Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/323830343a343032633a3a2f33322d3332203d3e20323635393432.roa
File:                     323830343a343032633a3a2f33322d3332203d3e20323635393432.roa (raw, json)
Hash identifier:          Fv+9R4vTGHb6Vw5T1dA3Qw+UYZY1eeyamorMGyQZPvU=
Subject key identifier:   9E:8C:C1:FC:1C:42:64:44:2F:6F:F3:86:0F:19:09:0D:B8:62:43:EB
Certificate issuer:       /CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
Certificate serial:       014E268605830E465DBC8FBDC4B48B2E4CC21238
Authority key identifier: 49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/323830343a343032633a3a2f33322d3332203d3e20323635393432.roa
Signing time:             Wed 15 May 2024 19:06:45 +0000
ROA not before:           Wed 15 May 2024 19:01:45 +0000
ROA not after:            Wed 14 May 2025 19:06:45 +0000
asID:                     265942
IP address blocks:        2804:402c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:26:86:05:83:0e:46:5d:bc:8f:bd:c4:b4:8b:2e:4c:c2:12:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
        Validity
            Not Before: May 15 19:01:45 2024 GMT
            Not After : May 14 19:06:45 2025 GMT
        Subject: CN=9E8CC1FC1C4264442F6FF3860F19090DB86243EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:28:17:46:9e:8b:6a:01:09:ac:0c:91:7a:
                    c6:1d:02:f5:7d:40:ea:14:90:6b:2d:bf:74:1c:0c:
                    13:7e:a6:0c:80:5b:fa:5a:d5:4c:62:ab:11:1b:4a:
                    13:82:57:2e:5f:51:33:c7:3d:c7:ba:60:ed:f9:6a:
                    b6:f7:75:8a:b2:7c:a2:79:2b:a8:16:92:80:58:9f:
                    26:ed:99:4c:97:e3:c2:4c:0d:57:db:55:af:1b:fa:
                    bf:d2:9f:7f:38:7a:c8:5c:23:97:4a:89:a5:58:7b:
                    9d:a7:76:a3:5a:f6:9a:b1:aa:ce:2d:d9:cf:fa:52:
                    30:e5:b2:b9:c8:70:ba:0c:bb:3d:95:4b:6b:cd:b4:
                    41:16:97:46:9d:a2:d2:3b:ed:29:91:2a:c1:ec:1b:
                    77:9d:33:7f:43:b6:30:f1:2e:6b:8a:5b:2b:28:e9:
                    79:ae:8d:f9:7d:41:b6:d5:ad:66:c9:5e:3b:41:09:
                    b1:b3:c1:4a:d6:69:2b:8e:b3:de:71:07:e1:8d:3a:
                    51:83:e9:ee:bf:0c:2d:0c:fd:47:91:9c:50:ed:fe:
                    2c:c6:9e:a1:fc:4d:05:0e:ef:3c:06:86:2b:29:5e:
                    d4:a2:33:e4:ab:e8:9d:19:16:49:a1:79:f6:a4:b4:
                    35:80:e8:7b:d8:a5:cb:a7:a8:12:09:52:c5:ca:85:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:C1:FC:1C:42:64:44:2F:6F:F3:86:0F:19:09:0D:B8:62:43:EB
            X509v3 Authority Key Identifier:
                keyid:49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/323830343a343032633a3a2f33322d3332203d3e20323635393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:402c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:d2:a3:3a:5a:5d:5b:d7:cb:21:c0:10:2b:ed:08:47:7a:
         42:fa:73:5c:fd:25:2c:1c:34:45:ba:3e:94:e0:7f:65:3a:76:
         f4:21:4d:7c:04:05:f0:1b:83:03:ad:9a:53:e7:ac:ce:1d:75:
         d2:2f:61:89:00:1f:f7:84:43:52:2b:8f:58:c7:e2:07:f1:de:
         c6:62:a2:a4:4b:ca:ee:2d:a0:aa:32:bb:38:24:db:4b:d5:40:
         50:30:90:6c:dc:42:b4:0e:60:b7:ac:ae:f9:f3:a2:60:fe:b3:
         af:ea:3e:4e:d9:70:f6:ce:55:0c:f9:ff:9e:fe:86:86:a5:41:
         83:1f:96:61:38:b9:13:3f:a1:53:62:02:46:55:bd:3b:9b:91:
         14:24:ae:c3:2e:de:ee:a5:23:f3:3f:b9:a8:1c:f9:60:94:ac:
         50:0f:87:dd:fc:50:b4:09:b2:1f:8f:5d:00:9c:33:63:7e:e4:
         44:81:54:de:8a:de:b3:04:44:01:54:fe:fd:aa:06:5a:54:04:
         99:8b:4e:6b:d5:00:41:b5:87:ff:c0:15:6c:aa:9b:61:c5:cc:
         5c:c9:08:6c:04:2b:49:d0:9b:9d:24:e5:e4:4c:39:3f:7c:2c:
         1d:27:8d:3a:af:e3:83:97:68:a8:7e:eb:6d:d7:a6:fc:1a:09:
         1a:99:f2:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAU4mhgWDDkZdvI+9xLSLLkzCEjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzNkQzRDMzMjAyNTMyQjI3QURDRDdCNDQzNTlCQ0Y4
QUJDQkMzODAeFw0yNDA1MTUxOTAxNDVaFw0yNTA1MTQxOTA2NDVaMDMxMTAvBgNV
BAMTKDlFOENDMUZDMUM0MjY0NDQyRjZGRjM4NjBGMTkwOTBEQjg2MjQzRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2CgXRp6LagEJrAyResYdAvV9
QOoUkGstv3QcDBN+pgyAW/pa1UxiqxEbShOCVy5fUTPHPce6YO35arb3dYqyfKJ5
K6gWkoBYnybtmUyX48JMDVfbVa8b+r/Sn384eshcI5dKiaVYe52ndqNa9pqxqs4t
2c/6UjDlsrnIcLoMuz2VS2vNtEEWl0adotI77SmRKsHsG3edM39DtjDxLmuKWyso
6Xmujfl9QbbVrWbJXjtBCbGzwUrWaSuOs95xB+GNOlGD6e6/DC0M/UeRnFDt/izG
nqH8TQUO7zwGhispXtSiM+Sr6J0ZFkmhefaktDWA6HvYpcunqBIJUsXKhcKxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUnozB/BxCZEQvb/OGDxkJDbhiQ+swHwYDVR0j
BBgwFoAUSTbT0zICUysnrc17RDWbz4q8vDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRhekViY1Y2Z3lyWHpGdkIxUDhDWVIyV1dMYTluZFRvSHd4WVY3WHNN
QVAvMC80OTM2RDNEMzMyMDI1MzJCMjdBRENEN0I0NDM1OUJDRjhBQkNCQzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5MzZEM0QzMzIwMjUzMkIy
N0FEQ0Q3QjQ0MzU5QkNGOEFCQ0JDMzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0YXpFYmNWNmd5clh6RnZCMVA4Q1lSMldXTGE5bmRUb0h3eFlWN1hzTUFQLzAv
MzIzODMwMzQzYTM0MzAzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARALDANBgkqhkiG9w0BAQsFAAOCAQEAWaDSozpa
XVvXyyHAECvtCEd6QvpzXP0lLBw0Rbo+lOB/ZTp29CFNfAQF8BuDA62aU+eszh11
0i9hiQAf94RDUiuPWMfiB/HexmKipEvK7i2gqjK7OCTbS9VAUDCQbNxCtA5gt6yu
+fOiYP6zr+o+Ttlw9s5VDPn/nv6GhqVBgx+WYTi5Ez+hU2ICRlW9O5uRFCSuwy7e
7qUj8z+5qBz5YJSsUA+H3fxQtAmyH49dAJwzY37kRIFU3oreswREAVT+/aoGWlQE
mYtOa9UAQbWH/8AVbKqbYcXMXMkIbAQrSdCbnSTl5Ew5P3wsHSeNOq/jg5doqH7r
bdem/BoJGpnyfw==
-----END CERTIFICATE-----