Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa (raw, json)
Hash identifier:          CC8khQezN7Y04MFuuxYtE9RhxGpkQCjQcy2nwUQxFbQ=
Subject key identifier:   C1:53:51:99:91:E1:97:46:F3:F6:A1:1C:20:38:BA:90:ED:04:EF:55
Certificate issuer:       /CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
Certificate serial:       2B7C99129E6EB87DFE5431370AF0D39E7BF257C4
Authority key identifier: FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa
Signing time:             Mon 04 Mar 2024 21:23:00 +0000
ROA not before:           Mon 04 Mar 2024 21:18:00 +0000
ROA not after:            Mon 03 Mar 2025 21:23:00 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/34 maxlen: 34

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7c:99:12:9e:6e:b8:7d:fe:54:31:37:0a:f0:d3:9e:7b:f2:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE9526ADBEB9739BD7732F3183CE8E47810B5303
        Validity
            Not Before: Mar  4 21:18:00 2024 GMT
            Not After : Mar  3 21:23:00 2025 GMT
        Subject: CN=C153519991E19746F3F6A11C2038BA90ED04EF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:a1:6a:75:21:52:cc:cf:f7:e6:0a:66:94:
                    c0:6c:7e:58:d5:c6:1f:64:e8:fa:20:2f:07:de:f5:
                    fd:27:4f:5d:63:fc:e4:83:6a:66:b1:4b:41:ca:ca:
                    63:d1:fe:65:80:f1:88:2b:bf:84:0c:a0:17:7a:e6:
                    ed:6e:e3:c1:c0:42:d4:c3:a0:b4:3d:96:eb:96:46:
                    c5:96:9e:47:ab:15:bc:21:03:c0:1e:ca:73:c6:75:
                    21:4c:d8:fe:ee:97:68:b7:77:83:90:7c:1f:a9:12:
                    d8:ad:5e:32:0d:e3:b6:b0:db:71:17:a0:f7:d3:24:
                    33:9d:f1:51:09:73:a1:89:ef:dc:d9:75:02:d2:56:
                    b8:f6:90:d6:47:3f:c3:a9:84:7b:fc:30:21:2b:76:
                    c2:9c:39:4b:52:52:56:e7:07:a7:f3:47:52:17:b9:
                    d6:60:47:24:65:1c:10:d9:66:98:c6:5c:4a:62:75:
                    8b:a4:9f:88:04:dd:23:7b:24:37:07:66:2d:55:6a:
                    c0:77:81:5b:2a:a6:0a:83:4a:d8:5f:70:f6:1e:67:
                    5d:1d:86:4e:e4:e3:55:03:c0:b8:3d:d0:5a:bc:0d:
                    3e:e8:c4:e0:a4:88:20:20:cb:74:08:3f:11:eb:56:
                    f5:04:07:fd:1a:42:41:43:6a:ab:7a:87:d7:c5:57:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:53:51:99:91:E1:97:46:F3:F6:A1:1C:20:38:BA:90:ED:04:EF:55
            X509v3 Authority Key Identifier:
                keyid:FE:95:26:AD:BE:B9:73:9B:D7:73:2F:31:83:CE:8E:47:81:0B:53:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9526ADBEB9739BD7732F3183CE8E47810B5303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/323830343a313132383a383030303a3a2f33342d3334203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:9e:fd:f4:84:fe:59:28:b0:e4:a0:6c:d6:50:e5:6b:02:
         36:2f:d7:d5:0c:52:9f:b1:42:33:2e:62:60:0f:0c:1d:2c:78:
         f1:c9:1a:2b:02:0d:f5:3c:5d:a7:14:68:1a:ae:d6:19:3a:95:
         11:a8:d6:33:79:cd:a3:ce:cb:ac:f3:ca:08:51:5a:0b:98:61:
         fb:9e:55:36:5b:23:75:10:b2:4e:bb:b5:8b:32:fa:6b:73:ee:
         a0:c5:35:a2:b5:e3:4d:87:f2:32:4d:95:96:22:13:49:56:ec:
         a8:69:08:ad:02:cd:dd:0f:73:fd:0a:77:27:14:07:5f:9e:52:
         7f:2d:b5:31:91:4e:78:92:3d:41:f7:57:5f:93:ca:81:53:6e:
         d4:b8:0b:70:45:a1:b1:bd:eb:91:95:d1:db:24:a9:96:d9:e2:
         18:19:88:ef:0a:f7:41:35:e0:dd:ad:21:74:9a:5a:7f:ec:30:
         fc:56:ff:5a:d5:c8:b4:d2:e4:f8:9d:16:4a:cc:de:f1:d0:52:
         d4:de:b7:d6:36:c9:08:a7:db:3b:73:94:4c:f5:0c:0d:fb:1d:
         17:a5:6f:09:50:8a:4b:04:82:e8:a1:63:d0:44:72:5d:51:ba:
         38:02:f7:2d:97:60:25:46:3f:e5:6e:f9:7a:10:12:ca:6f:9b:
         8e:61:ab:39
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUK3yZEp5uuH3+VDE3CvDTnnvyV8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU5NTI2QURCRUI5NzM5QkQ3NzMyRjMxODNDRThFNDc4
MTBCNTMwMzAeFw0yNDAzMDQyMTE4MDBaFw0yNTAzMDMyMTIzMDBaMDMxMTAvBgNV
BAMTKEMxNTM1MTk5OTFFMTk3NDZGM0Y2QTExQzIwMzhCQTkwRUQwNEVGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMqFqdSFSzM/35gpmlMBsfljV
xh9k6PogLwfe9f0nT11j/OSDamaxS0HKymPR/mWA8Ygrv4QMoBd65u1u48HAQtTD
oLQ9luuWRsWWnkerFbwhA8AeynPGdSFM2P7ul2i3d4OQfB+pEtitXjIN47aw23EX
oPfTJDOd8VEJc6GJ79zZdQLSVrj2kNZHP8OphHv8MCErdsKcOUtSUlbnB6fzR1IX
udZgRyRlHBDZZpjGXEpidYukn4gE3SN7JDcHZi1VasB3gVsqpgqDSthfcPYeZ10d
hk7k41UDwLg90Fq8DT7oxOCkiCAgy3QIPxHrVvUEB/0aQkFDaqt6h9fFV/1LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUwVNRmZHhl0bz9qEcIDi6kO0E71UwHwYDVR0j
BBgwFoAU/pUmrb65c5vXcy8xg86OR4ELUwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMC9GRTk1MjZBREJFQjk3MzlCRDc3MzJGMzE4M0NFOEU0NzgxMEI1MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFOTUyNkFEQkVCOTczOUJE
NzczMkYzMTgzQ0U4RTQ3ODEwQjUzMDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzAv
MzIzODMwMzQzYTMxMzEzMjM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM2MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEESiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAv3J799IT+WSiw5KBs1lDlawI2L9fVDFKfsUIzLmJgDwwdLHjxyRorAg31
PF2nFGgartYZOpURqNYzec2jzsus88oIUVoLmGH7nlU2WyN1ELJOu7WLMvprc+6g
xTWiteNNh/IyTZWWIhNJVuyoaQitAs3dD3P9CncnFAdfnlJ/LbUxkU54kj1B91df
k8qBU27UuAtwRaGxveuRldHbJKmW2eIYGYjvCvdBNeDdrSF0mlp/7DD8Vv9a1ci0
0uT4nRZKzN7x0FLU3rfWNskIp9s7c5RM9QwN+x0XpW8JUIpLBILooWPQRHJdUbo4
Avctl2AlRj/lbvl6EBLKb5uOYas5
-----END CERTIFICATE-----