Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa
File:                     323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa (raw, json)
Hash identifier:          efOoI+6MdtvHVU9ihuzgaFm+WQHN4FfgUo0QTnDSWZ4=
Subject key identifier:   C8:91:DD:9B:E2:BB:48:4F:50:00:BD:0F:1D:41:D1:5B:F6:FD:20:DD
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       4AE99D7C191959E42B80532CE4F69648F246B95B
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:16 +0000
ROA not before:           Mon 27 May 2024 21:08:16 +0000
ROA not after:            Mon 26 May 2025 21:13:16 +0000
asID:                     269508
IP address blocks:        2804:65b0:c000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:9d:7c:19:19:59:e4:2b:80:53:2c:e4:f6:96:48:f2:46:b9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:16 2024 GMT
            Not After : May 26 21:13:16 2025 GMT
        Subject: CN=C891DD9BE2BB484F5000BD0F1D41D15BF6FD20DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:71:08:90:d8:6b:a1:0f:2c:fd:d1:0c:9d:
                    29:12:61:c2:bf:e7:66:53:cd:71:bc:b3:f3:e1:06:
                    63:14:94:1d:94:66:06:18:0c:72:9f:5a:f4:69:43:
                    d1:63:af:c0:f2:d8:78:36:d7:6e:75:aa:d8:c8:15:
                    83:9a:e0:14:d1:24:01:35:25:e8:be:d9:7a:b3:f5:
                    b5:2e:d7:70:84:18:b1:e2:12:59:92:83:36:ea:58:
                    0f:c7:b1:fd:59:72:2d:98:eb:95:22:99:b8:ad:83:
                    ef:61:f1:ad:ef:17:51:23:b0:6f:c8:77:a3:38:6d:
                    6f:07:b2:7c:37:a9:12:00:e6:0c:af:3a:c5:f1:2a:
                    6d:e8:3d:bc:f6:d7:14:3d:a5:d1:85:cd:c8:b9:0b:
                    f0:8e:56:e3:bb:b2:41:8f:a3:af:09:92:53:7e:13:
                    b3:49:dc:36:2d:6e:03:3f:45:f9:00:a6:40:8e:c9:
                    ec:12:64:e3:ae:7d:98:45:16:36:72:ed:2c:31:0f:
                    fe:92:d8:cd:62:7d:e2:eb:e0:16:14:eb:f1:9c:6b:
                    f4:e0:96:af:ce:17:7d:1d:23:19:19:20:9a:6f:11:
                    61:d0:1b:11:dd:e0:4d:a2:36:9b:8c:36:57:70:04:
                    ef:54:d5:65:fa:8d:fb:69:f2:0a:e7:89:2d:13:aa:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:DD:9B:E2:BB:48:4F:50:00:BD:0F:1D:41:D1:5B:F6:FD:20:DD
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/323830343a363562303a633030303a3a2f33342d3334203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65b0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:48:7e:8f:7b:9f:c2:d0:3e:84:04:32:fc:c6:f7:47:eb:
         97:26:41:e8:b0:03:2a:59:22:19:29:df:4b:a1:22:31:c7:e3:
         8a:24:26:7d:8a:2e:f5:a2:71:bf:eb:31:95:ff:a8:62:a5:9b:
         a9:ba:ba:30:6b:b8:48:11:c2:7e:9c:91:7b:ac:5c:5d:9f:b5:
         d2:9e:64:61:73:52:a9:85:31:52:0d:e2:3e:b8:ad:a2:58:1f:
         73:e4:97:3e:4c:fa:e8:b7:9c:c2:08:a0:3c:eb:6d:28:c8:32:
         bb:5c:8d:c6:53:bc:e8:7c:38:bb:53:a5:fa:8d:76:0d:a7:1b:
         a1:a9:65:6e:f5:3a:42:55:36:b9:a8:22:e1:32:90:13:0c:1c:
         cd:e9:54:45:84:5e:4d:83:be:ee:15:1d:ae:f8:9d:62:12:0f:
         d2:65:24:d4:db:eb:45:f6:d7:fe:92:6e:29:9c:db:f4:7f:b6:
         8d:13:4d:0b:5c:c4:ad:9c:a0:c0:14:c6:9b:8d:fa:28:0b:c7:
         e6:5d:ad:e5:f0:a5:ff:58:1b:2b:5f:71:5f:d4:44:2d:ab:4f:
         cc:57:64:9c:18:fe:bd:7a:21:79:54:d5:b3:f9:93:6f:e4:5a:
         44:af:1c:64:51:59:6c:cc:92:c4:9b:a8:87:a4:61:1c:a4:49:
         b7:39:c4:b2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSumdfBkZWeQrgFMs5PaWSPJGuVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBNTA3QTM0NDlCMzUyOTdDMkUwODUxRjA5NTc2NTcw
MjY5QjUzOTAeFw0yNDA1MjcyMTA4MTZaFw0yNTA1MjYyMTEzMTZaMDMxMTAvBgNV
BAMTKEM4OTFERDlCRTJCQjQ4NEY1MDAwQkQwRjFENDFEMTVCRjZGRDIwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqnEIkNhroQ8s/dEMnSkSYcK/
52ZTzXG8s/PhBmMUlB2UZgYYDHKfWvRpQ9Fjr8Dy2Hg21251qtjIFYOa4BTRJAE1
Jei+2Xqz9bUu13CEGLHiElmSgzbqWA/Hsf1Zci2Y65Uimbitg+9h8a3vF1EjsG/I
d6M4bW8Hsnw3qRIA5gyvOsXxKm3oPbz21xQ9pdGFzci5C/COVuO7skGPo68JklN+
E7NJ3DYtbgM/RfkApkCOyewSZOOufZhFFjZy7SwxD/6S2M1ifeLr4BYU6/Gca/Tg
lq/OF30dIxkZIJpvEWHQGxHd4E2iNpuMNldwBO9U1WX6jftp8grniS0Tqpy9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUyJHdm+K7SE9QAL0PHUHRW/b9IN0wHwYDVR0j
BBgwFoAUtKUHo0SbNSl8LghR8JV2VwJptTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC9CNEE1MDdBMzQ0OUIzNTI5N0MyRTA4NTFGMDk1NzY1NzAyNjlCNTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0QTUwN0EzNDQ5QjM1Mjk3
QzJFMDg1MUYwOTU3NjU3MDI2OUI1MzkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzIzODMwMzQzYTM2MzU2MjMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM1MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZbDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCLuUh+j3ufwtA+hAQy/Mb3R+uXJkHosAMqWSIZKd9LoSIxx+OKJCZ9ii71
onG/6zGV/6hipZupurowa7hIEcJ+nJF7rFxdn7XSnmRhc1KphTFSDeI+uK2iWB9z
5Jc+TProt5zCCKA8620oyDK7XI3GU7zofDi7U6X6jXYNpxuhqWVu9TpCVTa5qCLh
MpATDBzN6VRFhF5Ng77uFR2u+J1iEg/SZSTU2+tF9tf+km4pnNv0f7aNE00LXMSt
nKDAFMabjfooC8fmXa3l8KX/WBsrX3Ff1EQtq0/MV2ScGP69eiF5VNWz+ZNv5FpE
rxxkUVlszJLEm6iHpGEcpEm3OcSy
-----END CERTIFICATE-----