Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa
File:                     3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa (raw, json)
Hash identifier:          M42mWhDQMy8WCBSTQiTmmAXDHwq1dhtnKQ8F6ZN/SHw=
Subject key identifier:   1E:18:7A:77:15:7C:51:70:CB:78:41:FC:7E:B1:3F:25:92:0A:30:DB
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       2CB1B325E8D4FE5F63CA389D1A7D0DDC77D743D2
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:42 +0000
ROA not before:           Fri 05 Apr 2024 03:41:42 +0000
ROA not after:            Fri 04 Apr 2025 03:46:42 +0000
asID:                     270989
IP address blocks:        187.86.172.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b1:b3:25:e8:d4:fe:5f:63:ca:38:9d:1a:7d:0d:dc:77:d7:43:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:42 2024 GMT
            Not After : Apr  4 03:46:42 2025 GMT
        Subject: CN=1E187A77157C5170CB7841FC7EB13F25920A30DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:e8:3b:71:87:a7:5c:e4:4d:7d:f5:43:61:
                    e6:00:9c:d9:24:b3:95:e9:a7:1d:8f:22:9a:b5:5c:
                    33:3d:44:44:dc:1a:c9:52:bd:d0:f0:2d:e9:94:23:
                    5d:a7:eb:35:35:65:90:3c:d6:24:90:26:e4:9c:94:
                    2c:c9:fe:2b:3c:1f:f6:1d:97:e9:05:20:29:a3:30:
                    94:c2:61:81:5c:b2:a5:f6:2e:c7:10:69:1d:62:9a:
                    83:40:e9:dd:44:a8:aa:f6:86:1a:46:a6:f1:4f:64:
                    24:1d:a0:fe:55:55:78:bc:cc:7d:05:64:bc:9c:6d:
                    96:60:a7:4a:54:41:3b:c3:11:7d:e2:64:b9:8e:da:
                    f5:71:6d:57:fb:0f:46:3c:cd:39:4c:5b:6d:be:16:
                    53:12:45:5d:0c:8f:4c:22:7d:65:52:b7:dd:e0:ce:
                    ca:15:01:c4:b6:2f:bd:ae:48:30:6d:8d:4f:00:80:
                    8e:14:be:4e:6b:3b:98:c6:bc:b0:26:62:16:b4:9b:
                    10:d7:2b:4a:e4:1e:e4:21:19:6a:16:92:49:30:62:
                    61:55:84:2a:71:8d:5b:e2:36:20:84:76:f1:93:f9:
                    5e:92:95:d8:e7:f9:59:4c:05:8c:54:9c:d0:d4:8f:
                    43:35:07:df:c9:c0:48:ab:8a:25:58:4e:a8:7a:06:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:7A:77:15:7C:51:70:CB:78:41:FC:7E:B1:3F:25:92:0A:30:DB
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137322e302f32332d3233203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:fe:fd:7c:df:42:0b:da:5d:cf:ac:6b:d1:4e:24:6e:0c:
         1e:18:5d:9e:cb:4f:33:a6:58:5a:c4:4c:ca:09:1e:77:a6:09:
         66:c5:d9:f3:4e:f5:c0:ea:77:aa:c4:55:ec:f4:93:a8:4e:be:
         d4:c4:b8:b3:29:b1:6b:a2:3a:5d:e6:87:16:1c:93:22:ac:82:
         b1:0f:02:0c:0b:8d:2d:c1:46:a5:94:01:9a:c0:8f:f1:f3:bd:
         f3:08:6d:2a:39:39:7b:8a:33:5d:60:cb:cc:2e:88:12:68:f6:
         bb:7a:0d:b0:83:e9:a8:d9:8b:05:57:56:15:58:af:b7:ac:ee:
         b5:ba:b2:ac:56:91:6b:3b:5a:da:76:34:e5:d6:74:8f:cd:3c:
         ad:d6:3e:62:c8:d4:3c:1e:a9:44:50:5f:5e:8e:87:b4:ca:1d:
         0a:03:8e:a6:bd:7e:11:47:35:8f:ce:11:e3:b8:f7:66:03:cd:
         29:ac:8e:e6:a7:a3:bf:23:66:0d:60:e3:0a:03:ab:08:e1:b0:
         f7:3c:e0:a9:22:b3:0d:3b:be:7a:0f:77:b1:83:a9:d3:61:9c:
         b5:0f:6e:ac:20:93:c6:a8:2c:c9:cf:21:6f:0e:0f:ca:4c:63:
         e6:a3:74:7c:b4:a7:73:b5:64:f5:b6:fb:6e:d7:66:59:d3:54:
         30:8e:43:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULLGzJejU/l9jyjidGn0N3HfXQ9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBMzA1NzY4OTZERUI3RkYzNURBMDU4REVDNTEwNjAw
RENDMUE5OTAeFw0yNDA0MDUwMzQxNDJaFw0yNTA0MDQwMzQ2NDJaMDMxMTAvBgNV
BAMTKDFFMTg3QTc3MTU3QzUxNzBDQjc4NDFGQzdFQjEzRjI1OTIwQTMwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7+g7cYenXORNffVDYeYAnNkk
s5Xppx2PIpq1XDM9RETcGslSvdDwLemUI12n6zU1ZZA81iSQJuSclCzJ/is8H/Yd
l+kFICmjMJTCYYFcsqX2LscQaR1imoNA6d1EqKr2hhpGpvFPZCQdoP5VVXi8zH0F
ZLycbZZgp0pUQTvDEX3iZLmO2vVxbVf7D0Y8zTlMW22+FlMSRV0Mj0wifWVSt93g
zsoVAcS2L72uSDBtjU8AgI4Uvk5rO5jGvLAmYha0mxDXK0rkHuQhGWoWkkkwYmFV
hCpxjVviNiCEdvGT+V6Sldjn+VlMBYxUnNDUj0M1B9/JwEiriiVYTqh6BndbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHhh6dxV8UXDLeEH8frE/JZIKMNswHwYDVR0j
BBgwFoAUuqMFdolt63/zXaBY3sUQYA3MGpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHdvMlpFdUhHR2dpQkJYdlNWelV1b25DS3Q3ejhEZk0zamhSYjQ1OTV5
eDQvMS9CQUEzMDU3Njg5NkRFQjdGRjM1REEwNThERUM1MTA2MDBEQ0MxQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTMwNTc2ODk2REVCN0ZG
MzVEQTA1OERFQzUxMDYwMERDQzFBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3bzJaRXVIR0dnaUJCWHZTVnpVdW9uQ0t0N3o4RGZNM2poUmI0NTk1eXg0LzEv
MzEzODM3MmUzODM2MmUzMTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzOTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7VqwwDQYJKoZIhvcNAQELBQADggEBAEla/v18
30IL2l3PrGvRTiRuDB4YXZ7LTzOmWFrETMoJHnemCWbF2fNO9cDqd6rEVez0k6hO
vtTEuLMpsWuiOl3mhxYckyKsgrEPAgwLjS3BRqWUAZrAj/HzvfMIbSo5OXuKM11g
y8wuiBJo9rt6DbCD6ajZiwVXVhVYr7es7rW6sqxWkWs7Wtp2NOXWdI/NPK3WPmLI
1DweqURQX16Oh7TKHQoDjqa9fhFHNY/OEeO492YDzSmsjuano78jZg1g4woDqwjh
sPc84Kkisw07vnoPd7GDqdNhnLUPbqwgk8aoLMnPIW8OD8pMY+ajdHy0p3O1ZPW2
+27XZlnTVDCOQxI=
-----END CERTIFICATE-----