Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/323830343a373565633a3a2f33322d3536203d3e20323731303738.roa
File:                     323830343a373565633a3a2f33322d3536203d3e20323731303738.roa (raw, json)
Hash identifier:          QOqyypNjWgG/xIJUUl+EtWRNOUKNGWX04EMPMFkn7Os=
Subject key identifier:   3C:84:72:63:0C:DA:3F:09:74:82:0F:CE:81:FD:3B:20:1D:06:AD:00
Certificate issuer:       /CN=1CBEAA86D03EF7AECC656CCE5B400357459EF7D6
Certificate serial:       3DD0A91F00C907896819F2752B43D57234F20733
Authority key identifier: 1C:BE:AA:86:D0:3E:F7:AE:CC:65:6C:CE:5B:40:03:57:45:9E:F7:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/323830343a373565633a3a2f33322d3536203d3e20323731303738.roa
Signing time:             Thu 04 Apr 2024 01:07:05 +0000
ROA not before:           Thu 04 Apr 2024 01:02:05 +0000
ROA not after:            Thu 03 Apr 2025 01:07:05 +0000
asID:                     271078
IP address blocks:        2804:75ec::/32 maxlen: 56

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:a9:1f:00:c9:07:89:68:19:f2:75:2b:43:d5:72:34:f2:07:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CBEAA86D03EF7AECC656CCE5B400357459EF7D6
        Validity
            Not Before: Apr  4 01:02:05 2024 GMT
            Not After : Apr  3 01:07:05 2025 GMT
        Subject: CN=3C8472630CDA3F0974820FCE81FD3B201D06AD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:07:c8:7c:21:9e:81:3b:2a:93:c1:14:30:
                    04:d9:c3:f6:23:01:3c:31:23:c7:ec:93:f8:c4:18:
                    0a:ed:3c:f1:40:12:7e:1a:a0:fb:6b:a5:1e:73:db:
                    d1:01:a5:94:85:11:79:1a:2b:3e:df:8c:98:8a:03:
                    ad:31:29:29:f2:fb:d7:9a:cc:2f:ca:1d:b6:82:f8:
                    76:15:97:48:c1:9d:8a:9f:f0:df:ec:42:f3:8a:a9:
                    2a:51:08:9b:17:c6:3b:8c:23:21:c8:de:1e:ea:98:
                    ea:72:1a:dc:d3:f2:c1:69:df:4f:23:56:83:32:c0:
                    6c:e1:10:a2:10:02:b9:86:6f:fd:13:bd:53:7c:0d:
                    ef:6e:9f:ac:12:26:1a:9b:85:72:9a:0f:a8:cc:51:
                    6f:22:47:71:60:85:16:95:57:64:e6:a1:63:f1:27:
                    5e:5e:6f:8d:a8:a4:08:8b:3b:5b:eb:6d:fd:1d:3f:
                    81:9c:b9:83:c2:2d:e0:36:91:97:7b:5b:1b:18:c0:
                    a2:59:d9:15:cb:d0:02:01:85:bd:df:73:9c:43:68:
                    72:35:28:75:af:d8:06:73:c7:b7:58:68:21:b0:12:
                    5c:5c:ea:6b:99:02:e0:17:9e:cf:1c:5b:1d:08:6f:
                    b4:35:68:f0:e9:ab:4a:a5:d5:a8:21:36:fd:47:cc:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:84:72:63:0C:DA:3F:09:74:82:0F:CE:81:FD:3B:20:1D:06:AD:00
            X509v3 Authority Key Identifier:
                keyid:1C:BE:AA:86:D0:3E:F7:AE:CC:65:6C:CE:5B:40:03:57:45:9E:F7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/323830343a373565633a3a2f33322d3536203d3e20323731303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:4c:0c:02:42:aa:b0:f5:0d:f8:77:6c:5e:57:93:71:9c:2f:
         d4:bc:46:b1:4e:9c:72:a4:6c:87:15:4b:10:66:a3:b8:33:52:
         0a:42:ff:71:42:4b:77:b3:03:12:60:87:22:83:2c:56:a6:24:
         27:fd:79:31:dc:58:36:5e:30:48:85:95:fb:d6:2a:35:9b:a5:
         8b:06:94:d5:41:22:bf:ef:03:1b:c1:c9:fa:cf:dd:b5:b9:97:
         0c:b8:52:3c:4f:69:5d:17:cc:57:eb:98:94:88:63:51:c3:49:
         38:bd:f0:df:3c:d6:2a:c3:c1:ba:7a:c8:eb:5a:7c:2e:cf:63:
         24:26:62:3d:15:f2:f2:17:71:79:04:99:ce:f3:c6:2a:3a:61:
         10:53:5a:ad:0e:8e:42:42:b3:59:2c:b3:ea:16:ec:f2:27:78:
         84:69:35:cf:bd:86:36:79:31:b6:aa:f2:7e:e7:2c:9c:ea:91:
         5d:bc:30:9e:10:97:a7:f7:a2:fc:18:12:cf:6d:12:04:90:07:
         72:f4:02:8f:d5:cd:0c:3e:ae:9d:0f:ac:cb:05:ac:88:f9:6d:
         54:c7:cb:5e:a6:56:70:d9:a0:dd:34:06:49:a4:af:f3:e0:9b:
         7c:0f:24:fb:7e:52:f0:68:25:88:00:43:7a:2e:20:4e:10:a0:
         16:3b:62:35
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPdCpHwDJB4loGfJ1K0PVcjTyBzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNCRUFBODZEMDNFRjdBRUNDNjU2Q0NFNUI0MDAzNTc0
NTlFRjdENjAeFw0yNDA0MDQwMTAyMDVaFw0yNTA0MDMwMTA3MDVaMDMxMTAvBgNV
BAMTKDNDODQ3MjYzMENEQTNGMDk3NDgyMEZDRTgxRkQzQjIwMUQwNkFEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirgfIfCGegTsqk8EUMATZw/Yj
ATwxI8fsk/jEGArtPPFAEn4aoPtrpR5z29EBpZSFEXkaKz7fjJiKA60xKSny+9ea
zC/KHbaC+HYVl0jBnYqf8N/sQvOKqSpRCJsXxjuMIyHI3h7qmOpyGtzT8sFp308j
VoMywGzhEKIQArmGb/0TvVN8De9un6wSJhqbhXKaD6jMUW8iR3FghRaVV2TmoWPx
J15eb42opAiLO1vrbf0dP4GcuYPCLeA2kZd7WxsYwKJZ2RXL0AIBhb3fc5xDaHI1
KHWv2AZzx7dYaCGwElxc6muZAuAXns8cWx0Ib7Q1aPDpq0ql1aghNv1HzFIDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPIRyYwzaPwl0gg/Ogf07IB0GrQAwHwYDVR0j
BBgwFoAUHL6qhtA+967MZWzOW0ADV0We99YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXgzc0dmZHVUQmhnazJtdVNIaUFjY1NUVGh1QVN6WkxaOUpGVFkxTGF3
N20vMS8xQ0JFQUE4NkQwM0VGN0FFQ0M2NTZDQ0U1QjQwMDM1NzQ1OUVGN0Q2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDQkVBQTg2RDAzRUY3QUVD
QzY1NkNDRTVCNDAwMzU3NDU5RUY3RDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F4M3NHZmR1VEJoZ2sybXVTSGlBY2NTVFRodUFTelpMWjlKRlRZMUxhdzdtLzEv
MzIzODMwMzQzYTM3MzU2NTYzM2EzYTJmMzMzMjJkMzUzNjIwM2QzZTIwMzIzNzMx
MzAzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR17DANBgkqhkiG9w0BAQsFAAOCAQEAq0wMAkKq
sPUN+HdsXleTcZwv1LxGsU6ccqRshxVLEGajuDNSCkL/cUJLd7MDEmCHIoMsVqYk
J/15MdxYNl4wSIWV+9YqNZuliwaU1UEiv+8DG8HJ+s/dtbmXDLhSPE9pXRfMV+uY
lIhjUcNJOL3w3zzWKsPBunrI61p8Ls9jJCZiPRXy8hdxeQSZzvPGKjphEFNarQ6O
QkKzWSyz6hbs8id4hGk1z72GNnkxtqryfucsnOqRXbwwnhCXp/ei/BgSz20SBJAH
cvQCj9XNDD6unQ+sywWsiPltVMfLXqZWcNmg3TQGSaSv8+CbfA8k+35S8GgliABD
ei4gThCgFjtiNQ==
-----END CERTIFICATE-----