8:50:dd:36:1f:9d:e5:b2:5a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CAB69B324D77E7069383E1585A8C071704B85E
        Validity
            Not Before: Apr 16 14:00:51 2024 GMT
            Not After : Apr 15 14:05:51 2025 GMT
        Subject: CN=B3B086AFC95AF7C5586A165A19DC99A8A1451D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:2b:c4:2d:b4:a5:42:95:e7:79:fd:db:8d:
                    51:cb:16:58:b5:3c:1b:f8:c0:c6:84:3e:e5:9c:83:
                    31:e4:c9:8c:82:ca:dc:14:23:a2:70:ff:96:04:07:
                    80:1f:d3:f6:d1:d2:a0:d9:36:05:5c:21:b5:03:24:
                    27:6e:8f:d7:bd:c2:4f:0a:3c:b9:7d:89:81:84:96:
                    dc:95:e4:20:ff:49:e9:8f:aa:c8:ed:4a:7b:21:45:
                    e5:ff:8f:c3:c0:88:f5:38:63:e4:38:a9:20:49:db:
                    17:8b:9c:e9:be:85:74:bd:f0:15:db:cb:45:38:8e:
                    d7:78:44:a3:1c:7f:e8:71:c0:94:b3:1b:6f:2e:38:
                    41:24:5d:f3:2a:31:53:15:b7:7b:40:71:b2:54:01:
                    2a:c4:c7:67:c6:26:ac:9f:2f:f5:76:41:64:9c:07:
                    50:5e:fb:62:92:04:73:80:36:57:f3:b3:35:26:d7:
                    9e:24:f6:d7:fe:4f:c8:f5:2f:21:e7:9a:60:f8:23:
                    6d:58:19:a8:8e:34:82:05:5b:5d:4d:7b:69:5e:da:
                    00:c0:2d:05:25:7d:0b:25:01:0d:0b:fc:68:b7:91:
                    e4:39:06:39:bf:e5:5d:8a:eb:dd:3f:b4:74:98:82:
                    0c:db:b2:59:5b:b1:ea:b9:6a:50:be:a1:41:35:47:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:86:AF:C9:5A:F7:C5:58:6A:16:5A:19:DC:99:A8:A1:45:1D:62
            X509v3 Authority Key Identifier:
                keyid:A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/A5CAB69B324D77E7069383E1585A8C071704B85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/323830343a326437383a3a2f33322d3332203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d78::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:09:18:8b:ee:d0:f7:f0:85:af:26:e0:cf:20:36:0c:11:a3:
         f0:15:ea:31:32:3a:18:c6:a0:e9:f8:68:56:31:bd:40:e7:39:
         50:ef:5d:b2:eb:64:77:9a:6e:95:54:d9:ba:c6:df:87:e7:ac:
         a2:f7:31:3d:28:97:f3:e8:2f:b8:59:c8:b6:37:09:ac:65:50:
         7c:ed:de:73:51:ad:50:13:44:ec:b7:d0:01:d0:50:c9:18:32:
         ef:46:9b:a9:b6:e7:6e:c9:ff:e8:a3:ce:66:5c:e4:e5:a8:a2:
         ed:7e:18:46:52:15:7b:c5:b5:b3:c4:e8:6e:28:b8:3b:fb:4b:
         7b:40:91:a6:89:eb:a1:e6:27:ca:35:03:17:b1:e5:71:fe:82:
         fb:b0:ae:f0:68:61:3d:9f:b2:75:4f:ca:b1:ff:4d:56:c5:ab:
         b9:d6:9e:04:a4:28:aa:72:43:be:13:97:c7:88:b5:4f:ce:c8:
         c9:97:df:a9:0b:f3:1f:3a:53:b8:ca:58:56:43:18:58:1c:5c:
         90:df:76:30:db:18:ef:6a:66:bf:f2:d9:24:91:24:4a:4a:9a:
         0f:31:76:9f:21:cc:b3:32:c5:fa:09:4d:e8:ff:62:a7:19:bf:
         be:b1:b0:84:55:67:5d:c6:44:20:29:0e:36:a9:80:c1:28:fc:
         0f:ea:8e:ca
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUu0akEqb44sO9chQ3TYfneWyWnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDQUI2OUIzMjRENzdFNzA2OTM4M0UxNTg1QThDMDcx
NzA0Qjg1RTAeFw0yNDA0MTYxNDAwNTFaFw0yNTA0MTUxNDA1NTFaMDMxMTAvBgNV
BAMTKEIzQjA4NkFGQzk1QUY3QzU1ODZBMTY1QTE5REM5OUE4QTE0NTFENjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClYCvELbSlQpXnef3bjVHLFli1
PBv4wMaEPuWcgzHkyYyCytwUI6Jw/5YEB4Af0/bR0qDZNgVcIbUDJCduj9e9wk8K
PLl9iYGEltyV5CD/SemPqsjtSnshReX/j8PAiPU4Y+Q4qSBJ2xeLnOm+hXS98BXb
y0U4jtd4RKMcf+hxwJSzG28uOEEkXfMqMVMVt3tAcbJUASrEx2fGJqyfL/V2QWSc
B1Be+2KSBHOANlfzszUm154k9tf+T8j1LyHnmmD4I21YGaiONIIFW11Ne2le2gDA
LQUlfQslAQ0L/Gi3keQ5Bjm/5V2K690/tHSYggzbsllbseq5alC+oUE1Rx+LAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUs7CGr8la98VYahZaGdyZqKFFHWIwHwYDVR0j
BBgwFoAUpcq2mzJNd+cGk4PhWFqMBxcEuF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC9BNUNBQjY5QjMyNEQ3N0U3MDY5MzgzRTE1ODVBOEMwNzE3MDRCODVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1Q0FCNjlCMzI0RDc3RTcw
NjkzODNFMTU4NUE4QzA3MTcwNEI4NUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzIzODMwMzQzYTMyNjQzNzM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQteDANBgkqhkiG9w0BAQsFAAOCAQEAvwkYi+7Q
9/CFrybgzyA2DBGj8BXqMTI6GMag6fhoVjG9QOc5UO9dsutkd5pulVTZusbfh+es
ovcxPSiX8+gvuFnItjcJrGVQfO3ec1GtUBNE7LfQAdBQyRgy70abqbbnbsn/6KPO
Zlzk5aii7X4YRlIVe8W1s8Tobii4O/tLe0CRponroeYnyjUDF7Hlcf6C+7Cu8Ghh
PZ+ydU/Ksf9NVsWrudaeBKQoqnJDvhOXx4i1T87IyZffqQvzHzpTuMpYVkMYWBxc
kN92MNsY72pmv/LZJJEkSkqaDzF2nyHMszLF+glN6P9ipxm/vrGwhFVnXcZEICkO
NqmAwSj8D+qOyg==
-----END CERTIFICATE-----