Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa
File:                     323830343a323166383a3a2f33322d3438203d3e20323632323732.roa (raw, json)
Hash identifier:          s9nTgHqYUDU4S/M+NJ06OfEtelWg99Cgg5gII2cXhwg=
Subject key identifier:   6A:99:D3:C2:47:52:74:AD:EC:2A:EB:65:D0:C9:13:13:08:9E:94:D2
Certificate issuer:       /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial:       7456FEBDBBCCD8474C6B1ED3FC3BBCAD9F5A8667
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa
Signing time:             Wed 12 Jun 2024 13:15:28 +0000
ROA not before:           Wed 12 Jun 2024 13:10:28 +0000
ROA not after:            Wed 11 Jun 2025 13:15:28 +0000
asID:                     262272
IP address blocks:        2804:21f8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:56:fe:bd:bb:cc:d8:47:4c:6b:1e:d3:fc:3b:bc:ad:9f:5a:86:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
        Validity
            Not Before: Jun 12 13:10:28 2024 GMT
            Not After : Jun 11 13:15:28 2025 GMT
        Subject: CN=6A99D3C2475274ADEC2AEB65D0C91313089E94D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:32:f5:2e:5e:55:66:bf:8f:a3:ba:4e:c0:
                    f0:dc:93:8a:38:cd:44:c3:b0:a0:31:8d:56:6d:36:
                    a6:9d:ce:d7:91:ca:79:f4:f7:9d:89:21:2f:fd:b9:
                    06:a5:78:d8:da:7a:f1:d7:30:91:4e:a5:52:23:53:
                    b5:03:87:07:6c:24:4f:d0:b1:e5:c0:47:0c:ba:01:
                    55:b0:eb:31:46:74:d0:38:f7:9f:d8:ca:76:b0:0f:
                    3b:34:d4:a4:49:cf:23:c0:e7:6d:55:63:18:e5:0a:
                    54:50:de:4e:94:0e:b4:fd:36:31:ec:ef:38:a6:af:
                    55:78:f1:1b:4e:f1:d0:ae:8c:71:7e:38:ed:81:ba:
                    c0:a1:fd:94:f2:56:2b:ae:77:43:7f:31:fc:d0:e2:
                    ed:cc:93:01:fa:b5:10:b4:12:33:28:1f:e2:94:ee:
                    53:4f:b2:53:be:1e:61:df:58:74:16:9f:c0:6e:4c:
                    ff:9f:43:52:ba:a2:34:b9:b7:dd:ad:e7:da:16:07:
                    86:ad:ea:99:b3:06:37:12:b0:16:d4:b9:e8:9e:bb:
                    98:0d:31:35:dd:55:50:43:45:f0:88:3e:b7:93:0b:
                    ac:2c:a2:e0:b4:ce:a1:14:79:87:53:a7:f0:25:07:
                    68:20:68:b5:55:e0:1e:ef:98:5b:e2:f7:77:4b:d5:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:99:D3:C2:47:52:74:AD:EC:2A:EB:65:D0:C9:13:13:08:9E:94:D2
            X509v3 Authority Key Identifier:
                keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/323830343a323166383a3a2f33322d3438203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:02:3d:a1:89:35:46:58:05:8c:25:22:92:b2:19:1c:5a:af:
         d5:79:18:3b:63:02:f8:53:02:27:7e:69:51:8d:21:39:83:cf:
         25:ef:d3:03:96:50:bd:36:6b:a0:e9:da:66:05:ad:66:e9:9c:
         5a:27:7e:4b:fa:a0:00:15:14:86:7e:ed:bb:e3:94:b7:b3:65:
         b4:8d:e3:dd:a8:32:b7:f1:5c:a0:b0:ef:a1:fe:4c:3a:3a:3e:
         7e:ad:88:6d:63:e1:46:c7:0b:f3:ec:ce:6c:17:47:41:13:3b:
         c5:fe:22:a7:ec:3a:48:9c:18:68:b0:f2:be:d6:98:07:09:c6:
         50:a1:6c:2d:7b:79:8d:ea:65:c5:a3:e3:4e:71:d3:67:1b:31:
         df:aa:32:6c:45:61:04:46:98:ef:08:64:a1:c3:27:d6:36:d4:
         cb:4b:33:29:e2:77:e1:83:10:90:5e:7d:81:53:e5:39:b8:9e:
         9c:4d:a8:07:91:6f:9e:74:fe:c3:d6:11:d5:79:b1:09:bd:ec:
         92:66:2e:ca:e4:68:cb:39:91:ff:ff:82:dd:48:a7:e1:9c:57:
         a6:65:4d:ba:f7:ac:85:7c:54:b3:68:63:30:30:bc:08:cb:0a:
         c4:95:bd:db:69:b2:4e:f4:c4:7e:35:34:49:37:00:af:1d:29:
         96:0f:34:d0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUdFb+vbvM2EdMax7T/Du8rZ9ahmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVCNTY0MEU1RTUyNzg3OEZDOTQ2QzdFNDA0REVFRjBG
OTJDQjUzRjAeFw0yNDA2MTIxMzEwMjhaFw0yNTA2MTExMzE1MjhaMDMxMTAvBgNV
BAMTKDZBOTlEM0MyNDc1Mjc0QURFQzJBRUI2NUQwQzkxMzEzMDg5RTk0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTTL1Ll5VZr+Po7pOwPDck4o4
zUTDsKAxjVZtNqadzteRynn0952JIS/9uQaleNjaevHXMJFOpVIjU7UDhwdsJE/Q
seXARwy6AVWw6zFGdNA495/YynawDzs01KRJzyPA521VYxjlClRQ3k6UDrT9NjHs
7zimr1V48RtO8dCujHF+OO2BusCh/ZTyViuud0N/MfzQ4u3MkwH6tRC0EjMoH+KU
7lNPslO+HmHfWHQWn8BuTP+fQ1K6ojS5t92t59oWB4at6pmzBjcSsBbUueieu5gN
MTXdVVBDRfCIPreTC6wsouC0zqEUeYdTp/AlB2ggaLVV4B7vmFvi93dL1SRHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUapnTwkdSdK3sKutl0MkTEwielNIwHwYDVR0j
BBgwFoAUjrVkDl5SeHj8lGx+QE3u8PkstT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMS84RUI1NjQwRTVFNTI3ODc4RkM5NDZDN0U0MDRERUVGMEY5MkNCNTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQjU2NDBFNUU1Mjc4NzhG
Qzk0NkM3RTQwNERFRUYwRjkyQ0I1M0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzEv
MzIzODMwMzQzYTMyMzE2NjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQh+DANBgkqhkiG9w0BAQsFAAOCAQEAWQI9oYk1
RlgFjCUikrIZHFqv1XkYO2MC+FMCJ35pUY0hOYPPJe/TA5ZQvTZroOnaZgWtZumc
Wid+S/qgABUUhn7tu+OUt7NltI3j3agyt/FcoLDvof5MOjo+fq2IbWPhRscL8+zO
bBdHQRM7xf4ip+w6SJwYaLDyvtaYBwnGUKFsLXt5jeplxaPjTnHTZxsx36oybEVh
BEaY7whkocMn1jbUy0szKeJ34YMQkF59gVPlObienE2oB5FvnnT+w9YR1XmxCb3s
kmYuyuRoyzmR//+C3Uin4ZxXpmVNuveshXxUs2hjMDC8CMsKxJW922myTvTEfjU0
STcArx0plg800A==
-----END CERTIFICATE-----