Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa
File:                     323830343a353562383a3a2f33322d313238203d3e20323637393532.roa (raw, json)
Hash identifier:          mqbU+3wkTTizYmc4x7PBiXRmhAC/dT2WnbPQhVf5qTc=
Subject key identifier:   4E:03:A8:6C:3A:73:9E:34:60:67:AF:56:6B:CC:FE:F3:61:5B:05:DA
Certificate issuer:       /CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
Certificate serial:       6D9EF035B3691E5715BBFE5D7EF1E5E2975AD1A8
Authority key identifier: 29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa
Signing time:             Wed 05 Jun 2024 13:22:47 +0000
ROA not before:           Wed 05 Jun 2024 13:17:47 +0000
ROA not after:            Wed 04 Jun 2025 13:22:47 +0000
asID:                     267952
IP address blocks:        2804:55b8::/32 maxlen: 128

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:f0:35:b3:69:1e:57:15:bb:fe:5d:7e:f1:e5:e2:97:5a:d1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
        Validity
            Not Before: Jun  5 13:17:47 2024 GMT
            Not After : Jun  4 13:22:47 2025 GMT
        Subject: CN=4E03A86C3A739E346067AF566BCCFEF3615B05DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:09:2a:f3:4d:0f:1b:d8:13:26:f9:df:ac:
                    39:bd:36:6f:24:76:80:a3:32:53:07:93:9c:90:83:
                    a4:b6:76:ad:b2:eb:1a:41:41:46:39:0c:c9:cd:52:
                    5d:79:fc:f2:11:95:b2:66:e4:75:e8:12:5f:5b:96:
                    fa:e4:69:8f:a1:75:d9:dd:f2:23:d4:e1:09:fa:16:
                    e7:f3:23:f3:4b:82:38:8c:c0:6a:5f:07:0d:29:54:
                    37:15:37:87:03:e4:fe:0c:d4:fb:64:c3:72:e3:8a:
                    0d:75:03:e2:78:13:62:e8:fb:b6:8c:b0:86:58:71:
                    f5:7d:ff:0f:35:a9:65:01:4b:82:58:ee:63:fb:00:
                    0b:e8:f4:ff:6a:0e:4e:79:47:e1:ef:46:55:f3:fd:
                    a4:c8:42:4c:f0:34:2d:f6:eb:a1:ca:e5:d2:30:67:
                    45:66:7a:e4:5e:91:37:b1:3e:1b:b0:7c:47:b9:9d:
                    c3:0c:21:2e:01:c6:f4:ab:9a:b7:f2:9a:04:91:6b:
                    a3:91:d9:12:86:d7:02:67:d7:e5:84:46:dc:6b:19:
                    c0:ee:1b:82:40:d4:13:4b:df:28:92:0d:72:0f:07:
                    8b:d6:2f:94:11:e2:ee:4a:ce:41:db:0c:69:2c:21:
                    5b:1a:fc:86:a0:fe:31:2e:e8:64:ce:c9:79:e2:fc:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:A8:6C:3A:73:9E:34:60:67:AF:56:6B:CC:FE:F3:61:5B:05:DA
            X509v3 Authority Key Identifier:
                keyid:29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:02:8b:24:bf:dc:36:51:0e:ba:9f:44:4e:b6:8f:a7:bb:d1:
         7e:d1:e9:fb:33:05:15:f9:0e:3f:a3:8a:59:70:34:72:24:2d:
         2f:37:d3:4d:e6:5d:84:56:69:8b:1b:ac:e7:a7:74:1b:ef:3c:
         dd:f0:4a:ac:05:35:8f:e2:00:90:83:3b:9d:15:26:a9:d0:cb:
         8a:2a:ec:69:8b:41:83:14:01:f8:56:e7:14:de:08:a6:8a:ea:
         51:9f:b1:ad:b6:32:e5:26:2d:a8:96:a6:f2:22:9c:cd:8c:0a:
         4d:79:8c:87:e4:e5:48:a5:31:53:af:d9:9e:49:07:8e:66:39:
         a1:71:01:eb:94:ba:b9:33:9c:27:33:d5:ac:03:3f:df:ae:23:
         87:82:3b:02:4f:ce:78:62:0c:82:d6:7b:c4:8c:9b:61:34:f1:
         61:fb:fd:5c:c2:39:1f:31:52:09:4d:5a:95:ff:c3:76:6d:45:
         61:cf:47:a0:44:81:80:7a:fd:a0:c8:a2:da:49:26:87:65:43:
         51:65:4d:0e:bc:8e:89:d3:52:74:83:0e:2f:e1:bd:2f:e4:19:
         60:99:51:4c:25:df:37:a3:76:4f:d6:7a:22:9d:d4:24:4c:a4:
         a0:ed:8b:cb:04:9f:17:f6:61:b1:a8:af:83:51:0d:88:1f:d8:
         6c:2a:27:c7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUbZ7wNbNpHlcVu/5dfvHl4pda0agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2MzQyOEU2NjU0OThDRkE5MjcwMEVERUFEN0YyNEU0
RkNEMDg5QzAeFw0yNDA2MDUxMzE3NDdaFw0yNTA2MDQxMzIyNDdaMDMxMTAvBgNV
BAMTKDRFMDNBODZDM0E3MzlFMzQ2MDY3QUY1NjZCQ0NGRUYzNjE1QjA1REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1Akq800PG9gTJvnfrDm9Nm8k
doCjMlMHk5yQg6S2dq2y6xpBQUY5DMnNUl15/PIRlbJm5HXoEl9blvrkaY+hddnd
8iPU4Qn6FufzI/NLgjiMwGpfBw0pVDcVN4cD5P4M1Ptkw3Ljig11A+J4E2Lo+7aM
sIZYcfV9/w81qWUBS4JY7mP7AAvo9P9qDk55R+HvRlXz/aTIQkzwNC3266HK5dIw
Z0VmeuRekTexPhuwfEe5ncMMIS4BxvSrmrfymgSRa6OR2RKG1wJn1+WERtxrGcDu
G4JA1BNL3yiSDXIPB4vWL5QR4u5KzkHbDGksIVsa/Iag/jEu6GTOyXni/HC7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUTgOobDpznjRgZ69Wa8z+82FbBdowHwYDVR0j
BBgwFoAUKWNCjmZUmM+pJwDt6tfyTk/NCJwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFRuV3JjdmR5Y21aNjY5aUtaRnJ1anlITGhiUHR3TjZrWjMzNHdTNFFW
TEwvMC8yOTYzNDI4RTY2NTQ5OENGQTkyNzAwRURFQUQ3RjI0RTRGQ0QwODlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NjM0MjhFNjY1NDk4Q0ZB
OTI3MDBFREVBRDdGMjRFNEZDRDA4OUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hUbldyY3ZkeWNtWjY2OWlLWkZydWp5SExoYlB0d042a1ozMzR3UzRRVkxMLzAv
MzIzODMwMzQzYTM1MzU2MjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFW4MA0GCSqGSIb3DQEBCwUAA4IBAQAGAosk
v9w2UQ66n0ROto+nu9F+0en7MwUV+Q4/o4pZcDRyJC0vN9NN5l2EVmmLG6znp3Qb
7zzd8EqsBTWP4gCQgzudFSap0MuKKuxpi0GDFAH4VucU3gimiupRn7GttjLlJi2o
lqbyIpzNjApNeYyH5OVIpTFTr9meSQeOZjmhcQHrlLq5M5wnM9WsAz/friOHgjsC
T854YgyC1nvEjJthNPFh+/1cwjkfMVIJTVqV/8N2bUVhz0egRIGAev2gyKLaSSaH
ZUNRZU0OvI6J01J0gw4v4b0v5BlgmVFMJd83o3ZP1noindQkTKSg7YvLBJ8X9mGx
qK+DUQ2IH9hsKifH
-----END CERTIFICATE-----