Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a3a2f33332d3333203d3e20323731313735.roa
File:                     323830343a373736343a3a2f33332d3333203d3e20323731313735.roa (raw, json)
Hash identifier:          C1dA55+WOugfkVn+5CyqNg2rBlUYqRQ2/Z8zle8zB5c=
Subject key identifier:   1F:35:AC:9E:9E:AE:F3:46:54:F1:D5:1D:83:55:4B:E7:87:6B:2F:D5
Certificate issuer:       /CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
Certificate serial:       3EFCE7441F489C5999A58C268011C4741BFAA1A7
Authority key identifier: E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a3a2f33332d3333203d3e20323731313735.roa
Signing time:             Wed 24 Apr 2024 18:53:45 +0000
ROA not before:           Wed 24 Apr 2024 18:48:45 +0000
ROA not after:            Wed 23 Apr 2025 18:53:45 +0000
asID:                     271175
IP address blocks:        2804:7764::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fc:e7:44:1f:48:9c:59:99:a5:8c:26:80:11:c4:74:1b:fa:a1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E59164CC5F9B9103B7458C29C6839E943B50F64D
        Validity
            Not Before: Apr 24 18:48:45 2024 GMT
            Not After : Apr 23 18:53:45 2025 GMT
        Subject: CN=1F35AC9E9EAEF34654F1D51D83554BE7876B2FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:00:ab:8d:99:5a:b1:6d:6c:3c:19:58:cd:
                    37:0a:da:9b:db:be:c4:63:ff:e0:28:37:b6:ad:b6:
                    54:6e:92:58:25:6a:d2:92:ef:13:5c:24:67:ac:ec:
                    2d:f0:be:bc:2b:00:ac:94:b8:b8:d3:1a:13:2d:0e:
                    28:2e:e9:d9:75:26:88:7f:d2:43:87:94:94:30:f4:
                    fe:0d:19:8c:e6:5a:9e:13:af:ed:8f:fa:d6:f5:99:
                    a5:17:41:05:03:14:0d:5e:fd:86:ae:20:c4:97:22:
                    5b:c5:aa:1a:a5:26:ae:dd:bf:26:6a:80:fe:79:c7:
                    a1:4b:6d:cb:2b:f2:f9:45:e0:da:59:8c:59:64:42:
                    05:c6:23:d5:1e:8b:42:4e:af:81:b9:9c:90:28:35:
                    b9:e9:b5:81:da:81:f9:4a:c5:54:41:03:b1:be:bc:
                    5a:72:f1:52:cf:ff:40:80:aa:8b:4d:99:38:df:e1:
                    92:f5:49:b4:1a:72:fd:97:a4:e0:aa:8d:73:c4:e3:
                    dd:65:88:fd:a7:bf:e7:3e:84:59:c3:1e:ad:cb:1e:
                    c8:b6:a6:33:1b:e9:10:f5:fe:58:66:d1:d0:f4:2a:
                    d0:43:00:6b:80:25:d1:bf:3d:c2:e2:c1:0c:94:7d:
                    9a:4d:4a:2d:f1:b5:ee:81:5e:9d:a1:e1:16:5a:8c:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:AC:9E:9E:AE:F3:46:54:F1:D5:1D:83:55:4B:E7:87:6B:2F:D5
            X509v3 Authority Key Identifier:
                keyid:E5:91:64:CC:5F:9B:91:03:B7:45:8C:29:C6:83:9E:94:3B:50:F6:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/E59164CC5F9B9103B7458C29C6839E943B50F64D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E59164CC5F9B9103B7458C29C6839E943B50F64D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFzpxFmThaL7QnnUj9phWFvnCruhGFhyFoULQnU7Wbkm/2/323830343a373736343a3a2f33332d3333203d3e20323731313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7764::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:8b:2e:95:3b:a9:5b:7c:2f:4c:c9:48:f7:3e:61:87:3d:75:
         e6:f9:ba:02:43:ba:b1:a1:c2:48:b2:b8:4f:76:7b:11:eb:5c:
         ba:b0:34:e0:cc:3b:0b:b6:81:f6:f4:5e:d5:25:c1:15:36:33:
         81:d7:92:ea:fb:1b:80:d8:6c:92:d1:ee:02:57:73:9f:ac:13:
         46:0f:b8:33:93:4b:3c:2d:30:32:7e:96:6f:77:ad:52:a9:74:
         82:36:65:fd:6f:ae:7c:d8:9a:bd:55:38:0b:ec:07:15:bb:66:
         48:48:e8:4f:87:07:7f:64:bd:21:79:bc:ee:48:00:3f:05:8a:
         22:85:58:40:17:e8:fb:70:39:50:22:3c:c5:ef:e5:17:d2:f8:
         f6:89:8c:73:61:c7:9d:91:87:8b:46:8a:a2:65:bf:66:c1:2f:
         cd:ef:50:8b:6e:8c:3c:f9:10:0f:33:ce:bf:35:ec:13:48:60:
         50:d0:17:c4:e4:79:cd:d0:8b:21:9e:10:35:07:2a:71:26:68:
         c0:c7:a1:59:ef:85:66:73:3a:55:ef:b5:de:51:c4:ad:3b:94:
         5f:ca:2f:34:85:1f:06:ed:3b:1a:6f:40:3a:5c:27:5d:20:09:
         1a:36:21:80:20:20:bf:8d:1f:28:10:a7:aa:0d:a9:14:1f:8f:
         43:f6:de:ea
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPvznRB9InFmZpYwmgBHEdBv6oacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5MTY0Q0M1RjlCOTEwM0I3NDU4QzI5QzY4MzlFOTQz
QjUwRjY0RDAeFw0yNDA0MjQxODQ4NDVaFw0yNTA0MjMxODUzNDVaMDMxMTAvBgNV
BAMTKDFGMzVBQzlFOUVBRUYzNDY1NEYxRDUxRDgzNTU0QkU3ODc2QjJGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfcACrjZlasW1sPBlYzTcK2pvb
vsRj/+AoN7attlRuklglatKS7xNcJGes7C3wvrwrAKyUuLjTGhMtDigu6dl1Joh/
0kOHlJQw9P4NGYzmWp4Tr+2P+tb1maUXQQUDFA1e/YauIMSXIlvFqhqlJq7dvyZq
gP55x6FLbcsr8vlF4NpZjFlkQgXGI9Uei0JOr4G5nJAoNbnptYHagflKxVRBA7G+
vFpy8VLP/0CAqotNmTjf4ZL1SbQacv2XpOCqjXPE491liP2nv+c+hFnDHq3LHsi2
pjMb6RD1/lhm0dD0KtBDAGuAJdG/PcLiwQyUfZpNSi3xte6BXp2h4RZajElHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHzWsnp6u80ZU8dUdg1VL54drL9UwHwYDVR0j
BBgwFoAU5ZFkzF+bkQO3RYwpxoOelDtQ9k0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZ6cHhGbVRoYUw3UW5uVWo5cGhXRnZuQ3J1aEdGaHlGb1VMUW5VN1di
a20vMi9FNTkxNjRDQzVGOUI5MTAzQjc0NThDMjlDNjgzOUU5NDNCNTBGNjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1OTE2NENDNUY5QjkxMDNC
NzQ1OEMyOUM2ODM5RTk0M0I1MEY2NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGenB4Rm1UaGFMN1FublVqOXBoV0Z2bkNydWhHRmh5Rm9VTFFuVTdXYmttLzIv
MzIzODMwMzQzYTM3MzczNjM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR3ZAAwDQYJKoZIhvcNAQELBQADggEBAKaLLpU7
qVt8L0zJSPc+YYc9deb5ugJDurGhwkiyuE92exHrXLqwNODMOwu2gfb0XtUlwRU2
M4HXkur7G4DYbJLR7gJXc5+sE0YPuDOTSzwtMDJ+lm93rVKpdII2Zf1vrnzYmr1V
OAvsBxW7ZkhI6E+HB39kvSF5vO5IAD8FiiKFWEAX6PtwOVAiPMXv5RfS+PaJjHNh
x52Rh4tGiqJlv2bBL83vUItujDz5EA8zzr817BNIYFDQF8Tkec3QiyGeEDUHKnEm
aMDHoVnvhWZzOlXvtd5RxK07lF/KLzSFHwbtOxpvQDpcJ10gCRo2IYAgIL+NHygQ
p6oNqRQfj0P23uo=
-----END CERTIFICATE-----