Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa
File:                     3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          dXkwDiTg8+ldNJoPujXD91Dv6Zj+sDbATddyDxADZXE=
Subject key identifier:   5E:17:E0:54:E3:D7:42:EA:B9:2B:80:A1:A9:02:88:2C:AA:44:F4:46
Certificate issuer:       /CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
Certificate serial:       0C1311DB1935B0D397A40E95C9CCADBE189C483B
Authority key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa
Signing time:             Thu 04 Apr 2024 18:29:57 +0000
ROA not before:           Thu 04 Apr 2024 18:24:57 +0000
ROA not after:            Thu 03 Apr 2025 18:29:57 +0000
asID:                     53218
IP address blocks:        138.186.204.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:13:11:db:19:35:b0:d3:97:a4:0e:95:c9:cc:ad:be:18:9c:48:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
        Validity
            Not Before: Apr  4 18:24:57 2024 GMT
            Not After : Apr  3 18:29:57 2025 GMT
        Subject: CN=5E17E054E3D742EAB92B80A1A902882CAA44F446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:01:17:ed:ce:11:7f:76:1a:74:a0:82:2b:
                    74:4d:45:6b:4c:4d:7d:d9:bd:ac:2a:e5:73:b3:3c:
                    f8:47:98:1d:c2:1f:9d:18:aa:a6:4f:df:d7:57:3f:
                    04:0f:ee:86:10:4e:c8:f7:b8:35:79:8a:74:aa:8c:
                    ef:6b:81:de:61:a8:81:44:f9:27:5e:ba:09:0a:79:
                    9a:88:7e:e1:59:c8:ee:5f:3a:18:99:45:8a:17:da:
                    36:f3:00:4a:6f:7c:ea:db:b2:4b:36:7c:86:54:c0:
                    8f:f5:cd:74:5a:81:e0:56:93:d9:4e:6e:35:73:6e:
                    51:92:59:4f:61:fd:b3:27:dd:a5:96:f2:81:7d:b3:
                    7d:92:73:d9:a1:84:85:cc:cc:21:4c:9a:f4:c0:49:
                    7e:6b:04:ed:aa:7f:7d:a5:8e:4a:75:27:71:cb:df:
                    65:8d:d1:cd:de:9c:23:b8:73:71:de:b0:94:4d:ef:
                    6e:cd:99:1f:49:15:1f:10:f2:70:cb:02:60:09:f9:
                    54:69:57:c4:d1:7e:f0:f9:f4:cf:60:8d:59:42:4d:
                    01:46:de:92:47:56:4f:d3:20:94:e1:4d:69:a7:d9:
                    f8:05:d7:94:13:70:ca:ba:0e:bc:56:47:2a:6b:95:
                    dc:06:57:e0:e3:a3:ed:61:38:b1:77:e6:ca:ef:ec:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:E0:54:E3:D7:42:EA:B9:2B:80:A1:A9:02:88:2C:AA:44:F4:46
            X509v3 Authority Key Identifier:
                keyid:2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:06:94:b5:78:2b:32:73:95:87:04:48:da:cc:5f:68:b4:
         f2:8f:18:5a:5a:db:30:c6:46:43:c4:cd:eb:df:62:c7:8d:47:
         35:44:ee:71:63:5a:e7:b2:2e:7e:01:83:dd:ab:0c:1f:4b:61:
         55:72:fd:b9:fc:6e:d2:00:b0:5c:96:02:72:e2:a0:a2:37:41:
         34:dc:75:4f:8a:13:09:7c:02:4f:b6:88:b9:83:b6:51:a7:ee:
         7b:1e:0b:d0:a7:13:70:de:c9:9b:e4:9e:c0:30:a0:04:41:97:
         b7:0a:5a:a5:86:a0:a9:d5:ae:5c:36:7c:1a:a4:96:be:e7:69:
         7c:88:e0:26:76:a0:07:cc:f1:e5:6a:f5:ef:43:af:90:c8:fa:
         94:83:a9:a9:8f:5e:aa:5f:1b:02:1b:9b:c4:99:5d:e5:ca:3a:
         3c:d3:d2:79:47:fd:9b:63:1b:24:ec:a7:04:a1:75:a6:70:71:
         8f:57:ee:68:d4:96:6b:89:6e:a1:c6:20:c8:a3:94:30:b4:38:
         ff:87:91:bd:f4:82:e0:8f:5c:01:8b:b7:c3:15:2a:90:da:4b:
         7d:79:cb:9d:e2:2e:76:6a:6f:2e:ee:4a:d0:93:88:06:f2:11:
         2d:04:4f:04:db:92:f4:b2:ee:e3:df:6e:82:b6:95:87:8e:80:
         18:03:ea:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----