Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
File:                     323830343a6535303a3a2f33322d3438203d3e203533303637.roa (raw, json)
Hash identifier:          7U4KIbYmU30fIhF4uHeevgaIyXkNWT6jU5R/VkJXFKw=
Subject key identifier:   9E:7B:5E:2A:B4:CB:45:D0:7D:44:59:43:25:1A:74:50:FD:84:D5:90
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       7EF1E02B1A732E797A070BBAFA59E86A7E23B0C0
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6535303a3a2f33322d3438203d3e203533303637.roa
Signing time:             Thu 04 Apr 2024 19:59:34 +0000
ROA not before:           Thu 04 Apr 2024 19:54:34 +0000
ROA not after:            Thu 03 Apr 2025 19:59:34 +0000
asID:                     53067
IP address blocks:        2804:e50::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f1:e0:2b:1a:73:2e:79:7a:07:0b:ba:fa:59:e8:6a:7e:23:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:34 2024 GMT
            Not After : Apr  3 19:59:34 2025 GMT
        Subject: CN=9E7B5E2AB4CB45D07D445943251A7450FD84D590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:27:a7:32:be:e9:82:0c:bc:3e:39:2e:44:
                    80:bc:d9:6f:77:25:0b:de:ec:36:d0:1c:0e:c0:1b:
                    e9:57:a4:f4:78:2a:31:ba:e7:88:fc:d5:da:a8:fe:
                    d6:b9:e1:6d:b9:32:07:54:3e:5c:bb:93:9d:e6:15:
                    76:e9:22:0e:62:93:e3:0e:98:fb:ee:a1:65:9e:e7:
                    d8:0d:74:fa:ef:83:28:c0:69:e6:69:b1:6c:9a:25:
                    9b:a7:c0:eb:37:79:10:38:77:43:d4:12:bd:34:4d:
                    05:8b:d8:34:74:61:46:ff:ce:cd:30:5e:34:b3:8e:
                    73:91:ae:52:3a:fd:3e:d1:3e:f4:ef:72:b1:62:50:
                    f9:66:17:e0:55:70:3f:64:fe:72:60:1a:f9:f7:10:
                    b2:0e:3e:c3:cd:2b:d5:95:ef:4a:16:62:36:b9:64:
                    26:7a:e3:5a:c3:0b:22:cc:aa:89:a3:5b:9b:41:66:
                    dc:97:6d:79:d5:94:dd:4b:44:7d:6e:79:04:c3:e2:
                    27:90:09:89:86:74:64:21:87:98:db:eb:57:16:05:
                    b5:da:08:15:c4:d6:56:42:c7:e0:e6:31:7c:d3:e7:
                    08:b9:09:4c:0d:c4:8f:67:c4:04:db:48:74:3d:c1:
                    6d:66:2b:3d:02:09:45:5e:e2:0c:98:76:2f:f8:07:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:5E:2A:B4:CB:45:D0:7D:44:59:43:25:1A:74:50:FD:84:D5:90
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/323830343a6535303a3a2f33322d3438203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:0b:31:11:a5:1e:82:eb:c7:b0:66:b6:0d:6a:ff:02:10:d6:
         dc:4e:42:bd:7a:f9:e6:ac:41:30:96:19:7f:c2:a5:1f:ee:68:
         16:fa:50:77:2b:3b:84:a6:23:b0:9f:c5:d7:3f:d0:67:a3:e2:
         56:a6:78:94:79:17:fe:ab:4b:e4:32:61:c0:0a:bf:4f:ad:d5:
         cf:4c:c8:a6:97:08:8b:6f:78:6d:7c:a2:eb:8d:19:8b:4d:a5:
         c8:4f:d1:b5:86:65:cc:ee:e4:97:ec:68:72:4c:d2:c2:14:14:
         9f:30:d0:c3:1b:ee:61:45:2c:09:ed:fd:48:1a:e1:35:ae:e2:
         ab:4e:f9:2f:e3:8c:b6:94:9a:9d:b1:50:20:b2:6d:09:15:ad:
         af:d3:d2:7b:79:15:48:36:fe:5b:99:bb:f9:63:e9:3e:d3:dd:
         64:70:c5:25:59:7d:1b:1f:97:94:09:b8:42:df:f3:1f:e8:15:
         67:ca:63:99:db:4a:e9:47:6b:82:bc:97:de:3c:e5:71:94:44:
         81:db:a0:d6:4f:62:b7:04:9f:df:cd:bd:59:2d:69:9a:fe:c6:
         a8:5e:9d:fa:37:d8:c3:90:44:b5:26:df:10:b0:72:47:0b:e6:
         b8:b0:1b:7e:fc:30:b0:07:f9:4d:42:7c:14:ef:2c:e3:06:5b:
         25:89:52:64
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUfvHgKxpzLnl6Bwu6+lnoan4jsMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MzRaFw0yNTA0MDMxOTU5MzRaMDMxMTAvBgNV
BAMTKDlFN0I1RTJBQjRDQjQ1RDA3RDQ0NTk0MzI1MUE3NDUwRkQ4NEQ1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgoSenMr7pggy8PjkuRIC82W93
JQve7DbQHA7AG+lXpPR4KjG654j81dqo/ta54W25MgdUPly7k53mFXbpIg5ik+MO
mPvuoWWe59gNdPrvgyjAaeZpsWyaJZunwOs3eRA4d0PUEr00TQWL2DR0YUb/zs0w
XjSzjnORrlI6/T7RPvTvcrFiUPlmF+BVcD9k/nJgGvn3ELIOPsPNK9WV70oWYja5
ZCZ641rDCyLMqomjW5tBZtyXbXnVlN1LRH1ueQTD4ieQCYmGdGQhh5jb61cWBbXa
CBXE1lZCx+DmMXzT5wi5CUwNxI9nxATbSHQ9wW1mKz0CCUVe4gyYdi/4BxB3AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUnnteKrTLRdB9RFlDJRp0UP2E1ZAwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzIzODMwMzQzYTY1MzUzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMDM2
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBA5QMA0GCSqGSIb3DQEBCwUAA4IBAQAdCzERpR6C68ew
ZrYNav8CENbcTkK9evnmrEEwlhl/wqUf7mgW+lB3KzuEpiOwn8XXP9Bno+JWpniU
eRf+q0vkMmHACr9PrdXPTMimlwiLb3htfKLrjRmLTaXIT9G1hmXM7uSX7GhyTNLC
FBSfMNDDG+5hRSwJ7f1IGuE1ruKrTvkv44y2lJqdsVAgsm0JFa2v09J7eRVINv5b
mbv5Y+k+091kcMUlWX0bH5eUCbhC3/Mf6BVnymOZ20rpR2uCvJfePOVxlESB26DW
T2K3BJ/fzb1ZLWma/saoXp36N9jDkES1Jt8QsHJHC+a4sBt+/DCwB/lNQnwU7yzj
BlsliVJk
-----END CERTIFICATE-----