Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32322d3232203d3e203631373332.roa
File:                     3137302e3234372e31362e302f32322d3232203d3e203631373332.roa (raw, json)
Hash identifier:          Sa+2fY5ZeElzY6oFS3ZfZsOOQy/Yoe3oMxj0vh0GWU8=
Subject key identifier:   31:F2:70:18:43:38:86:8E:B4:D1:05:73:19:6C:C5:FF:69:7E:9D:99
Certificate issuer:       /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial:       0B45A4A4134F9C92CA7342E5621344428FE0836F
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32322d3232203d3e203631373332.roa
Signing time:             Wed 15 Feb 2023 21:14:25 +0000
ROA not before:           Wed 15 Feb 2023 21:09:25 +0000
ROA not after:            Wed 14 Feb 2024 21:14:25 +0000
asID:                     61732
IP address blocks:        170.247.16.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:45:a4:a4:13:4f:9c:92:ca:73:42:e5:62:13:44:42:8f:e0:83:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8529A7F829766A6E814929022549D58021B37145
        Validity
            Not Before: Feb 15 21:09:25 2023 GMT
            Not After : Feb 14 21:14:25 2024 GMT
        Subject: CN=31F270184338868EB4D10573196CC5FF697E9D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:4a:90:f1:dd:5f:3c:48:55:8d:cb:70:df:
                    4b:eb:e5:3e:49:a7:2b:26:f3:9d:6f:16:84:82:b9:
                    c7:0c:b7:90:25:96:e3:ef:6c:96:a9:3d:7c:4f:63:
                    9f:4a:dd:cb:22:17:fe:09:86:35:4f:9d:c4:45:85:
                    70:86:c3:35:9b:08:5f:0e:72:d8:7f:e4:56:71:92:
                    e7:28:ae:6e:7c:ce:57:92:f3:4c:3e:9f:05:d3:85:
                    1f:72:52:c8:88:01:da:aa:65:76:a2:94:2c:b0:2a:
                    49:9e:43:28:74:fc:a5:71:b7:ea:ae:a4:ca:fa:98:
                    bc:98:eb:3f:8d:5c:56:41:31:31:e4:2d:67:8e:b1:
                    09:fe:e8:1f:ef:6c:91:72:69:cc:4b:08:86:62:fd:
                    67:ae:32:a5:ce:9a:a9:3a:29:19:a2:40:93:fa:dd:
                    d0:e2:1b:3f:ad:7a:a4:a6:64:88:10:f8:fb:68:c9:
                    fe:a9:e0:92:e2:be:9d:f7:22:46:a7:a8:89:6d:8c:
                    95:49:62:23:55:f6:32:44:8f:0e:61:1e:b0:18:5d:
                    bd:86:4d:03:e3:b6:5c:e6:6a:fd:d0:5b:c4:f1:53:
                    dd:6c:16:e4:af:57:b1:7d:ba:d1:12:dc:a3:06:02:
                    04:f3:21:0d:e8:92:5d:22:17:d6:5e:8a:56:1a:8d:
                    29:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F2:70:18:43:38:86:8E:B4:D1:05:73:19:6C:C5:FF:69:7E:9D:99
            X509v3 Authority Key Identifier:
                keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32322d3232203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:c3:05:3d:04:20:1f:b3:d1:b1:50:d2:66:ec:85:10:6d:
         bb:77:a1:5f:73:55:2a:3e:96:7e:07:a1:80:73:92:7a:19:da:
         9e:7e:9a:a9:bb:49:e7:06:71:91:6a:a1:dc:7b:0b:92:07:5c:
         ac:4d:44:aa:43:76:62:d0:b1:e2:78:4a:5b:e9:7c:04:0f:22:
         51:92:3f:ad:b1:d8:e9:42:41:49:c3:01:75:f7:9b:9c:56:7b:
         5d:22:2c:74:ff:f2:d6:07:72:1b:68:b5:ec:d9:37:c2:22:5a:
         b5:54:d2:53:78:2a:68:c8:d2:f1:72:cc:13:ba:4f:c2:15:a4:
         3b:64:fe:d8:8c:cd:48:25:9e:cc:92:37:ef:34:2e:d8:dd:38:
         84:43:04:70:d9:ca:60:b7:a4:80:60:d5:52:81:0f:8d:68:54:
         37:9f:e5:48:e7:4f:49:45:a4:4b:5e:f0:91:ce:96:52:ae:f3:
         a2:65:e4:1d:24:fc:3b:6d:4b:c5:8a:d7:04:dc:56:58:61:9a:
         dc:e3:11:da:5e:87:1a:4f:4d:ec:4a:3c:c0:60:61:ca:c3:4d:
         ad:51:d1:1b:a8:e6:82:a0:06:01:81:d6:e5:32:7a:5a:fd:ab:
         98:76:b2:c3:91:94:20:32:21:35:9a:97:ac:e3:fb:21:c1:d1:
         5a:7d:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----