Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa
File:                     3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa (raw, json)
Hash identifier:          e8aq41CrBItGL+Lrwf1fct6E4Z4pkbXBshb4kc2lzTA=
Subject key identifier:   33:7E:9C:DE:22:45:B0:4B:FC:2B:2F:40:61:D3:F5:73:7B:5A:31:84
Certificate issuer:       /CN=6181D5723D970F972FFAD44FEC3B990C0E69A0BE
Certificate serial:       2A466D704B7116EF5277C6DB759A23C87A571CDA
Authority key identifier: 61:81:D5:72:3D:97:0F:97:2F:FA:D4:4F:EC:3B:99:0C:0E:69:A0:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6181D5723D970F972FFAD44FEC3B990C0E69A0BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa
Signing time:             Thu 04 Apr 2024 05:33:07 +0000
ROA not before:           Thu 04 Apr 2024 05:28:07 +0000
ROA not after:            Thu 03 Apr 2025 05:33:07 +0000
asID:                     271072
IP address blocks:        179.48.100.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:46:6d:70:4b:71:16:ef:52:77:c6:db:75:9a:23:c8:7a:57:1c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6181D5723D970F972FFAD44FEC3B990C0E69A0BE
        Validity
            Not Before: Apr  4 05:28:07 2024 GMT
            Not After : Apr  3 05:33:07 2025 GMT
        Subject: CN=337E9CDE2245B04BFC2B2F4061D3F5737B5A3184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b6:2e:2a:62:10:db:02:7a:3d:31:b6:ba:62:
                    e0:dc:ad:ba:68:0a:de:69:fd:f2:ae:db:73:07:1d:
                    24:9f:94:45:b4:ad:c3:20:5a:df:f4:6f:cb:f5:80:
                    f3:79:10:64:0d:af:93:e6:84:3f:14:2e:63:15:0d:
                    fd:5e:dd:3d:12:71:59:6b:a7:b8:2f:d4:b0:a2:3b:
                    0d:a8:dc:68:cc:3b:cb:1a:12:bb:7d:b0:b8:7d:e3:
                    87:72:34:1b:fe:2e:e7:80:03:d2:37:b5:2b:75:86:
                    ae:17:38:ea:86:b0:a5:b5:fb:59:a9:d4:ba:ab:f5:
                    3b:ef:76:5a:3c:ae:c3:7f:71:87:e7:2c:09:80:cc:
                    c4:45:2e:a2:07:47:ec:70:75:3f:18:68:6d:99:1b:
                    0a:43:f5:a6:49:9b:06:59:ba:9a:32:8a:1b:9a:10:
                    52:00:c8:e8:85:ca:d5:64:cf:b1:c1:2b:de:16:1b:
                    e4:77:bf:59:3b:d5:48:b9:fc:7c:11:30:68:e7:9e:
                    3e:9e:53:df:ab:86:3f:0c:b8:d4:6a:5b:e6:bd:f5:
                    fe:08:88:a2:c8:56:60:b8:fa:fa:0d:05:93:f7:6f:
                    c9:3f:d0:28:7c:18:54:40:b7:0b:86:d3:d6:1b:51:
                    ec:fe:9c:52:df:b1:d3:58:30:d3:94:59:0e:6a:a8:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:9C:DE:22:45:B0:4B:FC:2B:2F:40:61:D3:F5:73:7B:5A:31:84
            X509v3 Authority Key Identifier:
                keyid:61:81:D5:72:3D:97:0F:97:2F:FA:D4:4F:EC:3B:99:0C:0E:69:A0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/6181D5723D970F972FFAD44FEC3B990C0E69A0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6181D5723D970F972FFAD44FEC3B990C0E69A0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/1/3137392e34382e3130302e302f32322d3332203d3e20323731303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:73:b1:4b:0b:d2:83:9b:c1:5e:6d:00:fb:f0:18:5d:bb:8f:
         ec:7b:af:2d:cc:7c:89:70:91:94:a6:93:fe:c2:0c:52:5f:b4:
         2f:fd:74:f2:da:6f:ed:b8:c0:7f:44:12:a5:28:b3:f8:e2:3a:
         2f:f0:a6:64:dd:4f:c4:04:58:2b:f5:50:6c:b1:cd:66:04:bf:
         2d:23:7a:5d:97:33:dd:66:8f:4c:17:eb:6b:a5:37:5e:18:90:
         d8:f4:51:54:96:e6:bf:89:2b:02:04:12:81:b1:ab:bd:a0:d7:
         4e:04:a5:60:c0:22:cf:c4:b7:99:0d:cc:28:e0:75:c4:81:f0:
         9c:74:cf:27:0f:32:5e:5d:19:f4:81:59:da:0b:58:ce:37:7d:
         9d:13:dd:cc:29:33:8b:e0:df:9b:0e:95:d0:91:3c:8b:91:1a:
         dc:50:5f:ab:72:ad:cf:24:32:25:41:f6:1e:bf:8d:31:01:ad:
         71:9a:c8:19:ef:7b:5d:c1:0e:91:79:e9:1e:39:03:96:ba:5e:
         de:5f:cf:1f:f6:9b:68:18:2c:98:c7:92:d1:3f:62:af:42:c5:
         c9:4e:8e:8f:9b:87:f2:ec:9a:0b:28:d9:93:b2:a8:45:1c:1f:
         9d:ce:e5:ae:f2:a7:79:58:e5:38:15:0d:23:a5:b7:52:51:9f:
         58:88:60:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----