Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/323830343a346565633a3a2f33322d3332203d3e20323638323931.roa
File:                     323830343a346565633a3a2f33322d3332203d3e20323638323931.roa (raw, json)
Hash identifier:          gePH+smHsexWAmUN4uWlWY728/mvRH4nRCnky7PL/Pc=
Subject key identifier:   76:18:C6:59:32:B1:14:FE:33:7C:9B:B3:51:0C:47:EC:E1:78:2F:E4
Certificate issuer:       /CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
Certificate serial:       6CFCD170C76520F72474D414969698F0D9F62ECC
Authority key identifier: 1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/323830343a346565633a3a2f33322d3332203d3e20323638323931.roa
Signing time:             Thu 04 Apr 2024 00:14:56 +0000
ROA not before:           Thu 04 Apr 2024 00:09:56 +0000
ROA not after:            Thu 03 Apr 2025 00:14:56 +0000
asID:                     268291
IP address blocks:        2804:4eec::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fc:d1:70:c7:65:20:f7:24:74:d4:14:96:96:98:f0:d9:f6:2e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
        Validity
            Not Before: Apr  4 00:09:56 2024 GMT
            Not After : Apr  3 00:14:56 2025 GMT
        Subject: CN=7618C65932B114FE337C9BB3510C47ECE1782FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:cd:e9:e3:5c:4e:cd:e5:0a:5b:a2:4a:12:
                    49:9f:4a:c5:2f:cd:0a:6f:c2:68:89:82:f4:60:4f:
                    68:c3:6c:92:57:12:87:a7:71:33:84:69:62:1c:1f:
                    aa:95:14:ae:9a:e8:fe:cc:88:a7:53:d1:c2:d4:07:
                    a0:81:9f:c2:d3:8c:da:f5:ec:b2:16:75:78:4e:be:
                    38:6d:37:ad:75:3e:8d:56:0f:f2:2a:f4:85:ce:0b:
                    ce:64:92:e1:08:65:43:43:bc:d2:f0:6b:73:21:fc:
                    0a:b4:89:fa:24:17:56:5a:30:6c:db:95:db:a1:de:
                    55:43:0b:69:ad:9e:a4:32:22:2a:8c:63:b4:0c:c3:
                    c4:82:4a:c0:ac:e3:ff:73:29:33:81:9d:73:00:79:
                    96:f5:3a:2a:a8:01:39:d8:0c:ed:89:26:8d:81:b5:
                    fe:2a:0e:c6:bb:44:a7:40:76:74:d0:d7:f5:d4:f7:
                    e9:13:0b:44:2f:99:c3:0b:82:77:97:f8:f3:3c:74:
                    8c:0b:4f:f9:70:86:5a:9c:a8:d6:98:ff:b1:4a:cb:
                    5c:04:1e:ce:18:b7:8d:f0:a0:4f:b7:4f:37:80:0c:
                    d9:22:6d:35:8d:88:0d:bf:62:9f:5a:7c:2b:4b:8d:
                    01:b3:d0:0b:fa:ac:56:0c:2c:10:55:e8:d7:4f:b0:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:C6:59:32:B1:14:FE:33:7C:9B:B3:51:0C:47:EC:E1:78:2F:E4
            X509v3 Authority Key Identifier:
                keyid:1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/323830343a346565633a3a2f33322d3332203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4eec::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:04:b3:ba:18:28:48:aa:02:77:2e:19:78:8c:63:09:3b:
         c9:63:fc:18:b9:44:db:d2:99:29:a7:98:b6:53:90:a6:91:54:
         0f:da:60:4e:e1:6a:b8:b6:1d:6f:83:28:23:96:d0:37:31:1b:
         14:e2:77:d9:50:62:06:18:80:43:fe:08:97:20:e0:55:33:9b:
         0b:94:08:dc:81:d8:4a:3d:8d:f9:dc:22:5d:74:4e:51:fa:7c:
         27:54:15:e5:93:48:98:76:1e:e7:90:3d:c3:e7:f0:ba:a6:58:
         6a:29:24:04:ac:d3:f1:e6:0b:bc:e0:27:44:78:ae:28:fb:c9:
         0e:51:0c:bb:f9:b0:91:5c:2e:93:fb:46:b6:31:61:51:56:42:
         32:58:f7:f3:43:a0:3c:74:6b:5d:8e:61:97:68:a0:dd:6d:f4:
         97:6d:b7:83:71:7a:4e:18:23:09:d0:05:fe:30:8b:c5:72:b6:
         46:0f:3c:9b:0a:ec:8a:6f:2d:9b:e8:03:6b:bd:c9:70:6c:3c:
         01:5f:7b:23:0e:f0:e7:3e:64:ea:57:ac:1c:07:e4:41:44:06:
         03:8f:3c:7b:9c:d8:4a:8e:15:8a:10:3c:cf:eb:f8:2c:61:25:
         fd:34:ee:38:9f:21:78:a1:7d:95:c3:fc:22:54:f0:59:85:1a:
         1e:d2:93:30
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbPzRcMdlIPckdNQUlpaY8Nn2LswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2MjYyQzU2RDQ3NkQ5NDZDOEEzODNBQkIwMjU5RTAw
RjcxRTU1RDAeFw0yNDA0MDQwMDA5NTZaFw0yNTA0MDMwMDE0NTZaMDMxMTAvBgNV
BAMTKDc2MThDNjU5MzJCMTE0RkUzMzdDOUJCMzUxMEM0N0VDRTE3ODJGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVs3p41xOzeUKW6JKEkmfSsUv
zQpvwmiJgvRgT2jDbJJXEoencTOEaWIcH6qVFK6a6P7MiKdT0cLUB6CBn8LTjNr1
7LIWdXhOvjhtN611Po1WD/Iq9IXOC85kkuEIZUNDvNLwa3Mh/Aq0ifokF1ZaMGzb
lduh3lVDC2mtnqQyIiqMY7QMw8SCSsCs4/9zKTOBnXMAeZb1OiqoATnYDO2JJo2B
tf4qDsa7RKdAdnTQ1/XU9+kTC0QvmcMLgneX+PM8dIwLT/lwhlqcqNaY/7FKy1wE
Hs4Yt43woE+3TzeADNkibTWNiA2/Yp9afCtLjQGz0Av6rFYMLBBV6NdPsKlbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdhjGWTKxFP4zfJuzUQxH7OF4L+QwHwYDVR0j
BBgwFoAUHGJixW1HbZRsijg6uwJZ4A9x5V0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGU0OHJXaUVEUVk3TXBjZUExQ0ZRa1Z2YU5Md3dGZWlSVTF0V0dEaWdm
VlEvMS8xQzYyNjJDNTZENDc2RDk0NkM4QTM4M0FCQjAyNTlFMDBGNzFFNTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNjI2MkM1NkQ0NzZEOTQ2
QzhBMzgzQUJCMDI1OUUwMEY3MUU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlNDhyV2lFRFFZN01wY2VBMUNGUWtWdmFOTHd3RmVpUlUxdFdHRGlnZlZRLzEv
MzIzODMwMzQzYTM0NjU2NTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzIzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARO7DANBgkqhkiG9w0BAQsFAAOCAQEAEMUEs7oY
KEiqAncuGXiMYwk7yWP8GLlE29KZKaeYtlOQppFUD9pgTuFquLYdb4MoI5bQNzEb
FOJ32VBiBhiAQ/4IlyDgVTObC5QI3IHYSj2N+dwiXXROUfp8J1QV5ZNImHYe55A9
w+fwuqZYaikkBKzT8eYLvOAnRHiuKPvJDlEMu/mwkVwuk/tGtjFhUVZCMlj380Og
PHRrXY5hl2ig3W30l223g3F6ThgjCdAF/jCLxXK2Rg88mwrsim8tm+gDa73JcGw8
AV97Iw7w5z5k6lesHAfkQUQGA488e5zYSo4VihA8z+v4LGEl/TTuOJ8heKF9lcP8
IlTwWYUaHtKTMA==
-----END CERTIFICATE-----