Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa
File:                     323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa (raw, json)
Hash identifier:          6l+nFl2Fr1yUHzyepzB54cAwUR9uYVKEvzth4I3VyII=
Subject key identifier:   D9:8F:A2:90:2D:2D:2C:32:53:92:00:0A:B1:72:2D:1B:57:E2:15:4D
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       5F3373C3094C096AD596C2F46FDF9A754090671E
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:48 +0000
ROA not before:           Thu 04 Apr 2024 07:39:48 +0000
ROA not after:            Thu 03 Apr 2025 07:44:48 +0000
asID:                     263421
IP address blocks:        2804:1600:100::/40 maxlen: 40

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:33:73:c3:09:4c:09:6a:d5:96:c2:f4:6f:df:9a:75:40:90:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:48 2024 GMT
            Not After : Apr  3 07:44:48 2025 GMT
        Subject: CN=D98FA2902D2D2C325392000AB1722D1B57E2154D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:de:42:57:b9:7d:9c:f7:a0:cc:80:4f:b6:
                    0b:74:49:b3:6b:08:fc:e8:39:57:78:9b:5f:f0:fa:
                    bd:ad:07:ad:97:23:33:13:00:5d:8d:e0:b9:5d:85:
                    2b:ed:be:44:a1:5b:86:9c:3e:0a:7a:40:b3:78:a3:
                    73:6c:24:e4:ca:d4:bf:41:17:6f:26:7a:3b:9b:a7:
                    84:d4:e1:95:ec:47:5e:16:6b:f6:ea:80:2e:93:71:
                    ae:bc:8a:0e:76:f7:39:b7:3b:4b:5b:50:ae:40:dd:
                    66:4f:75:71:87:65:9d:6d:c5:bb:3b:6c:20:76:85:
                    cc:74:25:96:a7:00:39:ca:42:5d:69:62:d0:e3:fd:
                    66:6f:ac:bc:03:26:fb:b0:99:e6:8b:cd:d5:0f:fe:
                    a1:cf:84:70:fd:80:fc:89:a9:2e:03:57:06:e9:9c:
                    c9:fd:83:20:67:ac:0f:5d:e5:91:cb:bd:23:a4:3f:
                    67:7a:ae:19:0d:c3:ee:da:b3:ff:31:83:72:cf:7a:
                    6c:80:57:b9:ad:29:69:18:50:c6:01:35:7b:31:7d:
                    1b:4f:ab:24:b1:2c:4f:53:47:7e:29:14:a2:6a:64:
                    9c:c3:fd:00:57:68:d1:9e:16:f6:11:1e:91:0f:8e:
                    8e:57:79:83:43:cf:01:de:6b:21:ca:e6:07:bf:ab:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8F:A2:90:2D:2D:2C:32:53:92:00:0A:B1:72:2D:1B:57:E2:15:4D
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/323830343a313630303a3130303a3a2f34302d3430203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1600:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:89:37:9f:3f:0f:a8:f3:d7:5b:53:19:3c:23:78:86:22:19:
         dc:b9:bc:fb:68:4c:66:e4:92:a2:39:c0:cd:6f:e9:8d:45:e2:
         2f:1d:0c:ca:a9:9b:6d:b5:8d:63:6c:83:a7:c5:71:9d:bc:59:
         c0:57:b7:cd:26:cd:c6:07:be:fb:85:dd:36:13:d8:ef:78:3e:
         95:06:5b:a2:23:59:e6:53:1c:64:6d:59:78:8b:23:f7:a3:94:
         fc:e8:da:0d:7b:94:4c:1f:da:f2:17:83:5d:44:49:00:5d:8f:
         e2:37:f2:80:64:42:2e:72:ff:6b:86:1a:ed:b8:ca:3e:1f:34:
         c5:e3:19:e4:4a:a9:47:d2:f4:0a:e9:3a:20:5f:c4:75:88:52:
         15:3e:21:e8:70:cb:3e:61:d6:ee:c2:8f:85:3e:bf:fa:bb:82:
         21:43:07:69:6a:b2:d1:67:d8:34:dc:92:50:26:5d:3a:5b:a1:
         bb:ec:e6:b7:d9:64:50:ee:8d:9d:8e:4c:9c:3e:e7:46:c4:3f:
         61:ce:39:92:5d:e8:bd:58:5d:62:b9:a0:ca:84:a5:32:d5:3d:
         c0:b5:d9:09:11:bb:42:3b:83:f6:18:00:17:d5:81:ae:6e:eb:
         ed:d4:a6:fd:c4:4c:e3:8b:53:17:58:f0:bc:6e:a8:a8:2b:0e:
         70:cd:8b:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUXzNzwwlMCWrVlsL0b9+adUCQZx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBOEQ3QjY0NkU5NDZBOTBGNjg5MTAxMUE2QTFDRkFC
NjA1NkE5NTAeFw0yNDA0MDQwNzM5NDhaFw0yNTA0MDMwNzQ0NDhaMDMxMTAvBgNV
BAMTKEQ5OEZBMjkwMkQyRDJDMzI1MzkyMDAwQUIxNzIyRDFCNTdFMjE1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/j95CV7l9nPegzIBPtgt0SbNr
CPzoOVd4m1/w+r2tB62XIzMTAF2N4LldhSvtvkShW4acPgp6QLN4o3NsJOTK1L9B
F28mejubp4TU4ZXsR14Wa/bqgC6Tca68ig529zm3O0tbUK5A3WZPdXGHZZ1txbs7
bCB2hcx0JZanADnKQl1pYtDj/WZvrLwDJvuwmeaLzdUP/qHPhHD9gPyJqS4DVwbp
nMn9gyBnrA9d5ZHLvSOkP2d6rhkNw+7as/8xg3LPemyAV7mtKWkYUMYBNXsxfRtP
qySxLE9TR34pFKJqZJzD/QBXaNGeFvYRHpEPjo5XeYNDzwHeayHK5ge/q1yPAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU2Y+ikC0tLDJTkgAKsXItG1fiFU0wHwYDVR0j
BBgwFoAUCqjXtkbpRqkPaJEBGmoc+rYFapUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm53VUhwdTZyV0xCcXB6ZEZXWFZ2VUFFbUZZWHZ4N2FuU0x0V2hxamdM
eUYvMS8wQUE4RDdCNjQ2RTk0NkE5MEY2ODkxMDExQTZBMUNGQUI2MDU2QTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBQThEN0I2NDZFOTQ2QTkw
RjY4OTEwMTFBNkExQ0ZBQjYwNTZBOTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Jud1VIcHU2cldMQnFwemRGV1hWdlVBRW1GWVh2eDdhblNMdFdocWpnTHlGLzEv
MzIzODMwMzQzYTMxMzYzMDMwM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzMzNDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBBYAATANBgkqhkiG9w0BAQsFAAOC
AQEARYk3nz8PqPPXW1MZPCN4hiIZ3Lm8+2hMZuSSojnAzW/pjUXiLx0MyqmbbbWN
Y2yDp8VxnbxZwFe3zSbNxge++4XdNhPY73g+lQZboiNZ5lMcZG1ZeIsj96OU/Oja
DXuUTB/a8heDXURJAF2P4jfygGRCLnL/a4Ya7bjKPh80xeMZ5EqpR9L0Cuk6IF/E
dYhSFT4h6HDLPmHW7sKPhT6/+ruCIUMHaWqy0WfYNNySUCZdOluhu+zmt9lkUO6N
nY5MnD7nRsQ/Yc45kl3ovVhdYrmgyoSlMtU9wLXZCRG7QjuD9hgAF9WBrm7r7dSm
/cRM44tTF1jwvG6oqCsOcM2LFw==
-----END CERTIFICATE-----