Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a3a2f33322d3332203d3e203238313235.roa
File:                     323830343a313438383a3a2f33322d3332203d3e203238313235.roa (raw, json)
Hash identifier:          UWDBUHs7ewyzBNM6tzNJDYmKP6AjrI54un2NMiW2A1g=
Subject key identifier:   E4:7B:16:AE:DE:81:D5:F5:14:7D:27:D2:28:21:83:1E:CD:8F:AE:C5
Certificate issuer:       /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial:       36787CFB7E5369EA2DA6914B539DDE9E3F13D3E3
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a3a2f33322d3332203d3e203238313235.roa
Signing time:             Wed 03 Apr 2024 20:20:50 +0000
ROA not before:           Wed 03 Apr 2024 20:15:50 +0000
ROA not after:            Wed 02 Apr 2025 20:20:50 +0000
asID:                     28125
IP address blocks:        2804:1488::/32 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:78:7c:fb:7e:53:69:ea:2d:a6:91:4b:53:9d:de:9e:3f:13:d3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
        Validity
            Not Before: Apr  3 20:15:50 2024 GMT
            Not After : Apr  2 20:20:50 2025 GMT
        Subject: CN=E47B16AEDE81D5F5147D27D22821831ECD8FAEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5f:70:f0:f9:cc:61:99:bc:d6:b6:f4:a4:0e:
                    e9:e5:bc:56:cd:b4:d6:63:85:06:10:9a:0f:1c:7a:
                    6f:e9:3c:f8:f1:5c:de:c3:90:a0:02:e4:96:db:1f:
                    71:87:69:ef:e5:e3:e2:3d:1f:84:72:35:ce:9b:1b:
                    81:32:d1:0d:c8:37:20:1e:fa:78:87:b5:d2:b5:64:
                    ac:63:89:d4:6a:b8:7a:d7:7b:a3:77:c3:82:47:5a:
                    8e:3f:7a:89:25:93:ae:65:ed:39:86:42:4b:05:41:
                    0b:6d:48:8f:6f:38:ab:0a:b1:fb:1e:a1:b3:81:df:
                    7a:d3:e0:f5:91:c3:85:b6:17:2f:87:5e:01:50:30:
                    69:09:69:69:91:56:51:6c:a0:62:b5:0f:07:a5:ae:
                    36:80:fd:78:a4:07:e0:a4:93:21:c2:3c:1c:8a:0e:
                    4b:75:b1:96:a0:05:cf:16:26:31:5c:8f:e1:2b:fc:
                    d3:14:7a:fe:e9:63:61:de:ba:e9:e7:eb:4f:41:b3:
                    f7:ff:4a:e2:54:2c:c4:fd:20:7e:4d:b0:f9:45:32:
                    65:58:ac:3e:1d:29:c9:13:41:0b:b2:6b:30:e3:5f:
                    c0:4c:59:2d:70:23:f1:c7:5c:70:2e:90:1b:09:39:
                    d7:6b:77:13:c9:d4:8e:44:b1:ac:3f:a6:5c:c3:eb:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:16:AE:DE:81:D5:F5:14:7D:27:D2:28:21:83:1E:CD:8F:AE:C5
            X509v3 Authority Key Identifier:
                keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/323830343a313438383a3a2f33322d3332203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:8e:ea:be:5c:3d:31:02:33:62:a8:52:92:15:b2:21:dc:89:
         d2:59:0d:47:60:80:f2:a5:c4:0d:ac:fd:b3:65:9e:50:dd:20:
         0b:57:12:e4:ac:1e:a3:0c:9e:ae:d3:f4:70:62:52:c5:c1:49:
         5d:d3:92:7a:38:5f:98:88:cc:4a:42:ce:f9:d4:a0:37:51:76:
         fa:5f:a2:34:f1:48:12:2e:e3:a1:da:52:5e:84:ba:db:a2:a3:
         55:ea:3e:ef:f9:90:c3:6c:f5:5b:87:3d:ca:e4:fe:1b:79:22:
         4c:a6:08:01:e1:07:ea:dc:95:df:b6:7c:34:d1:59:e3:ed:a3:
         ca:2e:3e:64:f9:69:a8:dd:bd:c8:b3:33:f4:e5:4e:ed:73:c0:
         21:99:d5:a4:89:f2:2f:d9:7c:74:2a:e9:0f:a1:bc:09:94:80:
         a7:89:28:7b:03:8e:0a:e7:a3:90:f0:fe:16:ea:71:9d:0f:fc:
         ab:37:a7:49:98:08:f9:5c:4d:d6:bf:66:e7:f6:64:ec:f2:25:
         f7:25:92:1d:f2:63:82:ba:1c:1a:61:2b:8d:95:b3:f8:2e:c3:
         cd:b9:f1:97:f1:cb:25:b5:d9:48:03:1f:cc:25:35:99:38:3d:
         f2:2a:ed:bb:3f:a8:d8:ed:7e:a9:e0:40:98:60:df:b1:ea:bf:
         bf:cb:55:72
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNnh8+35TaeotppFLU53enj8T0+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNEM2N0EzQUJCQTkyRjMwOTVGOTRFMTIyOEYwNjM2
NUU2QUVFQTAeFw0yNDA0MDMyMDE1NTBaFw0yNTA0MDIyMDIwNTBaMDMxMTAvBgNV
BAMTKEU0N0IxNkFFREU4MUQ1RjUxNDdEMjdEMjI4MjE4MzFFQ0Q4RkFFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1X3Dw+cxhmbzWtvSkDunlvFbN
tNZjhQYQmg8cem/pPPjxXN7DkKAC5JbbH3GHae/l4+I9H4RyNc6bG4Ey0Q3INyAe
+niHtdK1ZKxjidRquHrXe6N3w4JHWo4/eoklk65l7TmGQksFQQttSI9vOKsKsfse
obOB33rT4PWRw4W2Fy+HXgFQMGkJaWmRVlFsoGK1DwelrjaA/XikB+CkkyHCPByK
Dkt1sZagBc8WJjFcj+Er/NMUev7pY2Heuunn609Bs/f/SuJULMT9IH5NsPlFMmVY
rD4dKckTQQuyazDjX8BMWS1wI/HHXHAukBsJOddrdxPJ1I5Esaw/plzD6789AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5HsWrt6B1fUUfSfSKCGDHs2PrsUwHwYDVR0j
BBgwFoAUy+TGejq7qS8wlflOEijwY2XmruowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMS9DQkU0QzY3QTNBQkJBOTJGMzA5NUY5NEUxMjI4RjA2MzY1RTZBRUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRTRDNjdBM0FCQkE5MkYz
MDk1Rjk0RTEyMjhGMDYzNjVFNkFFRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzEv
MzIzODMwMzQzYTMxMzQzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODMx
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFIgwDQYJKoZIhvcNAQELBQADggEBAGGO6r5cPTEC
M2KoUpIVsiHcidJZDUdggPKlxA2s/bNlnlDdIAtXEuSsHqMMnq7T9HBiUsXBSV3T
kno4X5iIzEpCzvnUoDdRdvpfojTxSBIu46HaUl6Eutuio1XqPu/5kMNs9VuHPcrk
/ht5IkymCAHhB+rcld+2fDTRWePto8ouPmT5aajdvcizM/TlTu1zwCGZ1aSJ8i/Z
fHQq6Q+hvAmUgKeJKHsDjgrno5Dw/hbqcZ0P/Ks3p0mYCPlcTda/Zuf2ZOzyJfcl
kh3yY4K6HBphK42Vs/guw8258ZfxyyW12UgDH8wlNZk4PfIq7bs/qNjtfqngQJhg
37Hqv7/LVXI=
-----END CERTIFICATE-----