Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa
File:                     323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa (raw, json)
Hash identifier:          OnTrn6cTj4RBVonBYlxJwcRJH8g9GDVeVA1miKsE03s=
Subject key identifier:   1B:7C:BF:35:84:56:30:A8:4B:B7:12:6F:9B:ED:5A:64:7E:CB:64:BB
Certificate issuer:       /CN=69D18585031D763FB6C19823B86102A30DEC217A
Certificate serial:       35605F9ADF796D597D639DF457B05618885F65F2
Authority key identifier: 69:D1:85:85:03:1D:76:3F:B6:C1:98:23:B8:61:02:A3:0D:EC:21:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69D18585031D763FB6C19823B86102A30DEC217A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa
Signing time:             Wed 30 Oct 2024 22:56:31 +0000
ROA not before:           Wed 30 Oct 2024 22:51:31 +0000
ROA not after:            Wed 29 Oct 2025 22:56:31 +0000
asID:                     273704
IP address blocks:        2804:8af8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:5f:9a:df:79:6d:59:7d:63:9d:f4:57:b0:56:18:88:5f:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D18585031D763FB6C19823B86102A30DEC217A
        Validity
            Not Before: Oct 30 22:51:31 2024 GMT
            Not After : Oct 29 22:56:31 2025 GMT
        Subject: CN=1B7CBF35845630A84BB7126F9BED5A647ECB64BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:02:88:ee:e7:4f:11:7f:b1:86:0a:ac:58:
                    f1:b9:1e:06:5a:71:64:4a:5d:83:7d:3f:b5:ab:9d:
                    0a:13:46:a9:0b:3a:4f:a6:2d:70:4e:54:ff:95:5b:
                    84:31:7a:51:db:65:d5:b6:02:74:aa:a6:8b:78:5e:
                    38:de:e3:7e:10:3e:3a:2e:5a:39:90:d4:40:f0:6d:
                    95:eb:ae:0c:e9:72:d0:ae:66:d4:9b:d8:ae:5e:68:
                    26:df:0c:85:fd:63:fb:00:0a:c4:16:86:31:51:4b:
                    6a:a4:3a:ec:cc:86:0a:29:4e:a9:3e:f3:81:b8:48:
                    56:61:ec:d6:ff:4e:e5:32:36:8a:0a:03:0a:ca:23:
                    2f:78:04:7f:68:50:c4:35:3f:ff:d5:e5:15:03:ea:
                    f0:59:c0:5b:20:d6:71:7f:3d:fd:3b:d2:b0:ea:80:
                    2c:41:7f:7b:98:9c:19:6d:2b:77:ff:fe:b5:49:f3:
                    ed:13:03:be:0d:8b:ee:2e:c0:fb:cb:f1:2d:00:81:
                    cb:67:4d:f6:0a:44:91:e2:b4:ae:8d:22:25:8e:d5:
                    b3:a8:51:a9:05:2e:3f:dc:45:21:2d:e5:b9:19:b6:
                    73:8d:c6:17:ee:0e:10:b9:8f:f1:c5:97:95:65:c5:
                    7c:d5:b0:85:2f:11:71:49:db:da:ba:81:a0:2b:56:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7C:BF:35:84:56:30:A8:4B:B7:12:6F:9B:ED:5A:64:7E:CB:64:BB
            X509v3 Authority Key Identifier:
                keyid:69:D1:85:85:03:1D:76:3F:B6:C1:98:23:B8:61:02:A3:0D:EC:21:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/69D18585031D763FB6C19823B86102A30DEC217A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69D18585031D763FB6C19823B86102A30DEC217A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9YncJFmoxj5PKxJC1DnxssKWJ8AhYJY3LZkEKBGVXj/0/323830343a386166383a383030303a3a2f33332d3333203d3e20323733373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8af8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:47:9b:a5:f1:a8:d1:48:ee:39:f1:95:8b:75:99:0c:62:
         6d:02:18:a3:32:89:ec:ed:08:66:5f:76:06:7e:4c:d4:c4:4f:
         2f:a6:e7:8a:0d:91:9e:b8:8b:87:b5:d4:97:1b:61:23:8d:cd:
         df:6f:bd:81:a4:1d:13:5a:1b:ce:b5:78:74:01:bf:59:31:56:
         95:2f:07:ad:51:54:4e:04:e5:c8:c6:0e:de:10:47:7f:29:ed:
         4e:f5:22:b9:e4:af:be:0d:4c:b8:79:a2:7a:59:7d:19:01:18:
         7b:e3:a0:65:2c:e8:30:01:ce:21:c5:0b:44:44:e7:e1:8b:f9:
         92:c7:d3:be:83:d9:ab:de:7f:01:6a:90:0e:58:fb:f5:bd:de:
         1a:08:82:f0:f6:8a:4a:f4:38:9a:7e:11:f3:bf:fd:75:e6:4a:
         8f:4e:34:57:f7:e9:cf:32:3f:b9:49:db:ab:c6:84:b5:9d:b7:
         72:da:6e:93:48:c7:20:4f:2a:a9:cf:18:21:f6:c9:b3:ca:f0:
         25:cf:e8:8f:47:eb:3d:b7:d0:72:04:4e:e5:45:42:b7:cc:2d:
         e4:6c:d7:7d:0d:97:a3:8d:1e:4f:3c:f0:6a:da:56:f5:03:b3:
         a1:2f:44:b4:a8:af:0a:6d:f1:06:bf:31:cd:c4:3a:0a:4a:23:
         69:1d:d4:b3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNWBfmt95bVl9Y530V7BWGIhfZfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlEMTg1ODUwMzFENzYzRkI2QzE5ODIzQjg2MTAyQTMw
REVDMjE3QTAeFw0yNDEwMzAyMjUxMzFaFw0yNTEwMjkyMjU2MzFaMDMxMTAvBgNV
BAMTKDFCN0NCRjM1ODQ1NjMwQTg0QkI3MTI2RjlCRUQ1QTY0N0VDQjY0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5gKI7udPEX+xhgqsWPG5HgZa
cWRKXYN9P7WrnQoTRqkLOk+mLXBOVP+VW4QxelHbZdW2AnSqpot4Xjje434QPjou
WjmQ1EDwbZXrrgzpctCuZtSb2K5eaCbfDIX9Y/sACsQWhjFRS2qkOuzMhgopTqk+
84G4SFZh7Nb/TuUyNooKAwrKIy94BH9oUMQ1P//V5RUD6vBZwFsg1nF/Pf070rDq
gCxBf3uYnBltK3f//rVJ8+0TA74Ni+4uwPvL8S0AgctnTfYKRJHitK6NIiWO1bOo
UakFLj/cRSEt5bkZtnONxhfuDhC5j/HFl5VlxXzVsIUvEXFJ29q6gaArVr8LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUG3y/NYRWMKhLtxJvm+1aZH7LZLswHwYDVR0j
BBgwFoAUadGFhQMddj+2wZgjuGECow3sIXowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2o5WW5jSkZtb3hqNVBLeEpDMURueHNzS1dKOEFoWUpZM0xaa0VLQkdW
WGovMC82OUQxODU4NTAzMUQ3NjNGQjZDMTk4MjNCODYxMDJBMzBERUMyMTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5RDE4NTg1MDMxRDc2M0ZC
NkMxOTgyM0I4NjEwMkEzMERFQzIxN0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NqOVluY0pGbW94ajVQS3hKQzFEbnhzc0tXSjhBaFlKWTNMWmtFS0JHVlhqLzAv
MzIzODMwMzQzYTM4NjE2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMzM3MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEiviAMA0GCSqGSIb3DQEBCwUA
A4IBAQCNxEebpfGo0UjuOfGVi3WZDGJtAhijMons7QhmX3YGfkzUxE8vpueKDZGe
uIuHtdSXG2Ejjc3fb72BpB0TWhvOtXh0Ab9ZMVaVLwetUVROBOXIxg7eEEd/Ke1O
9SK55K++DUy4eaJ6WX0ZARh746BlLOgwAc4hxQtEROfhi/mSx9O+g9mr3n8BapAO
WPv1vd4aCILw9opK9DiafhHzv/115kqPTjRX9+nPMj+5SdurxoS1nbdy2m6TSMcg
Tyqpzxgh9smzyvAlz+iPR+s9t9ByBE7lRUK3zC3kbNd9DZejjR5PPPBq2lb1A7Oh
L0S0qK8KbfEGvzHNxDoKSiNpHdSz
-----END CERTIFICATE-----