Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33322d3332203d3e20323633393230.roa (raw, json)
Hash identifier:          gmwO7JPoAzN0Rd9MzD1gK6wWuxQDGBk7Sh7YbJq5TvE=
Subject key identifier:   80:FD:AB:9C:34:01:99:E7:8D:B6:52:A3:BF:C5:55:09:E4:FF:D7:FC
Certificate issuer:       /CN=F3860F57CCED8C936C498E86A51A295017183FFB
Certificate serial:       2AC7D5D14C16383927305B242D190ABDE392ACA9
Authority key identifier: F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa
Signing time:             Tue 02 Jul 2024 16:51:54 +0000
ROA not before:           Tue 02 Jul 2024 16:46:54 +0000
ROA not after:            Tue 01 Jul 2025 16:51:54 +0000
asID:                     263920
IP address blocks:        2804:27c0::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c7:d5:d1:4c:16:38:39:27:30:5b:24:2d:19:0a:bd:e3:92:ac:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3860F57CCED8C936C498E86A51A295017183FFB
        Validity
            Not Before: Jul  2 16:46:54 2024 GMT
            Not After : Jul  1 16:51:54 2025 GMT
        Subject: CN=80FDAB9C340199E78DB652A3BFC55509E4FFD7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:fe:d7:bf:16:4b:a6:62:01:56:75:c4:0d:
                    f0:f0:e3:a1:9b:85:24:62:8f:73:e8:49:e1:c2:cc:
                    cf:96:24:d5:4e:10:88:df:4c:7d:e7:28:f6:24:61:
                    8c:88:7e:28:46:88:37:84:00:94:2f:83:13:27:56:
                    da:7c:a7:46:bb:f6:ff:6d:72:27:01:8a:d0:c3:29:
                    60:fe:9b:81:d4:7a:6e:f9:fa:5c:97:ea:59:ba:d9:
                    67:12:e4:b2:36:9a:a0:66:44:a7:b1:cb:1d:57:b3:
                    3e:12:b8:d6:4a:77:5b:fe:43:45:b9:bf:95:44:bf:
                    b4:b7:3e:c3:18:6f:35:8d:b1:24:fa:5b:79:21:68:
                    16:5a:c1:a4:3e:3b:e0:32:d8:21:e2:d3:7b:4d:c9:
                    1d:6e:12:ce:ca:b7:81:89:c4:0d:bd:c6:4b:83:a1:
                    bf:39:42:d9:d7:10:c7:38:22:64:c6:3a:6c:75:90:
                    d1:f2:b7:76:fc:37:21:b7:79:62:fc:41:93:9e:07:
                    40:53:37:b3:d9:68:59:b4:d7:97:ea:1c:6a:e6:04:
                    64:19:77:da:36:87:4a:da:b9:ee:b0:b6:c5:17:01:
                    1f:9c:f0:3d:5f:83:67:7d:3d:08:0a:a6:cb:7c:f1:
                    ad:f7:30:32:f7:78:93:d8:92:e6:54:de:17:f9:a1:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:AB:9C:34:01:99:E7:8D:B6:52:A3:BF:C5:55:09:E4:FF:D7:FC
            X509v3 Authority Key Identifier:
                keyid:F3:86:0F:57:CC:ED:8C:93:6C:49:8E:86:A5:1A:29:50:17:18:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/F3860F57CCED8C936C498E86A51A295017183FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3860F57CCED8C936C498E86A51A295017183FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:65:2e:a7:9b:a6:44:94:e0:9f:a2:59:b0:34:a3:58:2c:
         2a:e9:e9:06:b3:80:fc:dc:d9:f2:9b:d1:ab:43:da:73:9f:c4:
         99:ed:43:82:23:56:df:7a:06:f3:d2:14:7d:9c:da:21:37:71:
         f5:48:52:bc:74:be:89:f0:b7:e5:3f:3a:f7:cd:f1:c1:df:dd:
         15:ce:9c:2a:57:b6:0d:c5:5c:41:3c:96:8f:5f:25:38:19:77:
         1f:e1:fa:79:dd:bc:b9:41:9e:a7:6e:48:6b:d4:39:ac:2f:2c:
         28:2c:03:4e:98:d0:14:78:89:41:1b:11:77:2b:41:d6:fa:cd:
         b5:5a:7f:3a:6b:f6:83:45:d2:23:1c:c7:ca:40:10:3a:6a:65:
         98:53:32:62:9c:b4:23:b3:c5:24:6a:e9:eb:0b:b8:82:68:31:
         24:1c:07:78:e7:60:59:7a:ee:bb:e7:ed:04:63:84:fd:4d:0e:
         63:03:98:07:59:fd:a0:82:3f:9e:ea:4f:5c:40:6a:d6:12:9f:
         49:1f:c8:f1:cc:b1:3d:69:da:d9:67:b1:c3:44:1f:c5:9a:0e:
         b3:2d:67:8f:30:2b:5a:28:2b:62:08:fe:ec:86:08:7d:15:d5:
         4f:f0:7a:08:6b:ff:82:09:bc:a4:62:fc:21:68:09:f9:bd:32:
         0c:77:30:bc
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUKsfV0UwWODknMFskLRkKveOSrKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4NjBGNTdDQ0VEOEM5MzZDNDk4RTg2QTUxQTI5NTAx
NzE4M0ZGQjAeFw0yNDA3MDIxNjQ2NTRaFw0yNTA3MDExNjUxNTRaMDMxMTAvBgNV
BAMTKDgwRkRBQjlDMzQwMTk5RTc4REI2NTJBM0JGQzU1NTA5RTRGRkQ3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9v7XvxZLpmIBVnXEDfDw46Gb
hSRij3PoSeHCzM+WJNVOEIjfTH3nKPYkYYyIfihGiDeEAJQvgxMnVtp8p0a79v9t
cicBitDDKWD+m4HUem75+lyX6lm62WcS5LI2mqBmRKexyx1Xsz4SuNZKd1v+Q0W5
v5VEv7S3PsMYbzWNsST6W3khaBZawaQ+O+Ay2CHi03tNyR1uEs7Kt4GJxA29xkuD
ob85QtnXEMc4ImTGOmx1kNHyt3b8NyG3eWL8QZOeB0BTN7PZaFm015fqHGrmBGQZ
d9o2h0raue6wtsUXAR+c8D1fg2d9PQgKpst88a33MDL3eJPYkuZU3hf5ode3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgP2rnDQBmeeNtlKjv8VVCeT/1/wwHwYDVR0j
BBgwFoAU84YPV8ztjJNsSY6GpRopUBcYP/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9GMzg2MEY1N0NDRUQ4QzkzNkM0OThFODZBNTFBMjk1MDE3MTgzRkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzODYwRjU3Q0NFRDhDOTM2
QzQ5OEU4NkE1MUEyOTUwMTcxODNGRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzIzODMwMzQzYTMyMzc2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnwDANBgkqhkiG9w0BAQsFAAOCAQEATixlLqeb
pkSU4J+iWbA0o1gsKunpBrOA/NzZ8pvRq0Pac5/Eme1DgiNW33oG89IUfZzaITdx
9UhSvHS+ifC35T86983xwd/dFc6cKle2DcVcQTyWj18lOBl3H+H6ed28uUGep25I
a9Q5rC8sKCwDTpjQFHiJQRsRdytB1vrNtVp/Omv2g0XSIxzHykAQOmplmFMyYpy0
I7PFJGrp6wu4gmgxJBwHeOdgWXruu+ftBGOE/U0OYwOYB1n9oII/nupPXEBq1hKf
SR/I8cyxPWna2Wexw0QfxZoOsy1njzArWigrYgj+7IYIfRXVT/B6CGv/ggm8pGL8
IWgJ+b0yDHcwvA==
-----END CERTIFICATE-----