Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3438203d3e20323635393538.roa
File:                     323830343a343036633a3a2f33322d3438203d3e20323635393538.roa (raw, json)
Hash identifier:          SFlrf6ZnF5BnFfIf7RaT95tX3Vnn6fsQXDPzXO7kweE=
Subject key identifier:   E6:CE:9A:3C:9D:67:C7:E3:8F:79:A2:AC:81:9E:88:76:04:A1:25:D2
Certificate issuer:       /CN=6FE64355FA3EBF46CC8D77CE630683D8182F55E4
Certificate serial:       727F79D53ED316ED5BA23FF7DB209984BD31338F
Authority key identifier: 6F:E6:43:55:FA:3E:BF:46:CC:8D:77:CE:63:06:83:D8:18:2F:55:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3438203d3e20323635393538.roa
Signing time:             Thu 27 Jun 2024 14:57:19 +0000
ROA not before:           Thu 27 Jun 2024 14:52:19 +0000
ROA not after:            Thu 26 Jun 2025 14:57:19 +0000
asID:                     265958
IP address blocks:        2804:406c::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7f:79:d5:3e:d3:16:ed:5b:a2:3f:f7:db:20:99:84:bd:31:33:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FE64355FA3EBF46CC8D77CE630683D8182F55E4
        Validity
            Not Before: Jun 27 14:52:19 2024 GMT
            Not After : Jun 26 14:57:19 2025 GMT
        Subject: CN=E6CE9A3C9D67C7E38F79A2AC819E887604A125D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:6e:1a:7c:89:c8:53:0e:ef:af:83:2f:f0:
                    c5:3d:2c:ad:15:6f:98:83:80:f4:59:b6:d6:bb:7d:
                    3c:41:a7:09:9b:e6:24:69:2e:f0:73:11:b6:d7:10:
                    9f:26:cd:23:0e:61:41:31:2c:92:87:a4:ce:ba:05:
                    dc:a9:7b:90:f5:5a:66:f0:70:81:2c:91:3d:08:b4:
                    8d:4b:74:51:71:dc:3b:28:87:70:f7:e6:08:1a:f4:
                    e7:35:5b:0b:d9:98:6a:37:12:97:df:c0:cf:08:fd:
                    82:e6:d0:87:c5:04:73:03:f5:e1:3b:b1:38:c5:20:
                    ec:47:fb:35:fb:50:48:13:c3:38:b0:22:f1:4a:63:
                    67:07:ad:66:9b:42:4a:67:65:30:a3:30:45:75:44:
                    9f:e2:71:16:b6:59:c9:bb:ec:00:af:07:a2:36:e0:
                    c2:63:36:12:68:85:d3:e2:c3:82:8b:3a:d1:e6:53:
                    2e:08:a1:53:ca:31:da:24:4f:7b:94:fa:38:db:e9:
                    d4:af:25:b4:5a:42:19:01:e8:ed:b2:b9:fa:cd:7b:
                    62:4a:77:e9:4f:82:eb:30:8d:6c:8f:45:ac:8a:9e:
                    8c:dd:0a:e8:95:fc:88:65:b2:83:a0:0a:a0:60:d8:
                    f3:3f:86:f2:cb:8d:a2:dc:67:88:05:8a:a2:dc:6e:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CE:9A:3C:9D:67:C7:E3:8F:79:A2:AC:81:9E:88:76:04:A1:25:D2
            X509v3 Authority Key Identifier:
                keyid:6F:E6:43:55:FA:3E:BF:46:CC:8D:77:CE:63:06:83:D8:18:2F:55:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FE64355FA3EBF46CC8D77CE630683D8182F55E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3438203d3e20323635393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:406c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:a1:8e:7e:43:6e:a1:45:f9:e3:8c:fd:1f:36:b9:ac:44:
         56:8c:c9:de:7f:82:9d:fc:44:aa:5a:e7:b4:a1:9b:de:a8:40:
         e7:f3:4a:f8:0f:61:86:f2:25:96:13:cf:92:b8:5f:31:f1:10:
         ab:81:e1:c6:de:a3:34:82:69:86:04:89:2e:8c:8b:2c:c7:ce:
         f0:69:23:0b:0a:1c:e0:07:9e:5e:f6:ca:0b:95:7e:7e:de:28:
         9d:27:20:83:7e:a1:01:46:4c:1f:e1:82:4d:d3:54:f8:ee:dc:
         0c:58:69:03:df:20:47:31:04:b3:78:e1:44:22:73:e3:41:7e:
         cb:14:21:41:49:69:6d:6c:bd:7e:30:ca:4f:c6:5c:44:48:1c:
         3b:0e:f4:f6:02:1b:35:60:b3:74:e9:5b:0d:a0:c8:5e:94:82:
         fa:be:3e:21:18:49:73:8e:90:67:9f:ac:94:68:f2:94:0d:8c:
         30:aa:e3:25:ad:6b:f2:05:88:99:6d:c6:db:fe:b0:05:03:4f:
         2c:9d:4a:ef:66:f5:10:8c:dc:2f:0c:37:d4:4c:69:93:26:e5:
         a6:0e:0f:9b:07:f0:19:28:0b:19:e7:39:75:7a:2d:d2:53:b6:
         47:5b:4a:89:8f:ad:8c:15:8b:87:b3:c1:3c:62:dc:7b:34:da:
         c8:5a:13:a8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcn951T7TFu1boj/32yCZhL0xM48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZFNjQzNTVGQTNFQkY0NkNDOEQ3N0NFNjMwNjgzRDgx
ODJGNTVFNDAeFw0yNDA2MjcxNDUyMTlaFw0yNTA2MjYxNDU3MTlaMDMxMTAvBgNV
BAMTKEU2Q0U5QTNDOUQ2N0M3RTM4Rjc5QTJBQzgxOUU4ODc2MDRBMTI1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gG4afInIUw7vr4Mv8MU9LK0V
b5iDgPRZtta7fTxBpwmb5iRpLvBzEbbXEJ8mzSMOYUExLJKHpM66Bdype5D1Wmbw
cIEskT0ItI1LdFFx3Dsoh3D35gga9Oc1WwvZmGo3EpffwM8I/YLm0IfFBHMD9eE7
sTjFIOxH+zX7UEgTwziwIvFKY2cHrWabQkpnZTCjMEV1RJ/icRa2Wcm77ACvB6I2
4MJjNhJohdPiw4KLOtHmUy4IoVPKMdokT3uU+jjb6dSvJbRaQhkB6O2yufrNe2JK
d+lPguswjWyPRayKnozdCuiV/IhlsoOgCqBg2PM/hvLLjaLcZ4gFiqLcbtZnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU5s6aPJ1nx+OPeaKsgZ6IdgShJdIwHwYDVR0j
BBgwFoAUb+ZDVfo+v0bMjXfOYwaD2BgvVeQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0Nj
dDcvMC82RkU2NDM1NUZBM0VCRjQ2Q0M4RDc3Q0U2MzA2ODNEODE4MkY1NUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRTY0MzU1RkEzRUJGNDZD
QzhENzdDRTYzMDY4M0Q4MTgyRjU1RTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtb1RuVVFVekhyQU14eDNLbUNRQWhGWnFvVkpLZThZRktURVJ5MVNDY3Q3LzAv
MzIzODMwMzQzYTM0MzAzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARAbDANBgkqhkiG9w0BAQsFAAOCAQEAyBehjn5D
bqFF+eOM/R82uaxEVozJ3n+CnfxEqlrntKGb3qhA5/NK+A9hhvIllhPPkrhfMfEQ
q4Hhxt6jNIJphgSJLoyLLMfO8GkjCwoc4AeeXvbKC5V+ft4onScgg36hAUZMH+GC
TdNU+O7cDFhpA98gRzEEs3jhRCJz40F+yxQhQUlpbWy9fjDKT8ZcREgcOw709gIb
NWCzdOlbDaDIXpSC+r4+IRhJc46QZ5+slGjylA2MMKrjJa1r8gWImW3G2/6wBQNP
LJ1K72b1EIzcLww31Expkyblpg4PmwfwGSgLGec5dXot0lO2R1tKiY+tjBWLh7PB
PGLcezTayFoTqA==
-----END CERTIFICATE-----