Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
File:                     3137372e382e302e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          Vy2rFf9x9twEc3eoUkelsKlwJK6QbEVZI3lG4L61qvw=
Subject key identifier:   43:AE:1D:D6:BA:5D:08:B9:43:B4:FE:FB:D2:B5:09:C5:0A:51:80:AC
Certificate issuer:       /CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
Certificate serial:       7273E5BCA24D045558529BDB16730C042B362210
Authority key identifier: 5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa
Signing time:             Thu 24 Oct 2024 18:51:26 +0000
ROA not before:           Thu 24 Oct 2024 18:46:26 +0000
ROA not after:            Thu 23 Oct 2025 18:51:26 +0000
asID:                     28360
IP address blocks:        177.8.0.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:73:e5:bc:a2:4d:04:55:58:52:9b:db:16:73:0c:04:2b:36:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
        Validity
            Not Before: Oct 24 18:46:26 2024 GMT
            Not After : Oct 23 18:51:26 2025 GMT
        Subject: CN=43AE1DD6BA5D08B943B4FEFBD2B509C50A5180AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:51:ac:c8:5e:16:78:96:e3:8a:9f:83:6c:
                    c0:d0:b3:a3:5a:b2:95:65:1c:a7:ce:f1:c3:17:57:
                    4c:95:66:58:78:4d:9c:13:1a:59:d5:d0:64:74:40:
                    be:f3:47:f2:f0:73:f8:96:a9:5e:1c:fb:ea:32:42:
                    2b:ea:05:09:c1:69:5a:33:61:ce:90:0d:ac:df:58:
                    1f:a5:c0:24:ca:44:f4:a7:c1:16:02:1b:ea:d6:27:
                    8c:be:95:f3:db:04:b2:8e:61:71:50:a4:55:2d:a0:
                    92:f3:33:62:57:35:0d:48:82:73:d7:f7:76:33:5d:
                    38:64:c1:9c:44:c2:ce:20:ee:f0:d9:3b:4d:8e:d4:
                    22:0c:7d:09:00:41:c5:2c:0a:1e:a9:31:51:5a:df:
                    04:89:ec:9d:ce:cf:d0:43:0f:36:52:9a:57:24:25:
                    43:06:67:ad:9c:fe:f1:21:82:25:1a:ec:10:98:00:
                    5a:f5:ca:62:8b:5e:53:d4:f6:e7:71:4c:ad:98:e2:
                    9a:a4:d2:d5:21:31:d2:b4:9f:b0:a0:04:70:a3:fc:
                    35:17:af:47:0d:cf:50:4a:04:7e:6a:25:df:76:ae:
                    20:b2:75:37:b3:b6:29:b2:5e:ae:9a:ff:1a:5b:ce:
                    22:c8:09:18:e2:23:c1:bf:1d:12:bf:3e:50:2f:fd:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:1D:D6:BA:5D:08:B9:43:B4:FE:FB:D2:B5:09:C5:0A:51:80:AC
            X509v3 Authority Key Identifier:
                keyid:5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e302e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:bd:18:37:1d:64:37:62:50:e9:ea:b6:f0:21:7f:a3:ba:
         d8:c8:df:9c:b7:dc:bc:a4:c8:05:81:ee:bc:3c:39:26:7c:6d:
         a2:6c:10:08:fa:42:d9:a5:c4:60:45:5b:e7:5a:02:ab:87:cb:
         8c:36:83:c8:6a:66:27:2f:42:1c:cc:75:93:dd:a0:f6:b4:f7:
         f2:27:8f:32:25:db:a0:45:f2:32:cc:db:7c:22:da:57:7d:b8:
         9c:93:6c:cc:3f:19:34:01:f5:68:65:20:61:24:db:62:2a:26:
         cb:97:27:a4:f7:4a:51:98:d9:2f:59:50:07:b0:3a:1a:8f:b0:
         1b:05:c9:ea:40:3f:c4:5d:53:c8:b1:33:07:ef:06:2f:96:3c:
         2c:57:28:f3:a5:0a:df:0a:c9:19:e6:15:f5:12:83:52:ac:c7:
         49:cd:55:3a:f7:94:65:19:43:39:2a:84:c7:6b:aa:eb:0b:4b:
         1c:e5:f7:58:28:ca:7c:e5:26:f7:6d:b5:0a:3e:62:93:87:65:
         ab:4b:48:33:cd:7f:97:1d:88:31:76:54:05:03:a5:14:b1:5d:
         df:c8:d1:f4:2d:c7:92:21:1b:70:95:fa:69:14:ff:c7:df:20:
         6a:74:d8:55:01:ae:ec:70:3a:f0:3d:80:e0:02:5d:bc:cb:65:
         bb:f8:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----