Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33332d3333203d3e20323733373238.roa (raw, json)
Hash identifier:          uMeQel1Ehc42hauqXBnegWMArtgxdq9LKLQj29BanRQ=
Subject key identifier:   87:D8:75:1C:A1:C4:B7:AA:58:DE:4E:CB:01:CE:B9:F1:EF:91:78:2C
Certificate issuer:       /CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
Certificate serial:       276011951661BCB4EE09176B95EF987CA3EDD241
Authority key identifier: 97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa
Signing time:             Tue 29 Oct 2024 15:26:24 +0000
ROA not before:           Tue 29 Oct 2024 15:21:24 +0000
ROA not after:            Tue 28 Oct 2025 15:26:24 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:60:11:95:16:61:bc:b4:ee:09:17:6b:95:ef:98:7c:a3:ed:d2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5
        Validity
            Not Before: Oct 29 15:21:24 2024 GMT
            Not After : Oct 28 15:26:24 2025 GMT
        Subject: CN=87D8751CA1C4B7AA58DE4ECB01CEB9F1EF91782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:02:e6:20:ee:8f:70:c4:80:b7:a5:6d:65:
                    d3:a3:2c:01:86:88:7c:f0:b4:cc:5d:36:14:a9:79:
                    ee:b8:36:d2:8d:e6:8e:92:16:ba:87:b3:60:df:15:
                    bb:02:55:09:65:17:1b:23:94:c7:5c:51:82:ae:7c:
                    7c:ee:ef:99:8e:5e:f0:92:a3:f6:fa:55:ca:3e:df:
                    89:e7:b8:18:79:56:f2:db:20:f0:f4:69:c7:4d:de:
                    a7:c8:8e:40:5f:07:c8:32:6d:e8:40:ea:8a:45:82:
                    d0:66:37:55:00:af:07:74:9e:91:73:2e:39:51:1b:
                    4c:c3:50:31:bc:8b:8d:07:79:c7:81:5b:2a:40:01:
                    1b:20:f8:e1:a8:ad:7c:ea:03:3e:ce:25:07:46:59:
                    e8:17:e6:6c:34:b0:34:1b:2d:da:ae:c2:38:e8:1b:
                    28:67:f8:3a:d8:2a:ee:79:74:ad:de:58:b7:a1:5b:
                    da:87:b1:f5:25:c5:2c:96:0c:ba:d4:f1:34:72:9a:
                    37:5a:64:76:7f:be:c3:d3:4c:81:09:de:81:9b:a5:
                    a5:95:65:dd:8f:81:33:71:bb:cc:be:1b:97:37:f1:
                    95:88:13:e4:63:33:03:d5:91:1f:78:2f:13:43:fe:
                    b7:ff:87:cd:36:e6:dd:7a:ad:a5:97:a3:84:5c:90:
                    0f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:75:1C:A1:C4:B7:AA:58:DE:4E:CB:01:CE:B9:F1:EF:91:78:2C
            X509v3 Authority Key Identifier:
                keyid:97:6D:8A:1B:E7:F7:63:99:85:F6:A8:FA:E6:D3:E9:38:76:46:F1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/976D8A1BE7F7639985F6A8FAE6D3E9387646F1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33332d3333203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:58:a4:7c:1c:98:3c:92:01:40:66:c7:2d:99:d4:09:91:4b:
         87:c8:42:9a:3b:dc:41:4b:bc:85:e8:05:a5:ba:26:b5:83:30:
         58:42:85:48:5b:ed:72:20:b6:b9:68:e6:6c:ea:01:76:67:43:
         58:1d:ea:e9:4d:f0:5f:70:e6:64:3b:0d:c3:33:da:35:d6:bf:
         74:f3:b0:57:a6:f3:0d:8d:0c:f6:4b:8d:19:19:4d:18:93:41:
         b4:ad:f8:67:12:d2:44:16:ce:6c:0e:50:16:40:df:09:90:28:
         c3:41:19:35:ba:30:b3:e3:61:11:dc:f2:68:98:05:f1:22:39:
         9b:64:d0:50:aa:c7:f2:d3:17:bf:a5:1c:00:2e:ac:ef:46:fe:
         47:d9:f2:74:c4:84:9b:61:1b:b5:3f:0c:e6:0e:6a:60:6d:f6:
         d5:96:65:01:81:17:80:48:a6:0f:73:9e:b0:a2:39:3b:9e:6a:
         da:b7:6a:86:e4:a9:9f:40:9e:a9:31:2b:b7:a9:15:79:bb:da:
         a8:3f:44:ce:16:cf:14:a0:f7:7b:33:a9:76:6d:d6:af:a0:f4:
         9f:bf:7d:2b:a2:63:8e:2a:d6:2a:70:51:11:54:84:7a:b9:83:
         16:70:b8:a6:c9:cc:5e:a3:3e:62:41:b4:8c:a8:e4:92:22:85:
         87:90:bd:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ2ARlRZhvLTuCRdrle+YfKPt0kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc2RDhBMUJFN0Y3NjM5OTg1RjZBOEZBRTZEM0U5Mzg3
NjQ2RjFBNTAeFw0yNDEwMjkxNTIxMjRaFw0yNTEwMjgxNTI2MjRaMDMxMTAvBgNV
BAMTKDg3RDg3NTFDQTFDNEI3QUE1OERFNEVDQjAxQ0VCOUYxRUY5MTc4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiQLmIO6PcMSAt6VtZdOjLAGG
iHzwtMxdNhSpee64NtKN5o6SFrqHs2DfFbsCVQllFxsjlMdcUYKufHzu75mOXvCS
o/b6Vco+34nnuBh5VvLbIPD0acdN3qfIjkBfB8gybehA6opFgtBmN1UArwd0npFz
LjlRG0zDUDG8i40HeceBWypAARsg+OGorXzqAz7OJQdGWegX5mw0sDQbLdquwjjo
Gyhn+DrYKu55dK3eWLehW9qHsfUlxSyWDLrU8TRymjdaZHZ/vsPTTIEJ3oGbpaWV
Zd2PgTNxu8y+G5c38ZWIE+RjMwPVkR94LxND/rf/h8025t16raWXo4RckA8XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUh9h1HKHEt6pY3k7LAc658e+ReCwwHwYDVR0j
BBgwFoAUl22KG+f3Y5mF9qj65tPpOHZG8aUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNnb2lWMUpvN3NDb2pqbXNuSGQ0MWlyYlhGd1FocmhoOHd2M1BVSGpR
Wm8vMC85NzZEOEExQkU3Rjc2Mzk5ODVGNkE4RkFFNkQzRTkzODc2NDZGMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NkQ4QTFCRTdGNzYzOTk4
NUY2QThGQUU2RDNFOTM4NzY0NkYxQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDZ29pVjFKbzdzQ29qam1zbkhkNDFpcmJYRndRaHJoaDh3djNQVUhqUVpvLzAv
MzIzODMwMzQzYTM4NjIzNTYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzczMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASLXAAwDQYJKoZIhvcNAQELBQADggEBAFNYpHwc
mDySAUBmxy2Z1AmRS4fIQpo73EFLvIXoBaW6JrWDMFhChUhb7XIgtrlo5mzqAXZn
Q1gd6ulN8F9w5mQ7DcMz2jXWv3TzsFem8w2NDPZLjRkZTRiTQbSt+GcS0kQWzmwO
UBZA3wmQKMNBGTW6MLPjYRHc8miYBfEiOZtk0FCqx/LTF7+lHAAurO9G/kfZ8nTE
hJthG7U/DOYOamBt9tWWZQGBF4BIpg9znrCiOTueatq3aobkqZ9AnqkxK7epFXm7
2qg/RM4WzxSg93szqXZt1q+g9J+/fSuiY44q1ipwURFUhHq5gxZwuKbJzF6jPmJB
tIyo5JIihYeQvU4=
-----END CERTIFICATE-----