Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d313238203d3e20323731363831.roa
File:                     323830343a376635343a3a2f33322d313238203d3e20323731363831.roa (raw, json)
Hash identifier:          dZkaN2+Jljc6cHISY2eiptm22oseZPzE6baBqsVxBHU=
Subject key identifier:   93:C4:FF:F8:05:9F:A8:70:93:08:26:58:FD:09:E6:5B:76:12:1E:BD
Certificate issuer:       /CN=1382763288813C54BAD7B2D380F66C14A4002F56
Certificate serial:       43B50E35A4EAB0A9E1526485D2A45B90CB0ADEF7
Authority key identifier: 13:82:76:32:88:81:3C:54:BA:D7:B2:D3:80:F6:6C:14:A4:00:2F:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1382763288813C54BAD7B2D380F66C14A4002F56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d313238203d3e20323731363831.roa
Signing time:             Thu 24 Oct 2024 01:46:16 +0000
ROA not before:           Thu 24 Oct 2024 01:41:16 +0000
ROA not after:            Thu 23 Oct 2025 01:46:16 +0000
asID:                     271681
IP address blocks:        2804:7f54::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b5:0e:35:a4:ea:b0:a9:e1:52:64:85:d2:a4:5b:90:cb:0a:de:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1382763288813C54BAD7B2D380F66C14A4002F56
        Validity
            Not Before: Oct 24 01:41:16 2024 GMT
            Not After : Oct 23 01:46:16 2025 GMT
        Subject: CN=93C4FFF8059FA87093082658FD09E65B76121EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:0b:bc:2e:99:55:c7:01:f5:98:95:62:39:
                    d8:9e:cc:6a:3a:c9:b5:6f:4d:1d:e5:89:41:e3:48:
                    ee:4f:da:a3:7b:89:2e:c5:50:7b:84:e7:9d:7b:11:
                    1e:c7:ad:a2:6d:97:fe:3d:d5:cc:c0:1b:61:c8:7f:
                    77:a2:79:56:fa:9a:b0:bb:22:b0:69:d8:0c:8a:61:
                    9b:af:b0:e4:b9:91:f1:66:34:37:97:e7:ec:2c:9b:
                    ba:ff:a1:9c:bb:38:0a:5e:d9:aa:42:6a:3a:f7:cc:
                    00:24:74:39:f7:ec:bf:50:d2:35:8c:2a:d8:a4:7a:
                    55:80:50:28:47:af:94:a1:8f:42:9c:92:95:0d:da:
                    1e:de:5b:07:28:71:4d:68:b7:54:7b:03:b2:67:77:
                    78:32:c6:01:35:4f:73:40:28:ad:a4:b3:e4:65:9b:
                    84:65:1e:84:a0:78:53:74:e4:68:4a:31:5c:1d:2d:
                    57:da:4d:40:5b:0d:e3:8b:ee:17:37:dc:18:d3:e9:
                    41:d1:91:a0:64:e1:56:5f:a8:e1:3b:7f:40:4a:55:
                    bf:91:c7:d7:d1:8d:69:27:d5:39:f9:5c:ff:bb:d0:
                    97:ac:66:2f:03:ee:24:1c:9e:12:f2:fd:61:0c:1d:
                    dc:7e:37:81:13:6c:11:93:5a:53:ab:ce:b9:c1:c8:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:FF:F8:05:9F:A8:70:93:08:26:58:FD:09:E6:5B:76:12:1E:BD
            X509v3 Authority Key Identifier:
                keyid:13:82:76:32:88:81:3C:54:BA:D7:B2:D3:80:F6:6C:14:A4:00:2F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/1382763288813C54BAD7B2D380F66C14A4002F56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1382763288813C54BAD7B2D380F66C14A4002F56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfARKZfAYVhFh5NZeR5KM19Xn86EEkYneH4LzJoPP2o9/0/323830343a376635343a3a2f33322d313238203d3e20323731363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:09:5c:d7:b8:ca:cf:3e:3e:1f:8b:67:f3:1f:2d:aa:52:
         92:8b:c1:3a:5d:a1:fe:5e:f9:44:1b:de:35:70:e2:05:e6:d2:
         fc:6f:67:ad:69:71:f6:25:23:ab:0c:a4:01:c3:f1:9b:29:f2:
         3e:25:c1:ad:84:c3:39:e5:60:0e:55:f4:cb:2e:a7:1b:9c:54:
         a0:84:a1:60:69:a1:f6:77:2a:0e:c0:41:f7:f3:44:b0:08:81:
         36:f8:63:43:96:e3:da:20:60:37:d6:5f:0e:97:2e:95:15:d8:
         b0:a4:0f:35:01:e9:ad:d5:3e:94:62:0c:d9:2e:92:23:ac:e8:
         b5:95:27:64:bf:fa:93:45:b1:62:12:bc:a9:aa:e3:3a:32:67:
         7c:95:71:91:06:97:b1:b5:85:dc:91:77:16:60:9e:f7:98:be:
         73:6a:3a:ba:f2:49:27:5c:95:30:bd:3a:a9:7d:48:42:57:f8:
         6a:ed:57:c6:2c:d1:b9:87:0d:eb:b2:3f:2a:30:85:dd:da:f2:
         d4:b6:a2:cf:bd:17:6b:77:32:c8:c3:4d:19:25:87:4b:07:61:
         41:8c:03:bc:94:3b:f2:58:1b:a1:46:ba:66:2b:81:d2:d9:6d:
         e2:98:ec:2d:e1:67:ee:f2:59:5d:3f:b1:ac:34:17:49:69:10:
         9e:39:02:f2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUQ7UONaTqsKnhUmSF0qRbkMsK3vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM4Mjc2MzI4ODgxM0M1NEJBRDdCMkQzODBGNjZDMTRB
NDAwMkY1NjAeFw0yNDEwMjQwMTQxMTZaFw0yNTEwMjMwMTQ2MTZaMDMxMTAvBgNV
BAMTKDkzQzRGRkY4MDU5RkE4NzA5MzA4MjY1OEZEMDlFNjVCNzYxMjFFQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Vwu8LplVxwH1mJViOdiezGo6
ybVvTR3liUHjSO5P2qN7iS7FUHuE5517ER7HraJtl/491czAG2HIf3eieVb6mrC7
IrBp2AyKYZuvsOS5kfFmNDeX5+wsm7r/oZy7OApe2apCajr3zAAkdDn37L9Q0jWM
KtikelWAUChHr5Shj0KckpUN2h7eWwcocU1ot1R7A7Jnd3gyxgE1T3NAKK2ks+Rl
m4RlHoSgeFN05GhKMVwdLVfaTUBbDeOL7hc33BjT6UHRkaBk4VZfqOE7f0BKVb+R
x9fRjWkn1Tn5XP+70JesZi8D7iQcnhLy/WEMHdx+N4ETbBGTWlOrzrnByMhTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUk8T/+AWfqHCTCCZY/QnmW3YSHr0wHwYDVR0j
BBgwFoAUE4J2MoiBPFS617LTgPZsFKQAL1YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZBUktaZkFZVmhGaDVOWmVSNUtNMTlYbjg2RUVrWW5lSDRMekpvUFAy
bzkvMC8xMzgyNzYzMjg4ODEzQzU0QkFEN0IyRDM4MEY2NkMxNEE0MDAyRjU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzODI3NjMyODg4MTNDNTRC
QUQ3QjJEMzgwRjY2QzE0QTQwMDJGNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmQVJLWmZBWVZoRmg1TlplUjVLTTE5WG44NkVFa1luZUg0THpKb1BQMm85LzAv
MzIzODMwMzQzYTM3NjYzNTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBH9UMA0GCSqGSIb3DQEBCwUAA4IBAQA6LAlc
17jKzz4+H4tn8x8tqlKSi8E6XaH+XvlEG941cOIF5tL8b2etaXH2JSOrDKQBw/Gb
KfI+JcGthMM55WAOVfTLLqcbnFSghKFgaaH2dyoOwEH380SwCIE2+GNDluPaIGA3
1l8Oly6VFdiwpA81Aemt1T6UYgzZLpIjrOi1lSdkv/qTRbFiErypquM6Mmd8lXGR
BpextYXckXcWYJ73mL5zajq68kknXJUwvTqpfUhCV/hq7VfGLNG5hw3rsj8qMIXd
2vLUtqLPvRdrdzLIw00ZJYdLB2FBjAO8lDvyWBuhRrpmK4HS2W3imOwt4Wfu8lld
P7GsNBdJaRCeOQLy
-----END CERTIFICATE-----