Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3438203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d3438203d3e20323636303231.roa (raw, json)
Hash identifier:          ZDSPI8SHxwv7BgVCSiGD1DfM6Izb9lwSiHXYpdivbjM=
Subject key identifier:   AE:76:E3:34:B9:D6:1B:57:A1:EC:41:7E:05:E6:F9:79:3C:E1:FB:DF
Certificate issuer:       /CN=5B55987CAB553F8791F67E9C54E7C4A80B26F962
Certificate serial:       3974AC21E4BBD0E667AE986DA844037334F42E0C
Authority key identifier: 5B:55:98:7C:AB:55:3F:87:91:F6:7E:9C:54:E7:C4:A8:0B:26:F9:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B55987CAB553F8791F67E9C54E7C4A80B26F962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3438203d3e20323636303231.roa
Signing time:             Tue 19 Nov 2024 14:26:10 +0000
ROA not before:           Tue 19 Nov 2024 14:21:10 +0000
ROA not after:            Tue 18 Nov 2025 14:26:10 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:74:ac:21:e4:bb:d0:e6:67:ae:98:6d:a8:44:03:73:34:f4:2e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B55987CAB553F8791F67E9C54E7C4A80B26F962
        Validity
            Not Before: Nov 19 14:21:10 2024 GMT
            Not After : Nov 18 14:26:10 2025 GMT
        Subject: CN=AE76E334B9D61B57A1EC417E05E6F9793CE1FBDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:d4:13:30:c9:c8:ca:ed:bd:a5:7d:38:20:
                    78:30:f3:90:94:3b:bc:1e:fd:75:01:6d:88:6c:c3:
                    b9:48:6a:38:16:b0:fa:62:b2:04:e3:41:fe:fc:07:
                    9a:25:77:30:d1:17:90:6c:d2:fa:61:73:14:a4:3b:
                    d3:8c:b3:1f:32:a9:cc:cb:3c:dd:69:e5:f3:28:57:
                    9a:cc:3d:0d:7f:ed:ce:95:21:01:b7:b8:c0:8d:15:
                    b7:aa:f1:ae:da:bd:be:6f:69:2b:0c:41:97:0c:f0:
                    be:62:21:6f:28:2b:a0:9c:60:69:ab:fc:30:8e:6f:
                    e6:f4:b9:f1:79:7b:09:79:18:b0:4f:84:31:11:23:
                    59:2a:53:e7:a4:44:90:4e:65:f8:9f:ad:84:9f:fa:
                    55:06:87:78:fb:ca:73:39:81:0a:7a:62:21:89:f1:
                    e6:f1:53:97:0e:95:0f:22:10:da:80:c1:90:64:c4:
                    2e:98:28:95:34:0d:10:76:da:bc:c4:cb:e1:9c:f5:
                    03:df:ad:cf:8b:12:10:d7:54:52:52:2d:11:7d:87:
                    79:1b:43:7f:7f:6c:b7:06:88:ce:a5:d5:7b:49:01:
                    73:9b:cb:a7:78:06:4d:c7:18:78:89:20:8a:38:1f:
                    b7:9b:da:40:13:30:69:0f:39:7c:e4:a7:ab:b8:65:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:76:E3:34:B9:D6:1B:57:A1:EC:41:7E:05:E6:F9:79:3C:E1:FB:DF
            X509v3 Authority Key Identifier:
                keyid:5B:55:98:7C:AB:55:3F:87:91:F6:7E:9C:54:E7:C4:A8:0B:26:F9:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/5B55987CAB553F8791F67E9C54E7C4A80B26F962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B55987CAB553F8791F67E9C54E7C4A80B26F962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d3438203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:76:c8:75:0b:47:cc:b0:78:ec:c1:12:09:05:91:76:aa:
         b4:f4:30:16:e7:7b:2a:1e:5b:a1:80:bd:b4:d6:3b:22:12:4f:
         55:42:23:fe:71:a0:a8:18:ed:56:a2:2e:32:05:38:68:d5:30:
         70:41:2d:1f:4e:4d:26:38:8b:cc:9f:46:5d:e5:29:b2:44:e0:
         f5:24:17:3e:f4:f4:5a:b7:5d:cf:bf:07:c1:4b:2c:2e:f4:1a:
         d4:b6:19:e9:c1:17:07:25:65:76:d3:e0:52:83:b0:a7:60:a3:
         4c:68:04:c2:84:05:15:15:84:e2:01:05:c3:b4:69:99:c4:1a:
         3c:b9:90:88:95:5b:27:b7:38:4c:83:7d:50:f3:8c:71:ba:f4:
         34:59:85:f2:14:85:e1:1d:ab:cf:4b:31:bc:5e:9b:1f:8e:14:
         72:da:60:ae:e6:f5:d7:40:bd:8c:20:46:ad:7e:03:70:5c:a0:
         ac:af:05:70:b4:62:ed:90:35:43:96:2c:ad:4c:0e:ae:b9:d5:
         13:24:bf:c5:5d:92:7e:ee:b5:3f:f1:b7:b2:b3:b3:89:32:f3:
         7e:31:3c:b8:3e:03:42:90:dc:3d:e4:da:96:0c:c6:e8:99:4b:
         57:09:98:35:fe:99:9f:a0:97:ad:90:b8:ca:53:30:4c:fa:67:
         c8:65:14:6c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOXSsIeS70OZnrphtqEQDczT0LgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1NTk4N0NBQjU1M0Y4NzkxRjY3RTlDNTRFN0M0QTgw
QjI2Rjk2MjAeFw0yNDExMTkxNDIxMTBaFw0yNTExMTgxNDI2MTBaMDMxMTAvBgNV
BAMTKEFFNzZFMzM0QjlENjFCNTdBMUVDNDE3RTA1RTZGOTc5M0NFMUZCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XdQTMMnIyu29pX04IHgw85CU
O7we/XUBbYhsw7lIajgWsPpisgTjQf78B5oldzDRF5Bs0vphcxSkO9OMsx8yqczL
PN1p5fMoV5rMPQ1/7c6VIQG3uMCNFbeq8a7avb5vaSsMQZcM8L5iIW8oK6CcYGmr
/DCOb+b0ufF5ewl5GLBPhDERI1kqU+ekRJBOZfifrYSf+lUGh3j7ynM5gQp6YiGJ
8ebxU5cOlQ8iENqAwZBkxC6YKJU0DRB22rzEy+Gc9QPfrc+LEhDXVFJSLRF9h3kb
Q39/bLcGiM6l1XtJAXOby6d4Bk3HGHiJIIo4H7eb2kATMGkPOXzkp6u4Zf2VAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrnbjNLnWG1eh7EF+Beb5eTzh+98wHwYDVR0j
BBgwFoAUW1WYfKtVP4eR9n6cVOfEqAsm+WIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC81QjU1OTg3Q0FCNTUzRjg3OTFGNjdFOUM1NEU3QzRBODBCMjZGOTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCNTU5ODdDQUI1NTNGODc5
MUY2N0U5QzU0RTdDNEE4MEIyNkY5NjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBQ1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAv
MzIzODMwMzQzYTMzMzkzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzAzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ5QDANBgkqhkiG9w0BAQsFAAOCAQEAggx2yHUL
R8yweOzBEgkFkXaqtPQwFud7Kh5boYC9tNY7IhJPVUIj/nGgqBjtVqIuMgU4aNUw
cEEtH05NJjiLzJ9GXeUpskTg9SQXPvT0Wrddz78HwUssLvQa1LYZ6cEXByVldtPg
UoOwp2CjTGgEwoQFFRWE4gEFw7RpmcQaPLmQiJVbJ7c4TIN9UPOMcbr0NFmF8hSF
4R2rz0sxvF6bH44Uctpgrub110C9jCBGrX4DcFygrK8FcLRi7ZA1Q5YsrUwOrrnV
EyS/xV2Sfu61P/G3srOziTLzfjE8uD4DQpDcPeTalgzG6JlLVwmYNf6Zn6CXrZC4
ylMwTPpnyGUUbA==
-----END CERTIFICATE-----