Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33332d3333203d3e20323633303335.roa
File:                     323830343a6133383a3a2f33332d3333203d3e20323633303335.roa (raw, json)
Hash identifier:          Y0Ii37cpenpVetmDgEqsK2c5crtDRIayhxQkhWPqTQw=
Subject key identifier:   BE:6B:73:42:85:7C:38:55:26:78:00:35:00:07:B6:82:3E:F0:DD:0E
Certificate issuer:       /CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
Certificate serial:       311E9375915BE23263C554C891ACF74C34FBD01B
Authority key identifier: 79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33332d3333203d3e20323633303335.roa
Signing time:             Thu 05 Sep 2024 17:39:50 +0000
ROA not before:           Thu 05 Sep 2024 17:34:50 +0000
ROA not after:            Thu 04 Sep 2025 17:39:50 +0000
asID:                     263035
IP address blocks:        2804:a38::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:93:75:91:5b:e2:32:63:c5:54:c8:91:ac:f7:4c:34:fb:d0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973A6F7D25B519ADA938A8C3A955ED8765A3404
        Validity
            Not Before: Sep  5 17:34:50 2024 GMT
            Not After : Sep  4 17:39:50 2025 GMT
        Subject: CN=BE6B7342857C3855267800350007B6823EF0DD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:dc:41:db:d4:06:9e:8a:57:7c:8f:36:ac:
                    a3:2b:8c:9d:c2:9b:d7:db:4c:62:e0:cf:f1:59:0b:
                    b6:4c:20:f4:6e:eb:60:50:ed:fe:5f:e7:4c:c7:b3:
                    bb:51:49:66:4f:70:bd:93:9c:85:db:01:21:f0:0a:
                    44:87:64:89:92:b6:c3:84:55:80:b7:91:71:06:73:
                    9f:4e:dd:7c:3f:9c:b1:b4:ab:4c:82:a4:76:73:e4:
                    52:9d:c2:d8:42:4a:d3:07:d7:ed:00:8e:e7:19:5b:
                    f8:c1:b2:c0:5e:56:13:a5:74:0e:a8:6c:08:ef:34:
                    00:5c:09:44:80:5d:db:1e:e4:b4:45:7a:ef:19:e7:
                    6e:b2:df:a3:3a:24:81:f7:e7:e2:e2:15:d7:6f:44:
                    48:1b:cb:87:4b:36:a2:f3:94:3e:fb:68:54:2c:7d:
                    60:56:af:43:40:d1:58:3a:ca:6f:f9:c9:20:b9:31:
                    69:d4:dd:ed:a2:00:63:4b:94:25:8d:6b:79:21:6a:
                    22:5a:c3:13:cf:15:8a:42:ed:16:f9:b0:f9:eb:fd:
                    36:f1:91:bf:8a:be:20:8e:5f:6a:53:52:1c:4b:8b:
                    29:38:77:be:e4:a0:94:45:8a:17:b5:e4:20:1e:de:
                    cf:ca:31:01:31:60:aa:48:9e:fb:8c:f7:ef:33:fb:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6B:73:42:85:7C:38:55:26:78:00:35:00:07:B6:82:3E:F0:DD:0E
            X509v3 Authority Key Identifier:
                keyid:79:73:A6:F7:D2:5B:51:9A:DA:93:8A:8C:3A:95:5E:D8:76:5A:34:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/7973A6F7D25B519ADA938A8C3A955ED8765A3404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7973A6F7D25B519ADA938A8C3A955ED8765A3404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33332d3333203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a38::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:91:1a:e8:21:67:41:58:13:24:da:f4:20:32:31:d8:c0:2b:
         56:a3:5a:2f:09:b0:7d:ce:8c:40:f9:2b:c7:d0:cf:4e:ec:c2:
         23:d1:c1:cc:5f:1c:dc:45:86:7b:35:aa:56:d5:2e:77:23:3f:
         53:4c:d6:49:7b:dc:ea:5a:fb:ea:3f:16:7f:77:07:65:7f:ea:
         3a:0b:a6:5f:1a:14:6b:94:a1:e1:49:4f:52:6d:a7:9e:63:a9:
         14:10:38:a0:76:d1:3f:11:a8:ea:4f:65:2c:61:b7:6e:5d:ad:
         48:b2:f0:0e:7a:46:41:4f:fa:bd:0e:b9:3e:25:6c:51:6e:df:
         7a:ac:8e:a6:c9:2c:d6:5e:d9:9d:30:cd:89:7f:9b:bd:49:71:
         ef:67:bb:39:4e:0c:ff:15:be:1b:52:49:19:c0:9f:9d:b5:fc:
         1b:b1:99:7e:18:80:da:85:97:b0:1d:59:50:f3:8e:60:98:df:
         6b:97:94:05:44:d4:a4:0f:24:a9:04:70:bb:78:68:2c:dd:91:
         84:10:62:cb:5e:04:c0:9d:5a:e7:e8:ad:ef:16:5f:82:05:6a:
         cb:67:ff:56:23:f2:82:55:f9:ec:7f:52:4c:44:31:b8:2f:0b:
         35:3b:9e:2a:df:e7:a8:e2:52:d6:88:dd:6a:05:c3:8e:d6:00:
         6d:4c:a8:27
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMR6TdZFb4jJjxVTIkaz3TDT70BswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3M0E2RjdEMjVCNTE5QURBOTM4QThDM0E5NTVFRDg3
NjVBMzQwNDAeFw0yNDA5MDUxNzM0NTBaFw0yNTA5MDQxNzM5NTBaMDMxMTAvBgNV
BAMTKEJFNkI3MzQyODU3QzM4NTUyNjc4MDAzNTAwMDdCNjgyM0VGMEREMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJf9xB29QGnopXfI82rKMrjJ3C
m9fbTGLgz/FZC7ZMIPRu62BQ7f5f50zHs7tRSWZPcL2TnIXbASHwCkSHZImStsOE
VYC3kXEGc59O3Xw/nLG0q0yCpHZz5FKdwthCStMH1+0AjucZW/jBssBeVhOldA6o
bAjvNABcCUSAXdse5LRFeu8Z526y36M6JIH35+LiFddvREgby4dLNqLzlD77aFQs
fWBWr0NA0Vg6ym/5ySC5MWnU3e2iAGNLlCWNa3khaiJawxPPFYpC7Rb5sPnr/Tbx
kb+KviCOX2pTUhxLiyk4d77koJRFihe15CAe3s/KMQExYKpInvuM9+8z+3ohAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvmtzQoV8OFUmeAA1AAe2gj7w3Q4wHwYDVR0j
BBgwFoAUeXOm99JbUZrak4qMOpVe2HZaNAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpNcmRVZ2p6cnlHeXlxd2FpMTRlZXo5elZqWnRieTZ6R3IxcUJ0QW9K
RDIvMC83OTczQTZGN0QyNUI1MTlBREE5MzhBOEMzQTk1NUVEODc2NUEzNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5NzNBNkY3RDI1QjUxOUFE
QTkzOEE4QzNBOTU1RUQ4NzY1QTM0MDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKTXJkVWdqenJ5R3l5cXdhaTE0ZWV6OXpWalp0Ynk2ekdyMXFCdEFvSkQyLzAv
MzIzODMwMzQzYTYxMzMzODNhM2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzMzMw
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygECjgAMA0GCSqGSIb3DQEBCwUAA4IBAQCZkRroIWdB
WBMk2vQgMjHYwCtWo1ovCbB9zoxA+SvH0M9O7MIj0cHMXxzcRYZ7NapW1S53Iz9T
TNZJe9zqWvvqPxZ/dwdlf+o6C6ZfGhRrlKHhSU9SbaeeY6kUEDigdtE/EajqT2Us
YbduXa1IsvAOekZBT/q9Drk+JWxRbt96rI6mySzWXtmdMM2Jf5u9SXHvZ7s5Tgz/
Fb4bUkkZwJ+dtfwbsZl+GIDahZewHVlQ845gmN9rl5QFRNSkDySpBHC7eGgs3ZGE
EGLLXgTAnVrn6K3vFl+CBWrLZ/9WI/KCVfnsf1JMRDG4Lws1O54q3+eo4lLWiN1q
BcOO1gBtTKgn
-----END CERTIFICATE-----