Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/323830343a313461383a3a2f33322d3438203d3e20323634393937.roa
File:                     323830343a313461383a3a2f33322d3438203d3e20323634393937.roa (raw, json)
Hash identifier:          56ydTqlgmYXuphb1M0eamhlXHpzuZhRRl3fFfXY4/80=
Subject key identifier:   CE:3F:EB:7A:A1:69:67:9E:5B:AF:03:30:89:E5:BD:CD:37:05:B8:87
Certificate issuer:       /CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
Certificate serial:       166F08A632D48CFA6150610A7B97BEA1CFB56C78
Authority key identifier: 32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/323830343a313461383a3a2f33322d3438203d3e20323634393937.roa
Signing time:             Thu 04 Apr 2024 09:15:23 +0000
ROA not before:           Thu 04 Apr 2024 09:10:23 +0000
ROA not after:            Thu 03 Apr 2025 09:15:23 +0000
asID:                     264997
IP address blocks:        2804:14a8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:08:a6:32:d4:8c:fa:61:50:61:0a:7b:97:be:a1:cf:b5:6c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
        Validity
            Not Before: Apr  4 09:10:23 2024 GMT
            Not After : Apr  3 09:15:23 2025 GMT
        Subject: CN=CE3FEB7AA169679E5BAF033089E5BDCD3705B887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:43:7e:f6:6a:01:44:14:e5:f3:21:a8:94:
                    70:10:ce:0d:76:78:de:24:ec:39:46:3d:55:f3:58:
                    30:7f:76:d7:96:bd:34:bf:99:e5:de:f6:c7:3a:21:
                    04:6c:73:13:d3:76:76:b4:77:a1:6d:55:d5:36:80:
                    e0:db:27:b0:22:3c:54:42:ca:88:7b:c1:ad:cd:c9:
                    a5:e7:70:79:03:18:d9:01:06:39:15:e0:26:a3:cf:
                    29:48:84:35:66:7b:b1:e2:da:35:54:9b:04:4a:2b:
                    53:71:06:b9:6b:aa:d0:d7:0d:54:15:ab:72:0d:75:
                    82:e6:3d:04:d5:b5:4d:71:b1:a4:09:17:bb:b6:d7:
                    6a:98:0d:35:94:f7:e2:16:a5:e8:b1:ce:2c:92:fe:
                    3c:b5:bc:69:5a:f7:2f:77:f5:ca:49:7a:b9:75:0f:
                    18:78:64:0e:c9:1e:5e:2e:3a:8b:52:e1:f8:c0:8a:
                    41:e0:3a:af:a4:d6:81:81:75:08:a0:7e:4d:b8:0a:
                    08:dd:e1:2f:13:be:20:6f:9a:7e:81:6a:e0:ac:d9:
                    bb:a7:10:1c:79:25:6b:e3:e1:14:c1:52:83:bf:ae:
                    8b:da:5e:ac:54:f8:2c:a5:22:28:4e:97:a3:fd:d2:
                    84:59:b8:dd:ce:c6:89:64:b7:d1:28:fc:bf:73:14:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3F:EB:7A:A1:69:67:9E:5B:AF:03:30:89:E5:BD:CD:37:05:B8:87
            X509v3 Authority Key Identifier:
                keyid:32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/323830343a313461383a3a2f33322d3438203d3e20323634393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:25:bf:55:1e:01:f7:46:ec:ce:af:50:9a:df:00:d0:34:df:
         b4:88:31:bb:15:63:52:e1:b3:74:88:25:56:e3:27:24:8e:92:
         dd:85:ed:38:67:30:24:69:a0:66:d6:83:36:f7:a1:be:bc:60:
         8f:fb:e0:7a:14:17:2a:d9:c1:82:6f:51:fa:ef:c0:5d:fb:00:
         c0:79:5c:a4:3a:a4:fe:a7:c2:02:08:ba:72:43:51:1c:5b:e8:
         49:7c:65:c8:32:e9:16:3a:63:92:c5:dc:68:8d:b7:0f:b5:32:
         67:81:5e:9a:85:60:e6:30:0c:02:21:dc:28:57:63:82:24:9a:
         be:8d:a8:31:d9:d2:63:d5:75:ec:c0:93:5d:f1:c6:3e:76:ec:
         15:2a:98:7e:e8:36:60:97:75:12:5d:6d:db:e9:44:f7:3c:81:
         2b:81:8d:24:ff:2c:13:e6:62:67:7b:6d:3e:aa:c8:c8:19:9e:
         05:8c:a0:3b:db:30:f9:41:7b:68:66:d0:48:b1:8f:7c:3e:dc:
         c8:d4:ae:2c:c2:fb:47:5e:cc:8d:38:10:72:8b:2f:d1:0f:ca:
         1c:b4:4f:cb:90:2d:54:2a:17:d4:82:09:c7:12:07:51:ec:ca:
         eb:14:85:62:d8:0e:e8:de:e3:99:68:84:4d:c2:30:e8:36:08:
         cc:fd:65:ef
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFm8IpjLUjPphUGEKe5e+oc+1bHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGMkZDQUFFQ0UzOTM3MEJERUU0MzUwQzg2OEU2MTlF
RDMxQTVCMzAeFw0yNDA0MDQwOTEwMjNaFw0yNTA0MDMwOTE1MjNaMDMxMTAvBgNV
BAMTKENFM0ZFQjdBQTE2OTY3OUU1QkFGMDMzMDg5RTVCRENEMzcwNUI4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkEN+9moBRBTl8yGolHAQzg12
eN4k7DlGPVXzWDB/dteWvTS/meXe9sc6IQRscxPTdna0d6FtVdU2gODbJ7AiPFRC
yoh7wa3NyaXncHkDGNkBBjkV4CajzylIhDVme7Hi2jVUmwRKK1NxBrlrqtDXDVQV
q3INdYLmPQTVtU1xsaQJF7u212qYDTWU9+IWpeixziyS/jy1vGla9y939cpJerl1
Dxh4ZA7JHl4uOotS4fjAikHgOq+k1oGBdQigfk24Cgjd4S8TviBvmn6BauCs2bun
EBx5JWvj4RTBUoO/rovaXqxU+CylIihOl6P90oRZuN3Oxolkt9Eo/L9zFKk7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzj/reqFpZ55brwMwieW9zTcFuIcwHwYDVR0j
BBgwFoAUMvL8quzjk3C97kNQyGjmGe0xpbMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREU4YjZaRnAxdHZCSkJKbTdTMXU4ZWtpQm5hZ0VhWFE5eWJjU3dKWUxT
ZlUvMS8zMkYyRkNBQUVDRTM5MzcwQkRFRTQzNTBDODY4RTYxOUVEMzFBNUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjJGQ0FBRUNFMzkzNzBC
REVFNDM1MEM4NjhFNjE5RUQzMUE1QjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFOGI2WkZwMXR2QkpCSm03UzF1OGVraUJuYWdFYVhROXliY1N3SllMU2ZVLzEv
MzIzODMwMzQzYTMxMzQ2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzkzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQUqDANBgkqhkiG9w0BAQsFAAOCAQEAByW/VR4B
90bszq9Qmt8A0DTftIgxuxVjUuGzdIglVuMnJI6S3YXtOGcwJGmgZtaDNvehvrxg
j/vgehQXKtnBgm9R+u/AXfsAwHlcpDqk/qfCAgi6ckNRHFvoSXxlyDLpFjpjksXc
aI23D7UyZ4FemoVg5jAMAiHcKFdjgiSavo2oMdnSY9V17MCTXfHGPnbsFSqYfug2
YJd1El1t2+lE9zyBK4GNJP8sE+ZiZ3ttPqrIyBmeBYygO9sw+UF7aGbQSLGPfD7c
yNSuLML7R17MjTgQcosv0Q/KHLRPy5AtVCoX1IIJxxIHUezK6xSFYtgO6N7jmWiE
TcIw6DYIzP1l7w==
-----END CERTIFICATE-----