Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/323830343a366135343a3a2f33332d3333203d3e20323730333239.roa
File:                     323830343a366135343a3a2f33332d3333203d3e20323730333239.roa (raw, json)
Hash identifier:          tZCUOMpmVPARYFD5WpMM8lO6i8PpEgp/yzvk5sUwR4s=
Subject key identifier:   CA:1A:A2:93:0E:43:5B:02:60:68:17:FC:F4:92:86:39:FD:6C:DA:56
Certificate issuer:       /CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
Certificate serial:       0A0DE6EB4364B617266FBB2974CD29B43C40186C
Authority key identifier: 95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/323830343a366135343a3a2f33332d3333203d3e20323730333239.roa
Signing time:             Thu 27 Jun 2024 20:11:56 +0000
ROA not before:           Thu 27 Jun 2024 20:06:56 +0000
ROA not after:            Thu 26 Jun 2025 20:11:56 +0000
asID:                     270329
IP address blocks:        2804:6a54::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0d:e6:eb:43:64:b6:17:26:6f:bb:29:74:cd:29:b4:3c:40:18:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
        Validity
            Not Before: Jun 27 20:06:56 2024 GMT
            Not After : Jun 26 20:11:56 2025 GMT
        Subject: CN=CA1AA2930E435B02606817FCF4928639FD6CDA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:c3:87:1c:bb:62:07:14:08:64:07:e7:19:
                    39:8f:19:d9:71:1e:8f:73:de:3d:16:4a:2d:77:ec:
                    cc:dc:08:40:0d:aa:3f:3d:f0:00:e0:e6:80:68:58:
                    75:23:97:ec:ad:8a:6c:c7:28:2b:b6:ce:bc:fb:b0:
                    fe:10:fe:2f:ca:f8:2d:e5:05:ac:a5:61:84:39:92:
                    9b:ba:0c:4a:c7:9b:c7:ee:31:c6:9a:fc:a8:90:da:
                    fb:1e:2a:8c:64:83:e8:e9:0b:f7:14:d3:a6:d1:bc:
                    49:67:92:79:af:e9:ef:96:f4:b0:8c:93:82:ce:46:
                    43:4c:45:db:d5:b2:3e:10:1a:41:e0:2e:97:21:8f:
                    5d:ad:ab:7d:f2:33:3d:12:f2:05:1b:9d:46:54:97:
                    3c:af:05:8f:43:d5:ed:c2:d1:f2:2c:96:4f:5b:ee:
                    57:fe:81:c8:85:42:34:f2:a4:ac:11:31:d0:a5:22:
                    55:35:b7:c9:5f:fd:b1:64:26:20:92:ef:8d:6d:6d:
                    3b:25:d0:f0:04:43:4e:e1:b7:0e:60:8e:52:13:44:
                    97:3b:28:42:8a:46:8b:93:d4:0f:12:3a:93:ef:58:
                    88:c4:d5:15:d5:8d:62:2f:d2:7a:09:9b:80:95:b0:
                    cc:e7:0a:52:2d:6c:b2:f1:6b:b8:69:cb:17:11:1d:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1A:A2:93:0E:43:5B:02:60:68:17:FC:F4:92:86:39:FD:6C:DA:56
            X509v3 Authority Key Identifier:
                keyid:95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/950902D05DDE923B7DA014B3AA90F4258FD879B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/323830343a366135343a3a2f33332d3333203d3e20323730333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a54::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:6f:8a:af:7d:cd:ff:78:8d:af:45:83:3c:16:0c:af:20:
         75:eb:01:ca:cc:02:12:90:7d:fc:47:2d:6c:8d:9f:d1:d9:ce:
         db:7d:10:16:a1:4f:2a:c7:5b:be:9c:90:5a:ef:83:7d:c8:ce:
         ff:ab:54:64:ff:51:c9:f0:25:0c:1c:45:a1:e6:56:3f:67:4e:
         96:6d:df:a6:8c:0e:91:fa:01:65:6c:36:4a:4b:1a:e1:f5:6f:
         1e:a1:01:34:78:1c:6b:04:71:3a:e9:66:87:4a:d2:fb:17:e2:
         1c:d3:f5:8d:51:40:6b:db:02:b3:e6:3e:77:0a:5e:d7:f7:29:
         b4:0c:cf:63:db:cb:ee:27:ff:15:3f:f9:12:7e:e2:2b:30:c1:
         8a:20:f3:9e:ef:2e:4c:33:9d:5c:33:4f:a1:c8:b5:9d:e6:18:
         f7:54:fa:9d:d2:ec:cb:54:85:ff:7c:38:49:3b:be:c9:a1:3e:
         ff:aa:08:5c:0e:af:8f:14:f5:0a:af:d2:b3:38:bc:b3:ae:aa:
         02:db:50:19:83:f4:28:ba:c1:01:1d:24:66:db:a1:39:f7:3f:
         02:e3:9f:44:36:b7:42:fa:89:8e:85:bd:ce:0c:83:e4:84:d9:
         fd:64:18:60:fc:05:14:a4:cb:02:67:67:23:69:73:67:de:36:
         28:c4:07:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCg3m60Nkthcmb7spdM0ptDxAGGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwOTAyRDA1RERFOTIzQjdEQTAxNEIzQUE5MEY0MjU4
RkQ4NzlCNTAeFw0yNDA2MjcyMDA2NTZaFw0yNTA2MjYyMDExNTZaMDMxMTAvBgNV
BAMTKENBMUFBMjkzMEU0MzVCMDI2MDY4MTdGQ0Y0OTI4NjM5RkQ2Q0RBNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCus8OHHLtiBxQIZAfnGTmPGdlx
Ho9z3j0WSi137MzcCEANqj898ADg5oBoWHUjl+ytimzHKCu2zrz7sP4Q/i/K+C3l
BaylYYQ5kpu6DErHm8fuMcaa/KiQ2vseKoxkg+jpC/cU06bRvElnknmv6e+W9LCM
k4LORkNMRdvVsj4QGkHgLpchj12tq33yMz0S8gUbnUZUlzyvBY9D1e3C0fIslk9b
7lf+gciFQjTypKwRMdClIlU1t8lf/bFkJiCS741tbTsl0PAEQ07htw5gjlITRJc7
KEKKRouT1A8SOpPvWIjE1RXVjWIv0noJm4CVsMznClItbLLxa7hpyxcRHa2dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyhqikw5DWwJgaBf89JKGOf1s2lYwHwYDVR0j
BBgwFoAUlQkC0F3ekjt9oBSzqpD0JY/YebUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW9pVjN4dWJER2FkVm1hQjF2U1p2QjZOWkNjUXpISEpCSFpaUVZrQWRh
ZjEvMC85NTA5MDJEMDVEREU5MjNCN0RBMDE0QjNBQTkwRjQyNThGRDg3OUI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MDkwMkQwNURERTkyM0I3
REEwMTRCM0FBOTBGNDI1OEZEODc5QjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VvaVYzeHViREdhZFZtYUIxdlNadkI2TlpDY1F6SEhKQkhaWlFWa0FkYWYxLzAv
MzIzODMwMzQzYTM2NjEzNTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARqVAAwDQYJKoZIhvcNAQELBQADggEBAK7gb4qv
fc3/eI2vRYM8FgyvIHXrAcrMAhKQffxHLWyNn9HZztt9EBahTyrHW76ckFrvg33I
zv+rVGT/UcnwJQwcRaHmVj9nTpZt36aMDpH6AWVsNkpLGuH1bx6hATR4HGsEcTrp
ZodK0vsX4hzT9Y1RQGvbArPmPncKXtf3KbQMz2Pby+4n/xU/+RJ+4iswwYog857v
LkwznVwzT6HItZ3mGPdU+p3S7MtUhf98OEk7vsmhPv+qCFwOr48U9Qqv0rM4vLOu
qgLbUBmD9Ci6wQEdJGbboTn3PwLjn0Q2t0L6iY6Fvc4Mg+SE2f1kGGD8BRSkywJn
ZyNpc2feNijEB7Y=
-----END CERTIFICATE-----