Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33332d3333203d3e20323734373236.roa
File:                     323830343a393261383a383030303a3a2f33332d3333203d3e20323734373236.roa (raw, json)
Hash identifier:          bpUBUkZD9l5W8qZR7ECU3gdolo5JY/vv+aDzXp6cuRU=
Subject key identifier:   3A:E2:46:54:CC:30:C5:FF:8C:CC:66:21:E6:60:B0:99:DA:55:19:36
Certificate issuer:       /CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
Certificate serial:       0E086F9A064DAF9091BB84D86AD995B92A38C6AF
Authority key identifier: D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33332d3333203d3e20323734373236.roa
Signing time:             Sat 12 Apr 2025 00:28:10 +0000
ROA not before:           Sat 12 Apr 2025 00:23:10 +0000
ROA not after:            Sat 11 Apr 2026 00:28:10 +0000
asID:                     274726
IP address blocks:        2804:92a8:8000::/33 maxlen: 33

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:08:6f:9a:06:4d:af:90:91:bb:84:d8:6a:d9:95:b9:2a:38:c6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4
        Validity
            Not Before: Apr 12 00:23:10 2025 GMT
            Not After : Apr 11 00:28:10 2026 GMT
        Subject: CN=3AE24654CC30C5FF8CCC6621E660B099DA551936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:44:fb:5a:36:63:0d:d9:28:64:d4:8c:96:
                    94:8c:72:4b:02:17:21:d5:34:64:9e:d3:72:20:d1:
                    94:99:e3:76:42:46:bc:42:33:09:4e:5d:5f:4c:04:
                    bc:54:8e:e7:12:2c:ba:16:85:09:d8:3f:d5:0e:19:
                    e3:c1:15:2d:d4:b6:4c:1f:b7:5d:05:28:b1:8f:3c:
                    30:b1:77:6b:2a:0e:a7:47:0c:53:ff:c8:50:26:e6:
                    de:8c:a3:51:8d:15:ea:d0:b7:d2:b1:dc:58:83:9b:
                    4c:34:05:a1:3b:6d:1b:93:0d:2d:0a:93:6e:81:ed:
                    cf:2f:d2:a3:05:13:9e:9a:0e:6d:ae:ed:92:49:a7:
                    d0:78:fb:a5:15:48:4c:4f:97:1b:0f:b7:68:d2:d3:
                    bc:b9:c7:d8:b6:35:9f:bb:aa:3a:8b:d9:78:f6:4a:
                    b5:d6:89:37:46:67:cb:50:a8:fc:39:2b:4f:39:9a:
                    17:8e:58:9b:12:0b:93:4f:f6:2e:59:24:45:13:a2:
                    d4:7a:d5:e2:8e:04:60:54:09:3f:d0:6c:b6:1f:31:
                    4b:ba:9a:4a:d7:8f:19:f2:bb:31:70:bf:13:83:16:
                    a1:94:d7:ce:82:25:4b:a7:39:02:6f:77:8c:a6:09:
                    c1:bf:f8:4f:a4:56:96:3f:a1:cb:a7:7a:7f:18:4a:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E2:46:54:CC:30:C5:FF:8C:CC:66:21:E6:60:B0:99:DA:55:19:36
            X509v3 Authority Key Identifier:
                keyid:D7:34:52:3B:6D:B0:15:7A:0F:D0:DC:15:AD:EB:50:B4:DA:56:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D734523B6DB0157A0FD0DC15ADEB50B4DA5673D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33332d3333203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:db:4a:3d:d8:52:ab:c2:ce:a4:10:e0:04:f7:80:63:f7:7d:
         88:d6:f6:64:f3:13:80:fe:2d:69:fb:ec:2c:ba:8d:43:63:eb:
         b0:6c:8e:80:72:b6:72:ed:92:28:f4:98:9f:cf:d1:f0:77:1d:
         7a:d7:6f:99:84:d6:03:70:8c:9c:ac:4c:81:79:f7:61:a5:fb:
         e7:64:9c:7f:45:2a:a3:53:9c:b4:7e:f9:7a:c2:03:6c:a8:59:
         40:4f:71:23:f4:6e:1d:b5:52:e8:69:63:82:87:f3:24:30:de:
         94:ea:5e:2b:52:3d:5a:4c:b5:cc:5e:af:da:95:8a:18:79:ba:
         8e:51:4b:8a:e3:5c:75:3a:df:48:fb:72:dd:bd:ef:5d:cb:af:
         f8:40:87:82:74:1d:e8:cb:5e:f8:2e:2e:24:91:16:88:2c:48:
         81:74:23:8d:1a:7f:43:09:b3:2a:ce:49:d0:f5:36:d3:e0:c2:
         c1:39:51:f2:c3:45:85:db:2a:36:55:f3:59:70:3e:9d:9c:c2:
         8f:9a:fe:87:a4:1a:a1:d2:a1:d7:1a:3d:8d:a8:00:f9:7d:35:
         3f:20:13:61:fa:2b:d7:45:95:44:71:38:60:cc:fb:63:49:f0:
         38:2d:c7:34:db:4d:c8:7f:ea:37:6c:08:9a:ef:3b:d1:d9:16:
         b3:ca:5f:f6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDghvmgZNr5CRu4TYatmVuSo4xq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczNDUyM0I2REIwMTU3QTBGRDBEQzE1QURFQjUwQjRE
QTU2NzNENDAeFw0yNTA0MTIwMDIzMTBaFw0yNjA0MTEwMDI4MTBaMDMxMTAvBgNV
BAMTKDNBRTI0NjU0Q0MzMEM1RkY4Q0NDNjYyMUU2NjBCMDk5REE1NTE5MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDowET7WjZjDdkoZNSMlpSMcksC
FyHVNGSe03Ig0ZSZ43ZCRrxCMwlOXV9MBLxUjucSLLoWhQnYP9UOGePBFS3Utkwf
t10FKLGPPDCxd2sqDqdHDFP/yFAm5t6Mo1GNFerQt9Kx3FiDm0w0BaE7bRuTDS0K
k26B7c8v0qMFE56aDm2u7ZJJp9B4+6UVSExPlxsPt2jS07y5x9i2NZ+7qjqL2Xj2
SrXWiTdGZ8tQqPw5K085mheOWJsSC5NP9i5ZJEUTotR61eKOBGBUCT/QbLYfMUu6
mkrXjxnyuzFwvxODFqGU186CJUunOQJvd4ymCcG/+E+kVpY/ocunen8YSuj7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOuJGVMwwxf+MzGYh5mCwmdpVGTYwHwYDVR0j
BBgwFoAU1zRSO22wFXoP0NwVretQtNpWc9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9ENzM0NTIzQjZEQjAxNTdBMEZEMERDMTVBREVCNTBCNERBNTY3M0Q0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MzQ1MjNCNkRCMDE1N0Ew
RkQwREMxNUFERUI1MEI0REE1NjczRDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEkqiAMA0GCSqGSIb3DQEBCwUA
A4IBAQBj20o92FKrws6kEOAE94Bj932I1vZk8xOA/i1p++wsuo1DY+uwbI6AcrZy
7ZIo9Jifz9Hwdx1612+ZhNYDcIycrEyBefdhpfvnZJx/RSqjU5y0fvl6wgNsqFlA
T3Ej9G4dtVLoaWOCh/MkMN6U6l4rUj1aTLXMXq/alYoYebqOUUuK41x1Ot9I+3Ld
ve9dy6/4QIeCdB3oy174Li4kkRaILEiBdCONGn9DCbMqzknQ9TbT4MLBOVHyw0WF
2yo2VfNZcD6dnMKPmv6HpBqh0qHXGj2NqAD5fTU/IBNh+ivXRZVEcThgzPtjSfA4
Lcc0203If+o3bAia7zvR2Razyl/2
-----END CERTIFICATE-----