Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/323830343a373361343a3a2f33322d3438203d3e20323730393238.roa
File:                     323830343a373361343a3a2f33322d3438203d3e20323730393238.roa (raw, json)
Hash identifier:          HA9IZLJYcvxS+EnbVXuhrSxO6F0kmnZhbV8IHCmhpHM=
Subject key identifier:   DB:3A:F1:F0:FF:FD:1C:56:B3:F0:38:B6:00:36:68:95:2A:AF:A2:DA
Certificate issuer:       /CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
Certificate serial:       645DA37BE7DA0503422FCCE03101673A0A78DB84
Authority key identifier: 1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/323830343a373361343a3a2f33322d3438203d3e20323730393238.roa
Signing time:             Thu 04 Apr 2024 15:45:03 +0000
ROA not before:           Thu 04 Apr 2024 15:40:03 +0000
ROA not after:            Thu 03 Apr 2025 15:45:03 +0000
asID:                     270928
IP address blocks:        2804:73a4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5d:a3:7b:e7:da:05:03:42:2f:cc:e0:31:01:67:3a:0a:78:db:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F
        Validity
            Not Before: Apr  4 15:40:03 2024 GMT
            Not After : Apr  3 15:45:03 2025 GMT
        Subject: CN=DB3AF1F0FFFD1C56B3F038B6003668952AAFA2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:cd:ac:0e:97:d3:4c:76:fe:27:05:2e:75:
                    22:75:e9:63:5e:0d:04:28:c5:ed:22:d3:dd:ca:67:
                    43:9a:6f:0e:c6:62:da:c0:9b:b6:ff:1d:32:97:84:
                    a6:80:c3:ea:67:26:35:1e:54:b6:b0:82:1c:a0:7a:
                    af:79:5e:3c:3a:af:55:5d:99:18:7b:05:8f:c6:e1:
                    28:bb:17:dd:e8:7c:a3:51:32:ea:e9:02:60:20:80:
                    23:a2:a4:e8:e3:07:99:8b:04:1f:4f:14:bd:58:37:
                    ee:51:e3:4d:5e:ef:df:dd:76:04:0d:1e:89:8c:3d:
                    ad:9b:75:84:ef:cc:40:25:79:c5:2e:c0:ef:83:da:
                    d1:82:ed:55:5c:8b:2c:47:e5:9c:72:33:8e:1a:3b:
                    7b:18:11:1e:17:ae:5a:c5:d5:e3:3a:05:0d:90:0b:
                    82:09:29:67:51:7b:b6:98:e3:3b:45:f5:a0:16:07:
                    b2:05:e8:a6:6c:63:ba:fa:0a:5e:fd:35:3b:37:9e:
                    5c:ba:db:02:95:9a:25:d5:cb:7d:b1:3c:3b:9f:7f:
                    74:ee:b1:97:a9:8f:5c:51:0a:14:7b:d8:07:19:b9:
                    de:c4:6b:e0:1d:25:91:61:e7:ee:a6:12:dc:9d:11:
                    38:17:4e:85:62:09:9b:c6:10:34:6f:e8:94:20:8c:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:F1:F0:FF:FD:1C:56:B3:F0:38:B6:00:36:68:95:2A:AF:A2:DA
            X509v3 Authority Key Identifier:
                keyid:1B:DF:7A:3D:41:48:DF:1D:00:5B:63:FE:AC:01:57:72:6F:A7:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BDF7A3D4148DF1D005B63FEAC0157726FA7BE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqJPAS9xLaSkZWe8Bn12TE7epRdAaucSstXEMbLSFmXv/1/323830343a373361343a3a2f33322d3438203d3e20323730393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:8e:a8:d7:7b:b1:da:20:ed:68:49:05:4d:f2:98:57:b3:f8:
         7a:f5:31:c5:c6:eb:b6:81:bf:f9:3f:51:f3:f3:f6:c1:46:3a:
         cf:4f:47:19:83:a9:2b:67:7b:e4:4b:08:21:3d:dd:a4:d7:50:
         a1:06:09:52:4e:33:3b:44:4c:38:0b:61:a9:ea:b2:09:3a:4e:
         63:8f:2b:b3:d8:84:35:7c:75:3f:79:27:e4:fe:5f:b9:05:e8:
         20:d1:56:99:e2:b9:cb:b0:0e:71:59:07:c8:21:db:b4:ba:41:
         29:4b:07:9d:3e:c8:2d:32:5b:ff:81:b5:25:d0:a4:b7:59:18:
         b5:31:a7:57:f3:e1:71:b3:5c:7f:a2:8a:a1:2c:e7:f4:42:3c:
         13:bb:0f:0c:b7:89:7a:96:6f:8e:6a:39:12:9c:83:a0:54:9a:
         98:c4:e4:cb:e7:1f:b5:e3:64:57:d3:c8:24:cc:b2:a5:23:79:
         0d:87:f3:3b:5c:fc:dd:58:6a:64:36:ba:2f:26:09:ad:5a:8c:
         f9:88:c1:7c:42:0c:db:4e:05:7a:e7:6c:89:72:ce:0d:79:0f:
         ed:39:90:ec:51:c5:95:c7:c3:56:26:8b:e9:53:77:15:c7:f2:
         37:ea:5b:e7:a5:d5:7e:2a:3c:cb:a0:c0:4c:2b:82:5c:92:13:
         4f:c3:e8:25
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZF2je+faBQNCL8zgMQFnOgp424QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJERjdBM0Q0MTQ4REYxRDAwNUI2M0ZFQUMwMTU3NzI2
RkE3QkU2RjAeFw0yNDA0MDQxNTQwMDNaFw0yNTA0MDMxNTQ1MDNaMDMxMTAvBgNV
BAMTKERCM0FGMUYwRkZGRDFDNTZCM0YwMzhCNjAwMzY2ODk1MkFBRkEyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXM2sDpfTTHb+JwUudSJ16WNe
DQQoxe0i093KZ0Oabw7GYtrAm7b/HTKXhKaAw+pnJjUeVLawghygeq95Xjw6r1Vd
mRh7BY/G4Si7F93ofKNRMurpAmAggCOipOjjB5mLBB9PFL1YN+5R401e79/ddgQN
HomMPa2bdYTvzEAlecUuwO+D2tGC7VVciyxH5ZxyM44aO3sYER4XrlrF1eM6BQ2Q
C4IJKWdRe7aY4ztF9aAWB7IF6KZsY7r6Cl79NTs3nly62wKVmiXVy32xPDuff3Tu
sZepj1xRChR72AcZud7Ea+AdJZFh5+6mEtydETgXToViCZvGEDRv6JQgjFnZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2zrx8P/9HFaz8Di2ADZolSqvotowHwYDVR0j
BBgwFoAUG996PUFI3x0AW2P+rAFXcm+nvm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHFKUEFTOXhMYVNrWldlOEJuMTJURTdlcFJkQWF1Y1NzdFhFTWJMU0Zt
WHYvMS8xQkRGN0EzRDQxNDhERjFEMDA1QjYzRkVBQzAxNTc3MjZGQTdCRTZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCREY3QTNENDE0OERGMUQw
MDVCNjNGRUFDMDE1NzcyNkZBN0JFNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RxSlBBUzl4TGFTa1pXZThCbjEyVEU3ZXBSZEFhdWNTc3RYRU1iTFNGbVh2LzEv
MzIzODMwMzQzYTM3MzM2MTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzkzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARzpDANBgkqhkiG9w0BAQsFAAOCAQEAcI6o13ux
2iDtaEkFTfKYV7P4evUxxcbrtoG/+T9R8/P2wUY6z09HGYOpK2d75EsIIT3dpNdQ
oQYJUk4zO0RMOAthqeqyCTpOY48rs9iENXx1P3kn5P5fuQXoINFWmeK5y7AOcVkH
yCHbtLpBKUsHnT7ILTJb/4G1JdCkt1kYtTGnV/PhcbNcf6KKoSzn9EI8E7sPDLeJ
epZvjmo5EpyDoFSamMTky+cfteNkV9PIJMyypSN5DYfzO1z83VhqZDa6LyYJrVqM
+YjBfEIM204FeudsiXLODXkP7TmQ7FHFlcfDViaL6VN3FcfyN+pb56XVfio8y6DA
TCuCXJITT8PoJQ==
-----END CERTIFICATE-----