Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32332d3233203d3e203631373332.roa
File:                     3133312e37322e3130342e302f32332d3233203d3e203631373332.roa (raw, json)
Hash identifier:          Z8sgWCvQ86gPFH53hpia1CxzLmfR/cQPfSP1jwXJUTY=
Subject key identifier:   DD:D9:5B:18:0C:F3:E4:0B:49:1D:8B:19:51:5D:44:E5:38:2B:35:17
Certificate issuer:       /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial:       5D0399B5BD63C7DEC69855C436C40B5DFA441BE0
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32332d3233203d3e203631373332.roa
Signing time:             Sat 27 May 2023 01:37:08 +0000
ROA not before:           Sat 27 May 2023 01:32:08 +0000
ROA not after:            Sat 25 May 2024 01:37:08 +0000
asID:                     61732
IP address blocks:        131.72.104.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:03:99:b5:bd:63:c7:de:c6:98:55:c4:36:c4:0b:5d:fa:44:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8529A7F829766A6E814929022549D58021B37145
        Validity
            Not Before: May 27 01:32:08 2023 GMT
            Not After : May 25 01:37:08 2024 GMT
        Subject: CN=DDD95B180CF3E40B491D8B19515D44E5382B3517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:69:71:3b:e0:af:39:4b:e3:d7:a6:56:22:
                    2e:24:96:9b:36:8e:c8:bb:4b:d6:8a:54:be:7a:e0:
                    3d:58:41:bf:21:4f:e2:46:e3:10:17:6d:69:89:29:
                    7b:93:28:bd:2b:80:18:c3:34:a9:d9:cf:98:97:4d:
                    72:22:eb:0f:28:f2:55:57:1a:9c:ce:e2:8f:da:90:
                    c0:b8:e5:a7:5d:50:d4:91:7f:e7:98:be:6d:1c:32:
                    b9:e7:c6:01:71:cd:53:b6:02:f8:48:04:a1:47:35:
                    dc:09:3e:1e:3e:72:f0:fc:f3:5b:62:1c:1d:c3:5d:
                    c0:bd:f6:df:ae:6e:d4:16:63:77:57:84:7a:d1:dc:
                    b8:d0:44:2b:a6:e7:ec:54:f4:6c:44:b5:35:49:35:
                    10:a1:a0:1d:d2:c0:79:9c:e2:63:5b:1b:76:f4:5a:
                    7e:13:aa:ed:08:e3:5c:19:2e:d8:96:3d:2b:f3:58:
                    c4:ef:95:19:89:35:c4:fe:17:70:5e:9e:19:f5:af:
                    67:f7:d4:d0:87:b7:2d:0d:95:6f:57:3a:2b:e2:13:
                    75:24:b9:b7:b2:28:86:d5:22:f9:e3:12:ae:6b:b5:
                    30:9a:38:e9:38:ed:64:9e:7e:da:33:23:83:e6:66:
                    aa:a8:bc:08:71:3e:2a:a5:51:b2:cc:9f:55:01:e3:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D9:5B:18:0C:F3:E4:0B:49:1D:8B:19:51:5D:44:E5:38:2B:35:17
            X509v3 Authority Key Identifier:
                keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3133312e37322e3130342e302f32332d3233203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:7c:d4:bd:f9:ff:b5:35:8a:18:dc:b5:78:9f:45:53:be:
         97:7f:aa:97:e4:f4:b1:33:d6:92:5e:6f:1c:6f:07:e6:6e:c9:
         17:7f:49:35:27:ac:80:6f:90:47:cc:46:2f:f2:e9:96:76:81:
         eb:0e:48:53:8d:89:19:bf:76:eb:09:9a:47:8a:42:6c:aa:77:
         76:89:ff:d6:9d:f9:9a:f5:97:fa:11:71:c5:33:47:2b:26:85:
         a3:34:b5:97:82:55:ca:cd:e8:bb:49:1e:15:69:67:fd:f1:b0:
         ce:51:0d:b4:17:43:32:d0:a7:f9:52:a0:86:b0:95:63:53:de:
         a1:48:21:82:ac:1e:36:6f:0f:d5:b4:ed:61:b5:d0:a8:49:1f:
         0c:9c:6f:4e:98:f0:f7:ec:93:7e:c4:7d:c2:3f:df:14:0b:03:
         89:61:46:de:7d:ed:ec:98:f3:41:5c:b5:b6:f2:3e:a7:59:f8:
         62:68:b2:c1:45:51:d6:65:9e:87:11:bf:5e:d1:67:33:20:e5:
         a3:33:a5:3b:3d:97:eb:2a:64:98:af:e0:4f:ce:8d:90:58:e4:
         1b:6c:29:3c:ba:69:53:b0:43:bd:ea:de:07:80:8d:dc:40:88:
         94:17:9d:bd:65:20:50:9c:fb:6d:a0:ca:bf:b8:41:ef:06:c3:
         e0:5d:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----