Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/3136382e3139372e3136302e302f32322d3332203d3e20323635343933.roa
File:                     3136382e3139372e3136302e302f32322d3332203d3e20323635343933.roa (raw, json)
Hash identifier:          6TxJTaAr+/ZOJrOxZmm7dnBNljPhWRNFXAYQMHMCZBQ=
Subject key identifier:   7D:6C:7C:DA:D2:84:D1:E7:70:94:82:1B:D3:B1:37:60:6F:81:7C:E5
Certificate issuer:       /CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
Certificate serial:       40771447EB325951E0A6708EA80AAAB89FCA3BF4
Authority key identifier: 87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/3136382e3139372e3136302e302f32322d3332203d3e20323635343933.roa
Signing time:             Wed 21 Aug 2024 19:24:06 +0000
ROA not before:           Wed 21 Aug 2024 19:19:06 +0000
ROA not after:            Wed 20 Aug 2025 19:24:06 +0000
asID:                     265493
IP address blocks:        168.197.160.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:77:14:47:eb:32:59:51:e0:a6:70:8e:a8:0a:aa:b8:9f:ca:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8717B00AD18E837D6651B13EF7CEF0D8949B3748
        Validity
            Not Before: Aug 21 19:19:06 2024 GMT
            Not After : Aug 20 19:24:06 2025 GMT
        Subject: CN=7D6C7CDAD284D1E77094821BD3B137606F817CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:92:bf:9e:6a:21:69:79:dd:7c:02:7e:26:
                    7d:67:7b:a8:d7:a5:a4:e8:a0:76:ab:5c:37:4d:a2:
                    44:e3:86:88:13:7e:30:05:b9:08:36:e3:33:48:61:
                    68:03:a7:09:47:ce:96:ea:8a:6c:f5:cb:2e:5a:c2:
                    52:8d:98:6c:e5:f7:42:a1:5a:01:35:08:5d:1d:de:
                    54:31:1a:f5:3c:77:25:df:ec:3d:04:e5:89:09:cd:
                    13:cf:e7:a7:87:2f:0b:c6:28:d5:bd:76:7d:bf:fe:
                    71:79:2b:a1:c8:7e:2c:e0:4d:3c:3b:23:8a:51:a7:
                    03:fa:39:bd:1a:2a:17:3d:f8:f0:79:28:c3:44:4b:
                    5e:3c:71:f2:bb:8c:39:77:5e:ad:2a:d2:9a:05:dd:
                    9e:dd:05:b3:2a:76:ef:1b:bf:bc:c3:3c:a9:69:6b:
                    5a:93:12:2b:cf:17:d2:27:75:6c:3d:1e:12:d1:a7:
                    7a:a1:44:31:7b:7e:dc:9d:e0:ba:02:7b:d1:f6:21:
                    0a:d0:16:24:ba:66:7b:b9:41:75:cb:24:34:02:a7:
                    9c:9d:6c:65:50:a3:c9:17:f3:a2:4e:cb:7e:fa:f4:
                    16:79:b7:4b:3c:f6:f6:ef:78:7e:68:3c:4b:6e:87:
                    47:3a:f3:a3:80:c5:2a:b3:65:f9:f6:c9:7c:7e:6b:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6C:7C:DA:D2:84:D1:E7:70:94:82:1B:D3:B1:37:60:6F:81:7C:E5
            X509v3 Authority Key Identifier:
                keyid:87:17:B0:0A:D1:8E:83:7D:66:51:B1:3E:F7:CE:F0:D8:94:9B:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/8717B00AD18E837D6651B13EF7CEF0D8949B3748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8717B00AD18E837D6651B13EF7CEF0D8949B3748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H5zHaotxLhJXfqsDiPB2GL3TgWymyTBxuHh2KfY4sWH/0/3136382e3139372e3136302e302f32322d3332203d3e20323635343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:cd:6b:21:ef:ef:92:f3:4a:84:04:2f:04:38:b7:af:22:
         6a:53:e7:ff:d6:9f:74:52:48:f8:b6:2f:d1:d2:47:c6:30:c2:
         15:da:2b:3a:bf:9e:36:e6:a5:94:88:74:96:d9:5c:03:0d:d2:
         d3:60:f1:8d:e0:48:6b:dc:44:03:7d:1b:76:93:d9:8a:3e:49:
         0f:92:d6:f2:e3:c9:e9:77:3b:7f:33:4e:3f:84:4d:4a:0c:aa:
         e2:a9:b6:81:39:c8:ea:1d:cb:b9:81:42:34:57:7e:78:a5:f9:
         2a:2d:f8:9e:8c:a6:8c:3a:49:cb:39:39:88:86:f2:7a:77:b6:
         05:8d:3b:ee:27:79:34:e0:e0:9d:9f:17:e0:11:6c:16:c5:2e:
         db:b5:79:bf:cc:27:5f:0d:52:07:5f:1e:79:d6:88:85:02:0b:
         c0:3e:35:37:11:11:9f:0a:a0:ad:1a:06:4a:63:d0:31:c7:f6:
         4b:d1:8b:64:5e:5c:84:8f:ba:0b:9f:77:9f:c7:2a:21:79:03:
         c5:af:93:fa:8b:48:d5:34:48:04:dd:74:a9:8f:ae:61:c2:84:
         2a:ac:6c:0d:87:71:3f:c3:30:d6:d5:5d:80:a8:31:b3:17:5e:
         12:4b:e2:9d:c3:7c:e3:08:cb:64:f9:99:b3:a2:06:ca:ec:5c:
         5c:30:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----