Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d3438203d3e20323733373134.roa
File:                     323830343a386232343a3a2f33322d3438203d3e20323733373134.roa (raw, json)
Hash identifier:          zJphJFUfa17kYCn5J3EdLWN2uMwWiQx2g9pVMaU/wm0=
Subject key identifier:   C6:C6:2D:63:01:67:E7:2C:29:61:30:E6:1C:5B:B5:CE:0A:E2:44:7D
Certificate issuer:       /CN=034C2E595CC320161758AA025C6E30E2C62D7D64
Certificate serial:       0717BDBA57BD27F9B5B3C9512CC5EDB3D741E347
Authority key identifier: 03:4C:2E:59:5C:C3:20:16:17:58:AA:02:5C:6E:30:E2:C6:2D:7D:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/034C2E595CC320161758AA025C6E30E2C62D7D64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d3438203d3e20323733373134.roa
Signing time:             Fri 13 Dec 2024 18:47:52 +0000
ROA not before:           Fri 13 Dec 2024 18:42:52 +0000
ROA not after:            Fri 12 Dec 2025 18:47:52 +0000
asID:                     273714
IP address blocks:        2804:8b24::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:17:bd:ba:57:bd:27:f9:b5:b3:c9:51:2c:c5:ed:b3:d7:41:e3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034C2E595CC320161758AA025C6E30E2C62D7D64
        Validity
            Not Before: Dec 13 18:42:52 2024 GMT
            Not After : Dec 12 18:47:52 2025 GMT
        Subject: CN=C6C62D630167E72C296130E61C5BB5CE0AE2447D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:0d:e0:4c:e2:10:e8:a7:ce:26:a3:95:48:
                    fa:8d:03:70:80:36:ef:9f:7f:8e:e1:85:f8:2f:e4:
                    2b:27:a7:0a:63:0e:f7:4f:75:ea:12:f5:bf:2a:c9:
                    f9:11:b9:33:24:ad:b0:ee:dd:fa:7c:1e:b0:f0:18:
                    b5:ca:bf:3f:80:a1:fd:54:54:c8:17:4d:b8:8f:dd:
                    45:f8:85:99:9e:3c:0a:36:49:3a:17:f4:f3:ab:5f:
                    34:bf:44:a3:e4:d6:09:ec:fd:ad:4a:6a:f9:76:85:
                    75:cf:09:87:21:cf:1b:4a:4e:68:ae:c6:38:d2:41:
                    50:e8:06:4b:5c:23:da:bf:6c:eb:d3:aa:e8:8d:70:
                    cf:a1:4b:f4:0f:15:5a:41:20:25:05:12:57:b8:00:
                    7f:e4:2b:41:c5:c7:e8:37:58:c6:16:33:71:8d:53:
                    61:cc:08:ab:06:0b:39:58:44:a1:f5:d2:90:2c:b1:
                    fd:85:40:81:e4:63:5c:77:6c:03:d8:08:bf:d0:b3:
                    7b:8b:1c:a0:30:ed:c4:9b:a9:03:f4:48:14:e7:ce:
                    91:d7:68:aa:31:7c:ed:1c:b3:95:30:cf:bd:e9:41:
                    80:84:6c:c3:48:0e:e6:a0:75:fb:98:3a:b5:e0:5a:
                    23:cb:ab:63:3c:16:a3:d9:9a:96:8b:52:05:e5:35:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C6:2D:63:01:67:E7:2C:29:61:30:E6:1C:5B:B5:CE:0A:E2:44:7D
            X509v3 Authority Key Identifier:
                keyid:03:4C:2E:59:5C:C3:20:16:17:58:AA:02:5C:6E:30:E2:C6:2D:7D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/034C2E595CC320161758AA025C6E30E2C62D7D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/034C2E595CC320161758AA025C6E30E2C62D7D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d3438203d3e20323733373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:27:c8:1c:06:c2:40:28:7a:a6:4f:cb:d6:dd:04:a6:2a:ca:
         57:fe:90:91:e9:dd:b1:f6:60:1c:b6:d3:cb:56:04:a9:6c:a3:
         14:cb:78:1d:ff:9f:63:34:6f:db:28:03:c0:bd:a8:5a:48:5b:
         8c:46:ea:17:f6:68:1a:92:cf:b5:6b:51:fb:b7:50:a5:c4:51:
         7b:6a:13:bd:c9:5f:91:a0:b1:6e:df:0d:97:01:43:ff:e1:2a:
         6e:d9:df:22:43:cd:71:bd:12:5e:fd:df:a0:1f:d5:0c:63:d9:
         75:c0:86:5b:f7:af:a5:54:92:97:b8:f6:d8:b3:8c:2b:c3:4b:
         3f:1a:51:2c:e4:11:95:06:5a:ee:e4:01:f4:49:83:b7:06:08:
         8d:46:aa:51:31:c7:31:50:88:e2:3f:44:e0:75:d5:ec:29:43:
         84:6b:b1:5f:84:62:2d:7f:7b:df:f8:aa:ef:34:6e:2d:c2:ef:
         f0:98:cd:b6:7a:99:22:ec:cb:7a:19:0a:de:8b:12:2e:22:54:
         b8:0b:66:1c:2a:04:aa:bb:42:78:84:c0:08:00:f1:68:e6:00:
         aa:c6:6b:b9:49:1e:e8:2d:bf:02:ae:ab:dc:01:30:7a:16:d4:
         64:b5:b7:fd:f5:52:31:d9:bb:0e:44:5e:54:d5:af:df:56:5f:
         93:97:c5:08
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBxe9ule9J/m1s8lRLMXts9dB40cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM0QzJFNTk1Q0MzMjAxNjE3NThBQTAyNUM2RTMwRTJD
NjJEN0Q2NDAeFw0yNDEyMTMxODQyNTJaFw0yNTEyMTIxODQ3NTJaMDMxMTAvBgNV
BAMTKEM2QzYyRDYzMDE2N0U3MkMyOTYxMzBFNjFDNUJCNUNFMEFFMjQ0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYQ3gTOIQ6KfOJqOVSPqNA3CA
Nu+ff47hhfgv5CsnpwpjDvdPdeoS9b8qyfkRuTMkrbDu3fp8HrDwGLXKvz+Aof1U
VMgXTbiP3UX4hZmePAo2SToX9POrXzS/RKPk1gns/a1Kavl2hXXPCYchzxtKTmiu
xjjSQVDoBktcI9q/bOvTquiNcM+hS/QPFVpBICUFEle4AH/kK0HFx+g3WMYWM3GN
U2HMCKsGCzlYRKH10pAssf2FQIHkY1x3bAPYCL/Qs3uLHKAw7cSbqQP0SBTnzpHX
aKoxfO0cs5Uwz73pQYCEbMNIDuagdfuYOrXgWiPLq2M8FqPZmpaLUgXlNZpLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxsYtYwFn5ywpYTDmHFu1zgriRH0wHwYDVR0j
BBgwFoAUA0wuWVzDIBYXWKoCXG4w4sYtfWQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU11U0w1aUt6NlRDZzhaQThyc3l3cFlNS2Jxd2lRUVJxWkc3b29OZ3Z4
SHAvMC8wMzRDMkU1OTVDQzMyMDE2MTc1OEFBMDI1QzZFMzBFMkM2MkQ3RDY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNEMyRTU5NUNDMzIwMTYx
NzU4QUEwMjVDNkUzMEUyQzYyRDdENjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNdVNMNWlLejZUQ2c4WkE4cnN5d3BZTUticXdpUVFScVpHN29vTmd2eEhwLzAv
MzIzODMwMzQzYTM4NjIzMjM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzczMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLJDANBgkqhkiG9w0BAQsFAAOCAQEAaCfIHAbC
QCh6pk/L1t0EpirKV/6QkendsfZgHLbTy1YEqWyjFMt4Hf+fYzRv2ygDwL2oWkhb
jEbqF/ZoGpLPtWtR+7dQpcRRe2oTvclfkaCxbt8NlwFD/+EqbtnfIkPNcb0SXv3f
oB/VDGPZdcCGW/evpVSSl7j22LOMK8NLPxpRLOQRlQZa7uQB9EmDtwYIjUaqUTHH
MVCI4j9E4HXV7ClDhGuxX4RiLX973/iq7zRuLcLv8JjNtnqZIuzLehkK3osSLiJU
uAtmHCoEqrtCeITACADxaOYAqsZruUke6C2/Aq6r3AEwehbUZLW3/fVSMdm7DkRe
VNWv31Zfk5fFCA==
-----END CERTIFICATE-----