Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa
File:                     323830343a326263343a3a2f33322d313238203d3e20323635313734.roa (raw, json)
Hash identifier:          uKUN8N52fWi7pWwyoES0cz/GlViUksNciaL/qGc51Lo=
Subject key identifier:   1C:FC:10:23:DF:B7:B6:9D:99:BB:13:1A:EB:63:91:6F:90:3D:45:68
Certificate issuer:       /CN=C072BBDD808650F694B037F47680DC8B2825E6C4
Certificate serial:       44F812B48F39EB558880EE339858704EE827A58B
Authority key identifier: C0:72:BB:DD:80:86:50:F6:94:B0:37:F4:76:80:DC:8B:28:25:E6:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C072BBDD808650F694B037F47680DC8B2825E6C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa
Signing time:             Wed 19 Jun 2024 20:56:32 +0000
ROA not before:           Wed 19 Jun 2024 20:51:32 +0000
ROA not after:            Wed 18 Jun 2025 20:56:32 +0000
asID:                     265174
IP address blocks:        2804:2bc4::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:12:b4:8f:39:eb:55:88:80:ee:33:98:58:70:4e:e8:27:a5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C072BBDD808650F694B037F47680DC8B2825E6C4
        Validity
            Not Before: Jun 19 20:51:32 2024 GMT
            Not After : Jun 18 20:56:32 2025 GMT
        Subject: CN=1CFC1023DFB7B69D99BB131AEB63916F903D4568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:54:87:13:36:c6:73:de:a1:a5:a4:d0:54:
                    bc:86:ee:3e:4b:31:e9:9b:60:58:a4:dc:fb:8d:51:
                    8b:e8:14:99:3a:b7:a9:da:4e:eb:0e:ae:32:20:03:
                    c8:2a:1a:46:69:c5:b2:b7:e5:8b:77:1c:41:2a:ba:
                    39:15:2b:db:2a:87:4e:7a:cc:52:9c:34:71:25:ff:
                    da:1f:61:0e:15:19:2d:87:9d:ea:90:b3:a6:c7:be:
                    88:90:a9:14:13:58:d3:41:71:dd:fb:5c:f1:4a:49:
                    8e:af:dc:4d:0d:ae:a0:84:2e:a0:85:73:57:02:16:
                    76:1c:81:4f:6a:5e:52:4a:11:39:b1:cf:c4:e4:9d:
                    f2:0c:0e:ec:ee:9d:eb:e6:67:ad:e6:5c:c6:e2:59:
                    0e:47:1a:5f:c4:43:98:f7:9b:56:64:17:cd:ac:31:
                    31:7e:ee:a8:40:07:91:f6:4d:9a:d7:14:7e:89:c4:
                    f9:5d:ee:6d:90:f0:f9:72:a2:27:75:74:01:b7:7a:
                    dd:7f:4d:d2:77:54:70:51:8e:a4:f1:08:37:dc:96:
                    a1:6b:17:53:b6:fe:27:ec:e9:0d:71:bf:b5:59:b4:
                    24:8c:f2:08:c6:3c:cf:26:be:32:ff:78:f7:3b:61:
                    33:4b:a3:8f:97:9f:c1:d0:75:7c:04:03:bf:69:0e:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FC:10:23:DF:B7:B6:9D:99:BB:13:1A:EB:63:91:6F:90:3D:45:68
            X509v3 Authority Key Identifier:
                keyid:C0:72:BB:DD:80:86:50:F6:94:B0:37:F4:76:80:DC:8B:28:25:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/C072BBDD808650F694B037F47680DC8B2825E6C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C072BBDD808650F694B037F47680DC8B2825E6C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/323830343a326263343a3a2f33322d313238203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:1b:be:56:7d:15:4f:f9:1d:1c:76:fd:e9:b3:83:8d:91:1f:
         1d:35:a9:89:f8:70:6a:44:68:11:1a:fe:4d:33:ff:02:a7:dc:
         11:02:4e:d6:25:69:77:50:8b:e1:9e:30:68:21:f4:f6:38:b5:
         ad:78:f9:24:9f:41:6e:44:91:1f:e4:03:8d:52:6b:2c:f5:c1:
         72:3b:a4:04:ad:bb:cf:3a:8e:6c:69:09:2c:f9:43:09:e3:46:
         e4:d8:aa:ab:89:b8:68:65:2f:26:87:76:27:ec:9a:45:66:10:
         75:e3:26:95:ac:b7:69:68:2b:f3:35:e2:f0:b4:8b:0a:c6:c0:
         b4:34:6d:42:be:e8:dc:03:09:62:02:b6:37:41:00:9d:d2:bc:
         b4:72:99:6f:88:2c:1f:f5:bc:5b:aa:ff:38:cc:7b:5a:12:08:
         95:b8:98:4d:3e:19:25:c0:fe:ae:5a:fc:4f:a2:6e:e2:6a:f8:
         c8:77:23:11:ef:cf:c8:9f:b8:04:41:9a:ef:73:a2:4c:0f:3c:
         46:74:66:d4:eb:9d:3a:4f:fc:d4:0c:68:42:7c:bd:46:7b:69:
         ca:fd:09:4d:0c:f7:3e:52:da:d4:7d:69:ec:23:82:08:ba:73:
         55:5b:03:f5:e1:04:4b:ee:f5:a9:ce:2b:bc:43:e7:ea:48:59:
         16:59:e5:de
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURPgStI8561WIgO4zmFhwTugnpYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA3MkJCREQ4MDg2NTBGNjk0QjAzN0Y0NzY4MERDOEIy
ODI1RTZDNDAeFw0yNDA2MTkyMDUxMzJaFw0yNTA2MTgyMDU2MzJaMDMxMTAvBgNV
BAMTKDFDRkMxMDIzREZCN0I2OUQ5OUJCMTMxQUVCNjM5MTZGOTAzRDQ1NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QVSHEzbGc96hpaTQVLyG7j5L
MembYFik3PuNUYvoFJk6t6naTusOrjIgA8gqGkZpxbK35Yt3HEEqujkVK9sqh056
zFKcNHEl/9ofYQ4VGS2HneqQs6bHvoiQqRQTWNNBcd37XPFKSY6v3E0NrqCELqCF
c1cCFnYcgU9qXlJKETmxz8TknfIMDuzunevmZ63mXMbiWQ5HGl/EQ5j3m1ZkF82s
MTF+7qhAB5H2TZrXFH6JxPld7m2Q8Plyoid1dAG3et1/TdJ3VHBRjqTxCDfclqFr
F1O2/ifs6Q1xv7VZtCSM8gjGPM8mvjL/ePc7YTNLo4+Xn8HQdXwEA79pDgTPAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUHPwQI9+3tp2ZuxMa62ORb5A9RWgwHwYDVR0j
BBgwFoAUwHK73YCGUPaUsDf0doDciygl5sQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmFOSnZzOFNiTVFIekRHWWloZUptWUtYRmpnV3BRZlRrZFFaMndyOFBK
VzQvMC9DMDcyQkJERDgwODY1MEY2OTRCMDM3RjQ3NjgwREM4QjI4MjVFNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwNzJCQkREODA4NjUwRjY5
NEIwMzdGNDc2ODBEQzhCMjgyNUU2QzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZhTkp2czhTYk1RSHpER1lpaGVKbVlLWEZqZ1dwUWZUa2RRWjJ3cjhQSlc0LzAv
MzIzODMwMzQzYTMyNjI2MzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzUzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCvEMA0GCSqGSIb3DQEBCwUAA4IBAQCSG75W
fRVP+R0cdv3ps4ONkR8dNamJ+HBqRGgRGv5NM/8Cp9wRAk7WJWl3UIvhnjBoIfT2
OLWtePkkn0FuRJEf5AONUmss9cFyO6QErbvPOo5saQks+UMJ40bk2KqribhoZS8m
h3Yn7JpFZhB14yaVrLdpaCvzNeLwtIsKxsC0NG1CvujcAwliArY3QQCd0ry0cplv
iCwf9bxbqv84zHtaEgiVuJhNPhklwP6uWvxPom7iavjIdyMR78/In7gEQZrvc6JM
DzxGdGbU6506T/zUDGhCfL1Ge2nK/QlNDPc+UtrUfWnsI4IIunNVWwP14QRL7vWp
ziu8Q+fqSFkWWeXe
-----END CERTIFICATE-----