Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653835303a3a2f34342d3434203d3e203238323630.roa
File:                     323830343a323865343a653835303a3a2f34342d3434203d3e203238323630.roa (raw, json)
Hash identifier:          04++7lfetXwPZ2Y1YRNPTmOY+YCyh7wV/5H0h2f2Mxs=
Subject key identifier:   53:2D:75:47:4C:96:7C:A7:D8:A4:38:B6:7B:D9:71:C5:0D:47:30:97
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       6950879571E03FA1B1495A0A89EDD13191699DB3
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653835303a3a2f34342d3434203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:56 +0000
ROA not before:           Thu 09 Mar 2023 20:12:56 +0000
ROA not after:            Thu 07 Mar 2024 20:17:56 +0000
asID:                     28260
IP address blocks:        2804:28e4:e850::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:87:95:71:e0:3f:a1:b1:49:5a:0a:89:ed:d1:31:91:69:9d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:56 2023 GMT
            Not After : Mar  7 20:17:56 2024 GMT
        Subject: CN=532D75474C967CA7D8A438B67BD971C50D473097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:68:d9:6b:82:71:1c:40:82:b8:f4:5f:41:
                    f9:98:3e:61:fc:73:3d:9b:1e:ed:e2:49:59:11:c7:
                    79:79:f9:ee:f6:00:e0:3e:ce:58:45:04:15:f5:40:
                    5c:d2:27:e0:25:78:4a:b5:21:7a:d2:c6:0b:9f:42:
                    43:59:ae:26:96:01:0c:a8:b7:cd:29:03:2c:3e:9e:
                    0b:87:7e:dd:95:ac:f4:8a:5a:aa:84:1d:e2:69:45:
                    7a:ef:8c:e6:68:f8:d0:2f:d9:74:b0:7b:12:90:cf:
                    a3:13:f0:5a:b3:89:5e:0d:25:da:15:9b:29:b9:c8:
                    7b:34:42:58:44:78:36:82:fc:20:18:15:7f:a5:98:
                    d8:5d:50:66:f0:76:e2:69:00:20:81:22:12:cb:b2:
                    1d:ff:07:13:d2:66:ac:d6:46:9d:7d:ed:e4:a8:6b:
                    1c:0d:87:2a:e1:bc:02:c2:30:a8:f5:a1:93:46:2d:
                    ef:b2:57:31:43:8b:3c:a0:6f:45:69:af:d8:a6:d0:
                    5f:03:5d:1b:11:ec:6e:c0:8b:00:e2:85:e2:26:22:
                    b8:d5:57:94:8b:8b:9a:00:7a:eb:8a:7d:e7:c9:2f:
                    ac:08:dc:f4:78:c3:9a:db:b5:bb:fa:6f:99:21:b5:
                    7f:24:93:53:cf:b0:3a:44:fa:66:c5:a2:21:2d:14:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:75:47:4C:96:7C:A7:D8:A4:38:B6:7B:D9:71:C5:0D:47:30:97
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653835303a3a2f34342d3434203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e850::/44

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:f5:a3:fc:91:24:85:1b:54:35:4c:92:46:6d:63:74:09:
         98:15:59:19:03:f2:56:1d:28:3c:4a:d3:4e:5f:02:ab:14:67:
         56:53:a3:7a:e9:d8:45:53:c5:6e:e8:47:ae:a8:fe:66:34:4a:
         7c:8d:d2:54:c2:34:35:22:03:e6:32:28:20:30:5d:83:06:c5:
         cf:11:d7:64:0b:62:13:5f:ff:bf:1d:d7:28:bf:b0:04:cc:f0:
         31:32:14:5d:a9:f8:96:c3:d2:eb:5a:21:af:cc:39:8c:83:ce:
         3e:47:1c:5a:7f:c2:ee:3b:db:ea:c0:2a:ae:a0:02:6e:77:d1:
         e9:0b:9f:70:09:fa:9a:4c:65:7e:2f:39:72:93:68:f6:ef:e5:
         ba:8b:ce:4c:da:67:49:82:1c:4a:fe:24:a6:d8:b1:91:58:03:
         f2:1b:ba:10:48:f4:5e:f3:66:ea:04:a4:76:8e:13:98:80:a8:
         90:6c:fc:90:bd:96:82:9b:63:e3:22:2c:31:54:71:21:8c:88:
         b0:d6:a6:4b:01:ad:25:33:da:c6:d5:b9:e9:d7:7f:fb:a2:a1:
         68:ae:21:f6:f8:6f:b8:c7:49:62:df:ef:2d:f1:40:fc:e5:73:
         c6:18:ba:7a:ad:96:2c:34:01:a0:1f:cd:79:96:7d:34:aa:92:
         ef:0b:47:8b
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUaVCHlXHgP6GxSVoKie3RMZFpnbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNTZaFw0yNDAzMDcyMDE3NTZaMDMxMTAvBgNV
BAMTKDUzMkQ3NTQ3NEM5NjdDQTdEOEE0MzhCNjdCRDk3MUM1MEQ0NzMwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHWjZa4JxHECCuPRfQfmYPmH8
cz2bHu3iSVkRx3l5+e72AOA+zlhFBBX1QFzSJ+AleEq1IXrSxgufQkNZriaWAQyo
t80pAyw+nguHft2VrPSKWqqEHeJpRXrvjOZo+NAv2XSwexKQz6MT8FqziV4NJdoV
mym5yHs0QlhEeDaC/CAYFX+lmNhdUGbwduJpACCBIhLLsh3/BxPSZqzWRp197eSo
axwNhyrhvALCMKj1oZNGLe+yVzFDizygb0Vpr9im0F8DXRsR7G7AiwDiheImIrjV
V5SLi5oAeuuKfefJL6wI3PR4w5rbtbv6b5khtX8kk1PPsDpE+mbFoiEtFEyHAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUUy11R0yWfKfYpDi2e9lxxQ1HMJcwHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzIzODMwMzQzYTMyMzg2NTM0M2E2NTM4MzUzMDNhM2EyZjM0MzQyZDM0MzQyMDNk
M2UyMDMyMzgzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoBCjk6FAwDQYJKoZIhvcNAQELBQAD
ggEBABv09aP8kSSFG1Q1TJJGbWN0CZgVWRkD8lYdKDxK005fAqsUZ1ZTo3rp2EVT
xW7oR66o/mY0SnyN0lTCNDUiA+YyKCAwXYMGxc8R12QLYhNf/78d1yi/sATM8DEy
FF2p+JbD0utaIa/MOYyDzj5HHFp/wu472+rAKq6gAm530ekLn3AJ+ppMZX4vOXKT
aPbv5bqLzkzaZ0mCHEr+JKbYsZFYA/IbuhBI9F7zZuoEpHaOE5iAqJBs/JC9loKb
Y+MiLDFUcSGMiLDWpksBrSUz2sbVuenXf/uioWiuIfb4b7jHSWLf7y3xQPzlc8YY
unqtliw0AaAfzXmWfTSqku8LR4s=
-----END CERTIFICATE-----