Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33342d3334203d3e20323632333132.roa
File:                     323830343a333730303a3a2f33342d3334203d3e20323632333132.roa (raw, json)
Hash identifier:          8Q7xhW0NTcu+e6tqCTKhydA3l9RyOCGUiV0XyC9f/CE=
Subject key identifier:   00:41:69:A2:62:DB:9F:F8:82:91:71:23:71:B0:FC:78:BE:A1:57:C1
Certificate issuer:       /CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
Certificate serial:       7B0B0DE8713A06C6186DF2E32EECF4B5EF7B3316
Authority key identifier: 2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33342d3334203d3e20323632333132.roa
Signing time:             Fri 16 Aug 2024 16:26:26 +0000
ROA not before:           Fri 16 Aug 2024 16:21:26 +0000
ROA not after:            Fri 15 Aug 2025 16:26:26 +0000
asID:                     262312
IP address blocks:        2804:3700::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0b:0d:e8:71:3a:06:c6:18:6d:f2:e3:2e:ec:f4:b5:ef:7b:33:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D960C563AE2AE7815A5AFF54826A703C1669FD2
        Validity
            Not Before: Aug 16 16:21:26 2024 GMT
            Not After : Aug 15 16:26:26 2025 GMT
        Subject: CN=004169A262DB9FF88291712371B0FC78BEA157C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:09:7c:56:c5:1c:47:8a:c6:5c:94:a9:17:
                    ef:c1:12:07:f3:2a:10:17:65:87:fc:4a:31:54:cb:
                    25:58:fb:e4:54:b3:16:6a:20:21:41:0e:a5:c5:83:
                    15:7e:92:9a:a4:c3:af:33:b3:98:e1:2b:0e:7d:c4:
                    21:52:45:83:b8:f1:9c:f8:a1:e6:3e:0f:56:0a:93:
                    db:fd:41:18:48:40:66:55:05:58:d4:c8:a3:ed:65:
                    50:06:87:71:ce:7c:45:e8:32:58:df:83:00:5a:a2:
                    0b:63:d3:f1:ce:e4:b9:e2:23:44:a6:ce:cf:a6:1c:
                    61:aa:c0:bc:9a:2a:d4:b5:01:7b:7e:09:a6:c7:f4:
                    f5:2b:8a:40:4d:a0:e8:e2:15:c7:01:bb:d8:9d:29:
                    14:7b:ce:ba:65:c1:30:2d:ab:d3:9c:af:59:6e:1b:
                    27:fa:c9:93:89:3c:76:11:b1:79:75:83:e3:75:41:
                    7f:9e:6d:a1:e0:bd:58:76:73:18:60:8b:3b:00:77:
                    f8:12:27:e8:fe:57:cf:be:47:eb:2a:52:bc:29:c7:
                    2a:57:b9:d8:a0:f0:82:33:e5:d2:b2:64:fe:58:83:
                    f9:6b:a1:78:a4:11:01:e8:ae:f7:30:39:d3:50:b8:
                    d2:90:3e:6f:66:f0:d1:25:4e:d5:ee:25:ce:dc:07:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:41:69:A2:62:DB:9F:F8:82:91:71:23:71:B0:FC:78:BE:A1:57:C1
            X509v3 Authority Key Identifier:
                keyid:2D:96:0C:56:3A:E2:AE:78:15:A5:AF:F5:48:26:A7:03:C1:66:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/2D960C563AE2AE7815A5AFF54826A703C1669FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D960C563AE2AE7815A5AFF54826A703C1669FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/0/323830343a333730303a3a2f33342d3334203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3700::/34

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:3b:03:ee:49:43:5b:bc:87:5b:16:6a:0b:c5:9a:5a:60:
         2c:b3:53:64:52:ea:fa:e1:43:f0:a2:26:95:ba:07:60:dc:2e:
         85:e8:86:a3:1c:33:6f:73:5e:aa:d8:dd:8f:97:e6:8d:d2:d2:
         6b:0f:49:cd:e0:79:61:8d:fd:2a:2d:90:89:40:fb:25:18:32:
         6e:f3:82:0e:21:86:e6:47:14:be:b8:f6:a8:2a:89:2f:60:46:
         f7:86:b4:e1:61:0d:53:d5:19:ca:a4:40:02:ed:25:c6:30:62:
         08:b7:d0:a6:0b:6b:42:ee:90:88:45:3b:da:b6:7a:64:57:03:
         55:d2:d3:49:ff:ab:90:e8:52:c4:08:19:b3:8d:53:9c:ca:6a:
         f1:a7:71:92:12:54:89:51:d6:46:8e:ee:61:cf:05:b7:14:0b:
         34:75:6c:3c:cc:98:19:d9:b1:52:94:da:b0:e0:3d:45:cb:58:
         8e:69:68:29:c3:eb:23:b5:08:ca:77:23:27:0d:93:2c:25:1d:
         08:70:93:e4:59:9b:37:41:3c:7e:36:74:ca:c2:74:95:e2:b0:
         79:af:d4:6d:90:6c:da:38:71:94:aa:c4:03:20:cc:96:99:8d:
         3a:09:f2:08:a2:b5:f1:98:aa:34:24:e5:87:fa:f8:03:a7:7f:
         9d:be:61:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUewsN6HE6BsYYbfLjLuz0te97MxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5NjBDNTYzQUUyQUU3ODE1QTVBRkY1NDgyNkE3MDND
MTY2OUZEMjAeFw0yNDA4MTYxNjIxMjZaFw0yNTA4MTUxNjI2MjZaMDMxMTAvBgNV
BAMTKDAwNDE2OUEyNjJEQjlGRjg4MjkxNzEyMzcxQjBGQzc4QkVBMTU3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCwl8VsUcR4rGXJSpF+/BEgfz
KhAXZYf8SjFUyyVY++RUsxZqICFBDqXFgxV+kpqkw68zs5jhKw59xCFSRYO48Zz4
oeY+D1YKk9v9QRhIQGZVBVjUyKPtZVAGh3HOfEXoMljfgwBaogtj0/HO5LniI0Sm
zs+mHGGqwLyaKtS1AXt+CabH9PUrikBNoOjiFccBu9idKRR7zrplwTAtq9Ocr1lu
Gyf6yZOJPHYRsXl1g+N1QX+ebaHgvVh2cxhgizsAd/gSJ+j+V8++R+sqUrwpxypX
udig8IIz5dKyZP5Yg/lroXikEQHorvcwOdNQuNKQPm9m8NElTtXuJc7cB1d7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAEFpomLbn/iCkXEjcbD8eL6hV8EwHwYDVR0j
BBgwFoAULZYMVjrirngVpa/1SCanA8Fmn9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pUM1JkcmpEV3l1dHI0MVlLcmdHUUtHUmdFRVRrV1Y1aFhoTkhnMVlW
Q1MvMC8yRDk2MEM1NjNBRTJBRTc4MTVBNUFGRjU0ODI2QTcwM0MxNjY5RkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOTYwQzU2M0FFMkFFNzgx
NUE1QUZGNTQ4MjZBNzAzQzE2NjlGRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6VDNSZHJqRFd5dXRyNDFZS3JnR1FLR1JnRUVUa1dWNWhYaE5IZzFZVkNTLzAv
MzIzODMwMzQzYTMzMzczMDMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjMy
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQ3AAAwDQYJKoZIhvcNAQELBQADggEBAACNOwPu
SUNbvIdbFmoLxZpaYCyzU2RS6vrhQ/CiJpW6B2DcLoXohqMcM29zXqrY3Y+X5o3S
0msPSc3geWGN/SotkIlA+yUYMm7zgg4hhuZHFL649qgqiS9gRveGtOFhDVPVGcqk
QALtJcYwYgi30KYLa0LukIhFO9q2emRXA1XS00n/q5DoUsQIGbONU5zKavGncZIS
VIlR1kaO7mHPBbcUCzR1bDzMmBnZsVKU2rDgPUXLWI5paCnD6yO1CMp3IycNkywl
HQhwk+RZmzdBPH42dMrCdJXisHmv1G2QbNo4cZSqxAMgzJaZjToJ8giitfGYqjQk
5Yf6+AOnf52+YXI=
-----END CERTIFICATE-----