Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa
File:                     34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (raw, json)
Hash identifier:          vabH4tEBAklZLkLb840RbxL8BsBjreD9xYcIrE7mMG4=
Subject key identifier:   06:44:31:C4:6B:58:F0:D9:6A:7E:1C:42:96:64:A8:ED:C5:E1:EA:21
Certificate issuer:       /CN=AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4
Certificate serial:       76FFB45304CBDDF63973D2FA9B3EF6D067D462C7
Authority key identifier: AE:76:CC:DB:CB:82:D1:7A:64:36:F8:6B:0C:FF:6E:7E:15:45:73:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa
Signing time:             Sat 19 Aug 2023 14:18:09 +0000
ROA not before:           Sat 19 Aug 2023 14:13:09 +0000
ROA not after:            Sat 17 Aug 2024 14:18:09 +0000
asID:                     267077
IP address blocks:        45.228.104.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ff:b4:53:04:cb:dd:f6:39:73:d2:fa:9b:3e:f6:d0:67:d4:62:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4
        Validity
            Not Before: Aug 19 14:13:09 2023 GMT
            Not After : Aug 17 14:18:09 2024 GMT
        Subject: CN=064431C46B58F0D96A7E1C429664A8EDC5E1EA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:dc:f5:2b:2e:32:0a:a0:6e:b6:bf:a2:e6:
                    d3:f0:69:78:8b:59:6c:60:b2:57:99:45:6f:63:60:
                    81:a9:e2:f5:7a:be:09:b4:91:fb:7d:b2:a3:82:ac:
                    b6:06:85:07:cf:f6:64:66:08:89:3e:cf:c4:f8:2e:
                    63:75:7b:aa:1d:c2:25:21:5f:ae:4a:1f:32:58:8f:
                    92:64:12:b0:58:1c:68:78:27:c8:6b:df:46:b9:4e:
                    fc:b6:ae:9a:b7:b9:60:00:e7:83:52:c9:02:12:13:
                    c2:41:4a:1c:ed:5c:95:1a:b1:08:c9:21:40:fe:8f:
                    6b:4d:69:e5:44:08:58:dc:39:c9:ff:41:a6:fc:81:
                    bd:9e:84:f9:c3:c5:e7:12:3e:19:5c:d8:1a:8e:fd:
                    04:40:54:f1:4e:23:15:59:d6:fa:ca:87:33:fc:e2:
                    b3:9b:bb:42:2e:8a:17:83:58:c7:e1:3f:2f:38:9d:
                    e4:32:89:d6:f7:a3:29:92:7d:97:6b:12:bc:d6:10:
                    c0:11:08:06:50:42:22:bc:c3:85:cc:72:0b:8c:39:
                    86:a9:82:40:72:e7:fa:90:0a:fa:88:65:e0:27:b3:
                    ea:de:97:16:2a:9c:8f:29:1d:79:af:ad:bd:0e:b0:
                    08:95:2a:9b:d5:db:c8:e4:0c:d0:7f:1c:11:60:21:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:44:31:C4:6B:58:F0:D9:6A:7E:1C:42:96:64:A8:ED:C5:E1:EA:21
            X509v3 Authority Key Identifier:
                keyid:AE:76:CC:DB:CB:82:D1:7A:64:36:F8:6B:0C:FF:6E:7E:15:45:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE76CCDBCB82D17A6436F86B0CFF6E7E154573D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:3c:4e:3d:a4:b7:ff:65:80:a0:69:24:0a:c3:4d:ff:a7:
         f9:ce:1c:f6:97:dc:99:cc:a3:95:44:74:e4:2a:46:13:d8:b4:
         5b:b3:5b:0e:08:9b:41:a8:d6:06:e5:ac:ac:8a:e5:8b:70:df:
         0b:6e:05:e2:a3:6a:27:82:fb:93:39:dc:b7:bc:3d:b5:6a:5d:
         3e:a6:bf:2e:90:ba:22:01:ee:e4:11:2b:08:a4:ab:22:0a:c0:
         1f:32:94:52:9e:75:de:a7:cf:64:08:4d:fb:d1:40:90:84:36:
         ff:b7:12:9e:24:41:33:30:b4:a7:84:87:9f:34:24:03:02:72:
         54:35:b1:0d:9f:92:eb:70:7e:36:75:91:df:ed:6a:3d:fb:64:
         c6:d7:f1:66:ff:2c:86:f1:9a:9c:5b:49:89:a5:f6:43:8c:47:
         f4:df:63:0a:dd:ea:5c:ee:57:2d:60:53:a6:b7:f9:3a:1a:00:
         86:52:7b:a8:80:b7:10:e3:96:0b:9b:8f:df:44:a4:ee:5c:16:
         bd:82:c7:d0:64:4f:fb:c4:21:33:c0:e8:47:70:a1:bd:74:88:
         1f:79:f0:27:89:44:f9:e5:e7:3f:96:54:a4:19:b3:ab:17:59:
         a0:69:76:a7:0f:b6:c5:87:bc:89:b6:61:ee:15:07:c4:00:2a:
         4c:62:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----