Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/323830343a376462303a3a2f33322d3332203d3e20323731353736.roa
File:                     323830343a376462303a3a2f33322d3332203d3e20323731353736.roa (raw, json)
Hash identifier:          FaYCrtoEmH8OObvaD40JyOcOIKDFXmPADXRyykMBUAk=
Subject key identifier:   86:7A:13:87:E5:8C:FB:19:5C:73:F5:3C:0B:3D:58:F6:4B:6C:26:E8
Certificate issuer:       /CN=75FCFDED5AE160A7254D2397F03C84F6615F3F05
Certificate serial:       366BA31E7C415D25ACA4C676DE6E7BE5AAA6A21A
Authority key identifier: 75:FC:FD:ED:5A:E1:60:A7:25:4D:23:97:F0:3C:84:F6:61:5F:3F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/323830343a376462303a3a2f33322d3332203d3e20323731353736.roa
Signing time:             Thu 04 Apr 2024 18:57:21 +0000
ROA not before:           Thu 04 Apr 2024 18:52:21 +0000
ROA not after:            Thu 03 Apr 2025 18:57:21 +0000
asID:                     271576
IP address blocks:        2804:7db0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6b:a3:1e:7c:41:5d:25:ac:a4:c6:76:de:6e:7b:e5:aa:a6:a2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75FCFDED5AE160A7254D2397F03C84F6615F3F05
        Validity
            Not Before: Apr  4 18:52:21 2024 GMT
            Not After : Apr  3 18:57:21 2025 GMT
        Subject: CN=867A1387E58CFB195C73F53C0B3D58F64B6C26E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:f4:08:8a:2b:e1:64:7b:5d:4a:7f:83:15:
                    37:2b:1e:69:ba:7c:c0:4b:ec:5d:48:20:28:a7:9b:
                    62:5a:27:a0:0b:6b:67:82:7e:1e:1a:1b:55:77:23:
                    f1:b5:6b:4f:4a:f5:eb:09:ab:86:45:d9:14:a4:1b:
                    91:2a:68:be:99:71:12:54:cc:e9:d8:4b:26:2e:f6:
                    6f:7c:ef:61:ba:95:c4:57:9c:ce:6f:bf:e9:f7:d3:
                    7c:aa:9e:d6:26:18:d9:42:9c:7e:af:c9:80:e5:2f:
                    82:3b:06:c9:b3:ce:5f:55:0b:63:24:ec:f2:f7:be:
                    08:f9:f5:eb:c8:54:87:eb:33:0a:13:ff:99:9d:bb:
                    19:94:cd:e5:0f:4b:c5:08:f5:12:a3:7f:35:cd:f7:
                    b6:1e:89:04:70:b5:73:5f:dc:10:64:ec:01:e4:35:
                    f3:a7:c2:57:63:78:10:66:a5:c7:0c:18:f7:82:3a:
                    76:06:3b:67:35:6a:5a:55:25:47:0a:01:5a:97:14:
                    10:b8:85:b5:be:c6:af:98:dd:04:ff:dd:aa:a8:57:
                    1c:c2:66:be:e2:bd:b6:35:a1:7a:99:89:8b:cc:71:
                    45:e1:36:f4:37:10:df:e0:59:4f:c5:8b:34:08:6b:
                    ef:0e:5e:c8:b8:9b:c8:8a:79:57:b3:fc:76:3a:72:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:13:87:E5:8C:FB:19:5C:73:F5:3C:0B:3D:58:F6:4B:6C:26:E8
            X509v3 Authority Key Identifier:
                keyid:75:FC:FD:ED:5A:E1:60:A7:25:4D:23:97:F0:3C:84:F6:61:5F:3F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75FCFDED5AE160A7254D2397F03C84F6615F3F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEvjLFZCoTqEfWLBefqc8PuiBKmXXA81sJ6XW5soCe5o/1/323830343a376462303a3a2f33322d3332203d3e20323731353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:d8:88:43:86:65:c6:8a:11:83:26:e3:d9:17:80:72:4f:
         5c:13:aa:71:f7:27:5b:8d:61:57:1c:70:79:07:98:5e:1c:bf:
         1b:48:87:f6:1b:93:3a:b8:4e:db:c0:af:a0:85:f1:8e:3f:a5:
         0e:6b:40:2d:fd:19:bc:65:8a:6b:17:7e:84:01:48:cc:0e:0d:
         98:90:04:ca:3c:4f:1b:2b:f9:ac:98:aa:f5:c9:7b:0e:d5:44:
         ee:27:9a:b7:26:99:a7:dc:fd:83:73:70:c6:9c:f7:c2:0c:45:
         fa:12:3d:19:69:48:b3:8b:8e:e8:eb:87:6a:d2:d0:ac:8a:4a:
         0d:5e:aa:a6:c1:98:59:90:ce:1e:21:f7:af:ee:8e:3b:34:af:
         f1:01:15:61:6c:a7:03:e1:8d:ee:77:53:de:f5:af:5b:07:f6:
         67:f6:82:a9:5e:88:a9:c3:ee:73:f1:5a:35:0f:02:14:ac:d4:
         53:75:e2:d8:55:55:48:36:b8:3f:f8:21:a0:fd:92:04:1a:a0:
         8e:2d:99:69:62:8b:94:72:f4:03:be:3f:22:c8:f8:67:37:75:
         3e:79:14:b9:10:ea:0d:80:0f:8a:1a:5b:62:2b:a0:0d:db:ac:
         37:d6:e0:da:e1:ce:b1:4f:8d:15:23:0e:25:20:3d:2c:ba:f9:
         cb:15:a7:cf
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNmujHnxBXSWspMZ23m575aqmohowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVGQ0ZERUQ1QUUxNjBBNzI1NEQyMzk3RjAzQzg0RjY2
MTVGM0YwNTAeFw0yNDA0MDQxODUyMjFaFw0yNTA0MDMxODU3MjFaMDMxMTAvBgNV
BAMTKDg2N0ExMzg3RTU4Q0ZCMTk1QzczRjUzQzBCM0Q1OEY2NEI2QzI2RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnu/QIiivhZHtdSn+DFTcrHmm6
fMBL7F1IICinm2JaJ6ALa2eCfh4aG1V3I/G1a09K9esJq4ZF2RSkG5EqaL6ZcRJU
zOnYSyYu9m9872G6lcRXnM5vv+n303yqntYmGNlCnH6vyYDlL4I7Bsmzzl9VC2Mk
7PL3vgj59evIVIfrMwoT/5mduxmUzeUPS8UI9RKjfzXN97YeiQRwtXNf3BBk7AHk
NfOnwldjeBBmpccMGPeCOnYGO2c1alpVJUcKAVqXFBC4hbW+xq+Y3QT/3aqoVxzC
Zr7ivbY1oXqZiYvMcUXhNvQ3EN/gWU/FizQIa+8OXsi4m8iKeVez/HY6cqwNAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhnoTh+WM+xlcc/U8Cz1Y9ktsJugwHwYDVR0j
BBgwFoAUdfz97VrhYKclTSOX8DyE9mFfPwUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkV2akxGWkNvVHFFZldMQmVmcWM4UHVpQkttWFhBODFzSjZYVzVzb0Nl
NW8vMS83NUZDRkRFRDVBRTE2MEE3MjU0RDIzOTdGMDNDODRGNjYxNUYzRjA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1RkNGREVENUFFMTYwQTcy
NTREMjM5N0YwM0M4NEY2NjE1RjNGMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JFdmpMRlpDb1RxRWZXTEJlZnFjOFB1aUJLbVhYQTgxc0o2WFc1c29DZTVvLzEv
MzIzODMwMzQzYTM3NjQ2MjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR9sDANBgkqhkiG9w0BAQsFAAOCAQEAH63YiEOG
ZcaKEYMm49kXgHJPXBOqcfcnW41hVxxweQeYXhy/G0iH9huTOrhO28CvoIXxjj+l
DmtALf0ZvGWKaxd+hAFIzA4NmJAEyjxPGyv5rJiq9cl7DtVE7ieatyaZp9z9g3Nw
xpz3wgxF+hI9GWlIs4uO6OuHatLQrIpKDV6qpsGYWZDOHiH3r+6OOzSv8QEVYWyn
A+GN7ndT3vWvWwf2Z/aCqV6IqcPuc/FaNQ8CFKzUU3Xi2FVVSDa4P/ghoP2SBBqg
ji2ZaWKLlHL0A74/Isj4Zzd1PnkUuRDqDYAPihpbYiugDdusN9bg2uHOsU+NFSMO
JSA9LLr5yxWnzw==
-----END CERTIFICATE-----