Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33322d3438203d3e20323731373332.roa
File:                     323830343a383032343a3a2f33322d3438203d3e20323731373332.roa (raw, json)
Hash identifier:          da2ekDX2YSLQfmpbQ5xnsroMMgGWvahHfVkBAi/yhzU=
Subject key identifier:   AD:16:8C:65:14:C0:49:80:CC:CC:24:8D:75:B0:72:91:C2:39:84:C8
Certificate issuer:       /CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
Certificate serial:       2163C75EE263916B598B654139B9B3795C2F6AAF
Authority key identifier: 0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33322d3438203d3e20323731373332.roa
Signing time:             Wed 24 Jul 2024 21:06:47 +0000
ROA not before:           Wed 24 Jul 2024 21:01:47 +0000
ROA not after:            Wed 23 Jul 2025 21:06:47 +0000
asID:                     271732
IP address blocks:        2804:8024::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:63:c7:5e:e2:63:91:6b:59:8b:65:41:39:b9:b3:79:5c:2f:6a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D56C4932A59E1017A54773D56EC8338E3B2C8B7
        Validity
            Not Before: Jul 24 21:01:47 2024 GMT
            Not After : Jul 23 21:06:47 2025 GMT
        Subject: CN=AD168C6514C04980CCCC248D75B07291C23984C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:71:09:54:a2:1c:2b:4d:49:0b:bc:3e:d4:
                    84:ed:9b:bc:8f:e9:9c:34:bd:fa:93:0f:da:c9:5c:
                    f0:bf:1f:89:77:57:ca:6b:13:9e:8a:f2:1e:ed:4b:
                    aa:eb:4a:71:ce:4a:02:56:b4:8a:04:a3:34:85:63:
                    c5:f1:59:54:61:9f:00:ae:48:ae:da:b3:c7:bf:ed:
                    97:36:f0:29:fd:fe:ee:22:65:cc:a3:f4:87:9f:ed:
                    f9:d9:c2:db:85:e9:e8:91:40:d2:2e:30:b4:ef:c2:
                    87:95:f4:14:1d:6e:c9:79:7e:ba:36:d4:1f:0a:0b:
                    fe:ad:f5:c7:cb:8e:61:bc:9f:c9:6c:50:6c:8a:d4:
                    6d:97:39:5b:94:cc:a3:4b:9b:cd:43:6b:76:18:eb:
                    3d:50:02:4c:2f:70:84:9c:ea:12:89:e3:a5:0f:20:
                    97:81:e5:e5:16:a6:1c:84:c2:00:30:a7:f8:78:d7:
                    45:04:83:66:09:c7:83:fe:24:33:28:e7:ec:cd:39:
                    5a:4d:77:a3:40:27:96:14:ea:e5:c8:19:47:fe:d6:
                    67:8a:05:29:be:0c:1d:59:fe:b5:12:05:12:68:b9:
                    b1:ae:44:74:15:a0:76:fe:a4:f6:26:e4:7b:62:b4:
                    58:a7:bb:f4:ae:dc:f0:7f:4d:6f:76:51:81:03:7a:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:16:8C:65:14:C0:49:80:CC:CC:24:8D:75:B0:72:91:C2:39:84:C8
            X509v3 Authority Key Identifier:
                keyid:0D:56:C4:93:2A:59:E1:01:7A:54:77:3D:56:EC:83:38:E3:B2:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D56C4932A59E1017A54773D56EC8338E3B2C8B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYkFftcTxsChMiY9nsHTDcAyxmrKUkne5iz738sy2tRa/0/323830343a383032343a3a2f33322d3438203d3e20323731373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8024::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:91:58:26:d3:d7:4f:48:64:cc:6e:45:a9:8b:b7:7a:17:
         e5:1f:6c:24:e4:94:85:50:39:bb:53:d3:61:c5:38:3c:06:09:
         45:cc:5b:de:34:95:dd:16:4d:1c:cf:13:25:30:01:ee:5f:bb:
         e6:bf:13:82:7c:ce:bc:0a:2b:2d:65:63:7b:d0:2c:d5:1f:a1:
         fa:aa:e6:57:5c:8f:95:11:e0:f1:9e:b3:72:d6:f0:56:57:a4:
         fd:e2:73:ce:10:3a:c8:36:75:10:06:26:31:02:41:19:96:30:
         6e:e4:ca:71:34:9b:b1:50:db:96:5c:72:c2:75:ab:e3:93:f8:
         76:8a:66:82:29:7f:9b:01:ce:c4:e7:c4:c7:9a:5b:18:e7:4a:
         3d:6d:f1:da:86:a5:b1:60:64:c3:5d:44:41:31:df:7d:a6:1f:
         2d:8d:c9:05:c9:86:6d:62:33:63:6d:9c:c8:b1:b0:b6:ab:93:
         4e:d4:c0:0f:b2:e3:08:ce:7a:2d:69:e7:d8:da:70:1f:f4:db:
         60:9b:f7:8a:d5:6c:cc:d4:12:0b:ff:3b:de:0e:d2:83:b4:2d:
         f7:9a:52:99:7d:ae:43:14:22:53:0b:74:14:7e:2a:c1:24:e0:
         d5:ca:70:8a:66:45:d1:5b:43:4b:c2:a4:51:16:e2:31:88:0a:
         b8:28:04:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIWPHXuJjkWtZi2VBObmzeVwvaq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1NkM0OTMyQTU5RTEwMTdBNTQ3NzNENTZFQzgzMzhF
M0IyQzhCNzAeFw0yNDA3MjQyMTAxNDdaFw0yNTA3MjMyMTA2NDdaMDMxMTAvBgNV
BAMTKEFEMTY4QzY1MTRDMDQ5ODBDQ0NDMjQ4RDc1QjA3MjkxQzIzOTg0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqnEJVKIcK01JC7w+1ITtm7yP
6Zw0vfqTD9rJXPC/H4l3V8prE56K8h7tS6rrSnHOSgJWtIoEozSFY8XxWVRhnwCu
SK7as8e/7Zc28Cn9/u4iZcyj9Ief7fnZwtuF6eiRQNIuMLTvwoeV9BQdbsl5fro2
1B8KC/6t9cfLjmG8n8lsUGyK1G2XOVuUzKNLm81Da3YY6z1QAkwvcISc6hKJ46UP
IJeB5eUWphyEwgAwp/h410UEg2YJx4P+JDMo5+zNOVpNd6NAJ5YU6uXIGUf+1meK
BSm+DB1Z/rUSBRJoubGuRHQVoHb+pPYm5HtitFinu/Su3PB/TW92UYEDerVZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrRaMZRTASYDMzCSNdbBykcI5hMgwHwYDVR0j
BBgwFoAUDVbEkypZ4QF6VHc9VuyDOOOyyLcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRllrRmZ0Y1R4c0NoTWlZOW5zSFREY0F5eG1yS1VrbmU1aXo3MzhzeTJ0
UmEvMC8wRDU2QzQ5MzJBNTlFMTAxN0E1NDc3M0Q1NkVDODMzOEUzQjJDOEI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTZDNDkzMkE1OUUxMDE3
QTU0NzczRDU2RUM4MzM4RTNCMkM4QjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZZa0ZmdGNUeHNDaE1pWTluc0hURGNBeXhtcktVa25lNWl6NzM4c3kydFJhLzAv
MzIzODMwMzQzYTM4MzAzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzczMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASAJDANBgkqhkiG9w0BAQsFAAOCAQEABryRWCbT
109IZMxuRamLt3oX5R9sJOSUhVA5u1PTYcU4PAYJRcxb3jSV3RZNHM8TJTAB7l+7
5r8TgnzOvAorLWVje9As1R+h+qrmV1yPlRHg8Z6zctbwVlek/eJzzhA6yDZ1EAYm
MQJBGZYwbuTKcTSbsVDbllxywnWr45P4dopmgil/mwHOxOfEx5pbGOdKPW3x2oal
sWBkw11EQTHffaYfLY3JBcmGbWIzY22cyLGwtquTTtTAD7LjCM56LWnn2NpwH/Tb
YJv3itVszNQSC/873g7Sg7Qt95pSmX2uQxQiUwt0FH4qwSTg1cpwimZF0VtDS8Kk
URbiMYgKuCgEQA==
-----END CERTIFICATE-----