Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e203230343733.roa
File:                     323830343a386532633a3a2f33322d3332203d3e203230343733.roa (raw, json)
Hash identifier:          Q82GbwRJsalHmkQlER4/lMMp9e10ZKNHvBTzX4tARfg=
Subject key identifier:   54:10:4C:7E:72:2B:70:6A:E8:94:A9:66:6D:08:E1:0C:D5:C4:B3:CE
Certificate issuer:       /CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
Certificate serial:       26CA9AE9DBB23A0163F6A9DC9EA5820F52E63992
Authority key identifier: 9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e203230343733.roa
Signing time:             Tue 15 Oct 2024 18:18:40 +0000
ROA not before:           Tue 15 Oct 2024 18:13:40 +0000
ROA not after:            Tue 14 Oct 2025 18:18:40 +0000
asID:                     20473
IP address blocks:        2804:8e2c::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ca:9a:e9:db:b2:3a:01:63:f6:a9:dc:9e:a5:82:0f:52:e6:39:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494
        Validity
            Not Before: Oct 15 18:13:40 2024 GMT
            Not After : Oct 14 18:18:40 2025 GMT
        Subject: CN=54104C7E722B706AE894A9666D08E10CD5C4B3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:aa:46:8b:40:7e:16:4d:f1:e0:f9:ba:87:
                    fe:69:9f:70:0b:e5:73:52:51:78:56:89:c4:2c:64:
                    93:9c:f9:f6:23:0a:a8:34:f3:75:f4:b2:96:69:f5:
                    1f:40:d7:ba:22:36:4e:32:61:eb:88:ae:f4:1f:67:
                    d3:a2:00:e2:6c:12:f7:82:99:2b:fd:ea:63:25:28:
                    d8:73:d5:d7:b2:01:9e:53:52:03:4a:f2:da:53:60:
                    90:23:fd:cd:1d:b4:0c:37:67:c1:86:19:a7:a0:8d:
                    c1:ba:00:c8:88:5e:f2:d2:c4:5d:26:52:55:17:31:
                    3c:70:bb:13:2b:03:20:a2:df:40:64:99:fc:35:81:
                    9e:00:ab:68:d4:9c:62:0e:e6:11:b3:9b:16:7b:c8:
                    7c:ae:be:06:65:01:3c:d7:37:04:8e:6a:25:6f:08:
                    81:d1:43:6c:c5:92:87:fa:64:75:c2:a4:80:33:04:
                    e9:91:f2:f5:b3:d9:61:c6:fb:db:94:d8:51:0d:40:
                    ff:3d:e1:58:e1:bc:9a:61:41:d1:5c:f1:50:57:8c:
                    76:9a:92:48:42:e8:2f:02:19:d5:93:46:69:ba:63:
                    75:89:e1:30:86:67:0b:f1:b4:33:f7:e6:d1:7e:6b:
                    83:29:1d:c4:35:8c:6d:e1:09:10:fb:b9:31:84:f6:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:4C:7E:72:2B:70:6A:E8:94:A9:66:6D:08:E1:0C:D5:C4:B3:CE
            X509v3 Authority Key Identifier:
                keyid:9E:8F:BC:EF:C8:D1:CE:0E:FF:BD:BA:FC:7D:C4:59:2C:14:C6:D4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8FBCEFC8D1CE0EFFBDBAFC7DC4592C14C6D494.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:d3:d3:08:4b:9a:db:cd:3e:c8:ed:29:f8:d9:90:22:4a:
         a7:da:ab:fe:6a:3e:71:62:88:4b:6c:52:ca:26:f3:26:87:8e:
         f1:1b:00:07:90:b2:0d:34:c9:3a:8f:59:9e:83:60:0a:61:68:
         fb:44:5d:8a:dc:a9:2d:0a:d5:5c:6a:b0:87:ed:fc:ae:3c:a4:
         64:d0:bd:55:a3:f0:67:84:9f:b2:e6:3e:ad:c7:f4:33:50:06:
         03:af:4a:cf:4d:a5:64:a4:0c:38:bc:a1:f7:29:f0:89:cf:fa:
         c0:c9:c2:9f:1d:c8:09:2f:59:fc:35:31:02:dc:2c:a8:88:88:
         13:7b:30:fa:50:a4:c3:ab:c2:a8:0a:f1:cd:12:d1:a9:20:e3:
         f2:00:da:8c:ae:e1:91:3a:ba:a3:b2:b0:ef:29:df:18:f9:d0:
         09:f7:c3:88:a6:88:80:0b:67:48:97:77:27:af:8e:dd:0e:39:
         df:22:2f:71:39:f4:b7:04:1c:f1:00:f5:ba:7b:28:05:ee:0b:
         07:27:5f:cb:ad:a0:86:ae:e9:83:29:8e:f9:75:ab:7f:26:a6:
         08:9a:aa:bb:d4:d9:cb:73:73:cc:91:14:9e:68:98:60:2a:4d:
         59:6c:36:0c:43:57:3c:61:9b:35:62:0c:6c:37:ca:a8:81:34:
         51:23:b2:a5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJsqa6duyOgFj9qncnqWCD1LmOZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU4RkJDRUZDOEQxQ0UwRUZGQkRCQUZDN0RDNDU5MkMx
NEM2RDQ5NDAeFw0yNDEwMTUxODEzNDBaFw0yNTEwMTQxODE4NDBaMDMxMTAvBgNV
BAMTKDU0MTA0QzdFNzIyQjcwNkFFODk0QTk2NjZEMDhFMTBDRDVDNEIzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeUKpGi0B+Fk3x4Pm6h/5pn3AL
5XNSUXhWicQsZJOc+fYjCqg083X0spZp9R9A17oiNk4yYeuIrvQfZ9OiAOJsEveC
mSv96mMlKNhz1deyAZ5TUgNK8tpTYJAj/c0dtAw3Z8GGGaegjcG6AMiIXvLSxF0m
UlUXMTxwuxMrAyCi30Bkmfw1gZ4Aq2jUnGIO5hGzmxZ7yHyuvgZlATzXNwSOaiVv
CIHRQ2zFkof6ZHXCpIAzBOmR8vWz2WHG+9uU2FENQP894VjhvJphQdFc8VBXjHaa
kkhC6C8CGdWTRmm6Y3WJ4TCGZwvxtDP35tF+a4MpHcQ1jG3hCRD7uTGE9hYPAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUVBBMfnIrcGrolKlmbQjhDNXEs84wHwYDVR0j
BBgwFoAUno+878jRzg7/vbr8fcRZLBTG1JQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1RSdlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0
SlovMC85RThGQkNFRkM4RDFDRTBFRkZCREJBRkM3REM0NTkyQzE0QzZENDk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOEZCQ0VGQzhEMUNFMEVG
RkJEQkFGQzdEQzQ1OTJDMTRDNkQ0OTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NUUnZTWlBUcHkzZmhlV3BtY1BteVVGYWJDbmZXb2dSTWZwVkxoWWNodEpaLzAv
MzIzODMwMzQzYTM4NjUzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzMDM0
MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEjiwwDQYJKoZIhvcNAQELBQADggEBAG6l09MIS5rb
zT7I7Sn42ZAiSqfaq/5qPnFiiEtsUsom8yaHjvEbAAeQsg00yTqPWZ6DYAphaPtE
XYrcqS0K1VxqsIft/K48pGTQvVWj8GeEn7LmPq3H9DNQBgOvSs9NpWSkDDi8ofcp
8InP+sDJwp8dyAkvWfw1MQLcLKiIiBN7MPpQpMOrwqgK8c0S0akg4/IA2oyu4ZE6
uqOysO8p3xj50An3w4imiIALZ0iXdyevjt0OOd8iL3E59LcEHPEA9bp7KAXuCwcn
X8utoIau6YMpjvl1q38mpgiaqrvU2ctzc8yRFJ5omGAqTVlsNgxDVzxhmzViDGw3
yqiBNFEjsqU=
-----END CERTIFICATE-----