Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/323830343a366239633a3a2f33322d3438203d3e20323730343132.roa
File:                     323830343a366239633a3a2f33322d3438203d3e20323730343132.roa (raw, json)
Hash identifier:          HNqODa4jPsaFCf2iYIwHEWgD+RrGBJ09mVTwl4puKew=
Subject key identifier:   85:5B:18:72:E5:5F:19:7A:E0:C6:10:57:92:80:48:15:69:72:27:F7
Certificate issuer:       /CN=8D7F98E3C24BD49979D9F15D3DF945D2CC327065
Certificate serial:       47D8CAE401A4EBE047347343087B94BA32398E4B
Authority key identifier: 8D:7F:98:E3:C2:4B:D4:99:79:D9:F1:5D:3D:F9:45:D2:CC:32:70:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/323830343a366239633a3a2f33322d3438203d3e20323730343132.roa
Signing time:             Tue 27 Aug 2024 20:16:43 +0000
ROA not before:           Tue 27 Aug 2024 20:11:43 +0000
ROA not after:            Tue 26 Aug 2025 20:16:43 +0000
asID:                     270412
IP address blocks:        2804:6b9c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d8:ca:e4:01:a4:eb:e0:47:34:73:43:08:7b:94:ba:32:39:8e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D7F98E3C24BD49979D9F15D3DF945D2CC327065
        Validity
            Not Before: Aug 27 20:11:43 2024 GMT
            Not After : Aug 26 20:16:43 2025 GMT
        Subject: CN=855B1872E55F197AE0C6105792804815697227F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:b2:4c:d9:01:87:a1:3d:86:15:2d:71:ff:
                    d5:ba:43:bb:6a:b0:cc:a5:6a:94:8e:56:a7:f7:d1:
                    c3:82:14:d9:96:23:b8:19:62:5e:51:ff:36:94:56:
                    3a:96:58:69:c2:eb:bf:5e:f9:48:aa:b4:9e:03:a0:
                    20:89:9f:e2:2c:a8:d9:55:de:61:3a:c2:5f:9a:36:
                    07:20:e3:c6:16:fa:27:b2:c3:72:40:56:14:9d:13:
                    72:90:ec:26:b5:df:fc:7c:8a:a2:17:94:4a:6b:ea:
                    68:8e:a6:fa:12:ae:5a:c5:8c:69:b6:c8:a1:14:0b:
                    18:05:bb:7e:66:78:d5:13:3a:3b:aa:0b:ff:8d:9c:
                    b8:1c:49:93:8e:d5:63:74:d0:08:39:01:43:d6:96:
                    b3:b5:9c:1c:27:02:90:17:4f:ca:33:24:7d:7b:b7:
                    15:c8:44:88:e0:95:26:bd:d0:16:2b:47:f9:6e:50:
                    c8:73:d1:61:3e:1c:76:51:d6:30:82:65:10:5f:85:
                    5f:4d:4d:c2:70:ed:9a:b6:cd:b9:40:30:0f:47:8d:
                    0e:84:e9:f3:3d:b8:cc:0b:82:ae:0f:4c:cb:b2:86:
                    f3:81:b1:40:c9:6a:70:2a:78:1d:02:d6:58:de:6f:
                    56:38:41:b1:5d:5c:fc:86:72:50:49:a8:85:b5:40:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:18:72:E5:5F:19:7A:E0:C6:10:57:92:80:48:15:69:72:27:F7
            X509v3 Authority Key Identifier:
                keyid:8D:7F:98:E3:C2:4B:D4:99:79:D9:F1:5D:3D:F9:45:D2:CC:32:70:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D7F98E3C24BD49979D9F15D3DF945D2CC327065.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATkdqEFa9Po6oWF79RU4QwkpKbQ5ENnZMQC67bwVq4NQ/0/323830343a366239633a3a2f33322d3438203d3e20323730343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:d3:93:90:8b:d8:0a:b4:e1:2d:71:bf:5d:fa:1a:3d:3d:
         8f:fa:79:62:f4:5c:22:44:66:07:8e:78:ca:1a:c9:b7:06:ee:
         51:0b:8d:f3:5a:18:ce:e8:07:53:b2:d0:f1:f6:b3:e9:52:77:
         95:ee:60:50:e6:38:39:45:0a:7f:79:36:9c:7d:c6:7a:9d:c7:
         7b:61:9f:2f:9a:9a:49:cf:db:5a:39:00:e9:eb:36:ef:44:5b:
         7b:9c:7a:c8:d8:dc:e0:86:9e:a4:df:16:bc:28:0b:c2:d4:8c:
         a3:35:e0:9f:48:29:92:d0:1a:fb:b5:6f:49:f5:d2:78:ce:04:
         9e:0a:2a:51:3b:7c:6a:68:8d:e3:81:4c:75:23:d8:a5:f6:1c:
         7d:ce:a1:06:c2:1e:39:e1:26:4d:9f:53:97:38:f3:e8:66:df:
         6a:f0:2d:da:80:18:5e:ed:37:b1:bc:e2:50:42:5b:d6:33:24:
         a4:8e:60:6f:27:a9:01:dd:bd:52:3c:42:72:35:e0:81:58:2e:
         e3:85:02:d9:64:e6:5f:2f:07:73:b0:66:89:4e:f4:03:81:6c:
         8d:a9:e8:fd:78:dc:1e:16:34:3a:1b:25:6f:bb:59:97:ca:db:
         9d:b5:2f:7f:bc:3c:17:30:15:97:cb:7e:31:5f:89:e3:e3:25:
         53:21:d7:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR9jK5AGk6+BHNHNDCHuUujI5jkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ3Rjk4RTNDMjRCRDQ5OTc5RDlGMTVEM0RGOTQ1RDJD
QzMyNzA2NTAeFw0yNDA4MjcyMDExNDNaFw0yNTA4MjYyMDE2NDNaMDMxMTAvBgNV
BAMTKDg1NUIxODcyRTU1RjE5N0FFMEM2MTA1NzkyODA0ODE1Njk3MjI3RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUs7JM2QGHoT2GFS1x/9W6Q7tq
sMylapSOVqf30cOCFNmWI7gZYl5R/zaUVjqWWGnC679e+UiqtJ4DoCCJn+IsqNlV
3mE6wl+aNgcg48YW+ieyw3JAVhSdE3KQ7Ca13/x8iqIXlEpr6miOpvoSrlrFjGm2
yKEUCxgFu35meNUTOjuqC/+NnLgcSZOO1WN00Ag5AUPWlrO1nBwnApAXT8ozJH17
txXIRIjglSa90BYrR/luUMhz0WE+HHZR1jCCZRBfhV9NTcJw7Zq2zblAMA9HjQ6E
6fM9uMwLgq4PTMuyhvOBsUDJanAqeB0C1ljeb1Y4QbFdXPyGclBJqIW1QBhrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhVsYcuVfGXrgxhBXkoBIFWlyJ/cwHwYDVR0j
BBgwFoAUjX+Y48JL1Jl52fFdPflF0swycGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVRrZHFFRmE5UG82b1dGNzlSVTRRd2twS2JRNUVOblpNUUM2N2J3VnE0
TlEvMC84RDdGOThFM0MyNEJENDk5NzlEOUYxNUQzREY5NDVEMkNDMzI3MDY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEN0Y5OEUzQzI0QkQ0OTk3
OUQ5RjE1RDNERjk0NUQyQ0MzMjcwNjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FUa2RxRUZhOVBvNm9XRjc5UlU0UXdrcEtiUTVFTm5aTVFDNjdid1ZxNE5RLzAv
MzIzODMwMzQzYTM2NjIzOTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzQzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARrnDANBgkqhkiG9w0BAQsFAAOCAQEAZf7Tk5CL
2Aq04S1xv136Gj09j/p5YvRcIkRmB454yhrJtwbuUQuN81oYzugHU7LQ8faz6VJ3
le5gUOY4OUUKf3k2nH3Gep3He2GfL5qaSc/bWjkA6es270Rbe5x6yNjc4IaepN8W
vCgLwtSMozXgn0gpktAa+7VvSfXSeM4EngoqUTt8amiN44FMdSPYpfYcfc6hBsIe
OeEmTZ9Tlzjz6GbfavAt2oAYXu03sbziUEJb1jMkpI5gbyepAd29UjxCcjXggVgu
44UC2WTmXy8Hc7BmiU70A4Fsjano/XjcHhY0Ohslb7tZl8rbnbUvf7w8FzAVl8t+
MV+J4+MlUyHXnw==
-----END CERTIFICATE-----