Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/323830343a313461383a3a2f33322d3438203d3e20323633333432.roa
File:                     323830343a313461383a3a2f33322d3438203d3e20323633333432.roa (raw, json)
Hash identifier:          O5a1QeOpg3h8QQQFFl6Ln5PJPDdmBe4dvJ81LfYyEy4=
Subject key identifier:   B5:AE:E1:0A:F9:E1:E4:68:81:41:5A:0A:9A:AE:3B:0B:E4:5D:6F:A3
Certificate issuer:       /CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
Certificate serial:       43D99AB680D9BD3C85518D82EE9C2133F849E70D
Authority key identifier: 32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/323830343a313461383a3a2f33322d3438203d3e20323633333432.roa
Signing time:             Thu 04 Apr 2024 09:15:23 +0000
ROA not before:           Thu 04 Apr 2024 09:10:23 +0000
ROA not after:            Thu 03 Apr 2025 09:15:23 +0000
asID:                     263342
IP address blocks:        2804:14a8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d9:9a:b6:80:d9:bd:3c:85:51:8d:82:ee:9c:21:33:f8:49:e7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
        Validity
            Not Before: Apr  4 09:10:23 2024 GMT
            Not After : Apr  3 09:15:23 2025 GMT
        Subject: CN=B5AEE10AF9E1E46881415A0A9AAE3B0BE45D6FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:e7:2e:6e:26:ef:11:5e:2b:93:2c:69:f5:
                    f3:57:37:08:19:ff:81:12:2e:90:5f:21:dc:2f:b4:
                    c7:2e:b2:cd:1a:08:c8:08:2c:a5:f1:1a:74:05:29:
                    c8:40:26:c8:bc:7c:49:e8:68:18:b3:5e:17:05:a2:
                    21:01:d7:10:e4:a2:6f:8e:a5:c4:35:cb:4c:0e:61:
                    fe:ab:a1:01:4d:62:25:43:3d:a7:57:b2:b9:d9:fa:
                    3e:78:5d:04:77:97:e4:38:da:ac:90:3a:ea:de:66:
                    9b:12:09:df:be:e3:68:53:da:aa:bc:b5:68:f4:10:
                    bb:2a:b5:22:8e:d7:50:c2:1e:11:b0:89:89:fe:d3:
                    65:cc:77:a0:72:80:3a:46:d7:cf:3c:eb:33:c9:ba:
                    08:8d:f4:8d:c3:00:ab:83:cb:c2:29:7f:22:5b:f8:
                    c0:01:2a:9d:f6:c5:60:03:ad:f3:5c:f6:34:c0:4b:
                    02:0a:fb:50:e2:14:86:72:3b:3a:9a:b0:a2:77:51:
                    89:94:1e:22:60:e7:2d:04:d5:e2:0f:03:90:af:8d:
                    b9:75:68:ec:f8:15:95:83:ce:da:15:e3:5f:b0:6d:
                    ec:4d:3a:22:69:13:16:42:8e:1f:b6:01:c0:50:82:
                    73:29:fd:5a:42:27:75:fd:45:09:c3:92:9f:4b:da:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:E1:0A:F9:E1:E4:68:81:41:5A:0A:9A:AE:3B:0B:E4:5D:6F:A3
            X509v3 Authority Key Identifier:
                keyid:32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/323830343a313461383a3a2f33322d3438203d3e20323633333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:51:3c:46:8d:4d:98:eb:15:08:f4:1f:e7:fd:4d:0e:f8:
         f7:8c:4c:72:c1:d6:f2:9b:83:d1:bd:cb:1e:e4:b3:ef:af:98:
         90:24:e4:d9:be:e1:63:6f:1b:b7:21:b1:56:05:49:c0:8b:a9:
         67:6c:d3:26:82:97:d9:3f:99:c6:ba:26:d7:14:0c:44:bf:67:
         2a:3a:63:ee:c4:01:b3:77:5a:8b:22:43:3c:a7:1f:13:98:b6:
         d9:43:74:6e:94:39:5e:64:8d:ec:c1:98:44:3d:49:bd:5b:81:
         c6:39:49:04:92:01:82:2a:85:db:d2:a5:54:04:27:f4:d9:d6:
         e6:25:e1:bb:c8:c5:02:97:51:dd:e3:8d:4d:ee:d2:7f:53:58:
         0c:f4:e5:06:ce:e7:7d:ef:7a:39:d9:9a:2e:2f:74:c1:3d:2c:
         a5:9b:28:e2:d0:1d:23:85:d8:3c:3e:29:20:ff:2b:ed:49:e8:
         24:33:42:1a:ec:da:66:23:d7:04:b3:1d:f1:22:3c:6c:29:89:
         ff:cb:7a:c0:2e:22:d2:db:ce:97:6e:d1:10:1a:71:5a:7c:92:
         78:42:fe:9a:92:c1:a9:e9:62:4d:a3:83:3a:cc:3d:31:45:0a:
         98:81:30:99:65:19:74:b0:49:b0:d1:35:7b:ba:df:46:25:69:
         be:fa:90:1c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQ9matoDZvTyFUY2C7pwhM/hJ5w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGMkZDQUFFQ0UzOTM3MEJERUU0MzUwQzg2OEU2MTlF
RDMxQTVCMzAeFw0yNDA0MDQwOTEwMjNaFw0yNTA0MDMwOTE1MjNaMDMxMTAvBgNV
BAMTKEI1QUVFMTBBRjlFMUU0Njg4MTQxNUEwQTlBQUUzQjBCRTQ1RDZGQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXPucubibvEV4rkyxp9fNXNwgZ
/4ESLpBfIdwvtMcuss0aCMgILKXxGnQFKchAJsi8fEnoaBizXhcFoiEB1xDkom+O
pcQ1y0wOYf6roQFNYiVDPadXsrnZ+j54XQR3l+Q42qyQOureZpsSCd++42hT2qq8
tWj0ELsqtSKO11DCHhGwiYn+02XMd6BygDpG18886zPJugiN9I3DAKuDy8IpfyJb
+MABKp32xWADrfNc9jTASwIK+1DiFIZyOzqasKJ3UYmUHiJg5y0E1eIPA5Cvjbl1
aOz4FZWDztoV41+wbexNOiJpExZCjh+2AcBQgnMp/VpCJ3X9RQnDkp9L2hlZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUta7hCvnh5GiBQVoKmq47C+Rdb6MwHwYDVR0j
BBgwFoAUMvL8quzjk3C97kNQyGjmGe0xpbMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREU4YjZaRnAxdHZCSkJKbTdTMXU4ZWtpQm5hZ0VhWFE5eWJjU3dKWUxT
ZlUvMS8zMkYyRkNBQUVDRTM5MzcwQkRFRTQzNTBDODY4RTYxOUVEMzFBNUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjJGQ0FBRUNFMzkzNzBC
REVFNDM1MEM4NjhFNjE5RUQzMUE1QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFOGI2WkZwMXR2QkpCSm03UzF1OGVraUJuYWdFYVhROXliY1N3SllMU2ZVLzEv
MzIzODMwMzQzYTMxMzQ2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzMzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUqDANBgkqhkiG9w0BAQsFAAOCAQEAO1dRPEaN
TZjrFQj0H+f9TQ7494xMcsHW8puD0b3LHuSz76+YkCTk2b7hY28btyGxVgVJwIup
Z2zTJoKX2T+Zxrom1xQMRL9nKjpj7sQBs3daiyJDPKcfE5i22UN0bpQ5XmSN7MGY
RD1JvVuBxjlJBJIBgiqF29KlVAQn9NnW5iXhu8jFApdR3eONTe7Sf1NYDPTlBs7n
fe96OdmaLi90wT0spZso4tAdI4XYPD4pIP8r7UnoJDNCGuzaZiPXBLMd8SI8bCmJ
/8t6wC4i0tvOl27REBpxWnySeEL+mpLBqeliTaODOsw9MUUKmIEwmWUZdLBJsNE1
e7rfRiVpvvqQHA==
-----END CERTIFICATE-----