Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa
File:                     3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa (raw, json)
Hash identifier:          5LiciOhsurUOrMaDVKVguq9CoIOCkUyy/AE1NDzGC7w=
Subject key identifier:   8F:62:11:9F:CD:B4:19:5A:C5:43:67:A2:0F:37:37:E5:BC:1C:7B:1A
Certificate issuer:       /CN=9F4380DDB68B0747C5D9301CA7815F93422261AF
Certificate serial:       2BD457FCC7C78C889B380C9AD3BFC5A70365192D
Authority key identifier: 9F:43:80:DD:B6:8B:07:47:C5:D9:30:1C:A7:81:5F:93:42:22:61:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F4380DDB68B0747C5D9301CA7815F93422261AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa
Signing time:             Tue 16 Jul 2024 12:43:20 +0000
ROA not before:           Tue 16 Jul 2024 12:38:20 +0000
ROA not after:            Tue 15 Jul 2025 12:43:20 +0000
asID:                     265983
IP address blocks:        164.163.232.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d4:57:fc:c7:c7:8c:88:9b:38:0c:9a:d3:bf:c5:a7:03:65:19:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4380DDB68B0747C5D9301CA7815F93422261AF
        Validity
            Not Before: Jul 16 12:38:20 2024 GMT
            Not After : Jul 15 12:43:20 2025 GMT
        Subject: CN=8F62119FCDB4195AC54367A20F3737E5BC1C7B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:80:1f:f6:e7:83:f7:15:ca:66:0b:1a:75:
                    bf:a6:ce:29:b4:be:7c:05:10:90:81:b8:ff:fb:a1:
                    ef:ad:e0:68:8d:98:72:08:99:6f:58:6d:4d:9a:36:
                    6a:26:97:79:10:f7:93:d9:b7:26:4c:a4:8f:93:2d:
                    fd:6d:dd:12:77:ab:54:8c:08:d6:0c:3e:a6:6b:32:
                    19:ff:8e:56:14:9d:b0:d6:b5:c7:2a:59:73:25:6d:
                    ca:1a:af:5f:6d:0d:1a:d2:e2:81:48:73:38:61:a8:
                    1d:ba:95:9c:2f:ed:12:75:d3:69:1c:1a:8a:ad:95:
                    c5:29:99:36:da:72:3c:d8:e6:97:05:bb:71:f9:34:
                    23:47:4c:ed:f6:74:7c:23:af:71:ba:4c:c4:2d:8b:
                    1c:68:7c:d1:70:00:e8:53:7a:c4:11:f8:11:16:13:
                    16:5a:ee:c8:48:ad:19:a7:d9:14:b9:45:2c:b4:1a:
                    82:53:c4:10:2f:97:af:3e:2a:8b:f3:7b:38:84:23:
                    74:59:45:fe:4e:6f:24:37:39:ce:29:6a:81:0a:0a:
                    16:19:d4:5e:e9:b6:b5:57:fa:50:b1:51:23:7b:e6:
                    a7:68:4f:a5:63:74:71:6b:e0:14:e8:b9:9c:31:7b:
                    7a:39:e9:fa:6b:ec:bc:eb:87:be:62:23:70:14:99:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:62:11:9F:CD:B4:19:5A:C5:43:67:A2:0F:37:37:E5:BC:1C:7B:1A
            X509v3 Authority Key Identifier:
                keyid:9F:43:80:DD:B6:8B:07:47:C5:D9:30:1C:A7:81:5F:93:42:22:61:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/9F4380DDB68B0747C5D9301CA7815F93422261AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F4380DDB68B0747C5D9301CA7815F93422261AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32322d3332203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:58:04:b8:4e:bf:79:5c:3e:b6:48:2b:de:ea:a8:f0:52:ca:
         63:bb:19:c7:ca:86:80:34:8c:77:90:9c:9c:c9:6c:30:12:9b:
         92:f6:8b:b9:e4:c8:cd:8e:db:2d:cb:89:8f:74:8c:33:f0:c6:
         13:46:43:fb:4d:16:5c:75:e6:a5:bf:29:44:62:04:b2:7a:dc:
         3c:71:e1:98:3d:79:b6:7a:56:37:75:14:e6:27:13:95:6e:e6:
         6c:d1:62:b9:ff:39:ff:fe:55:65:53:97:e3:51:c5:d7:d2:94:
         ec:6b:e4:b5:9e:63:fc:f2:17:e4:6d:27:94:f4:0f:bd:92:88:
         ee:d2:dc:13:3e:35:cb:39:04:5e:fa:0d:09:3f:e5:59:b8:6d:
         ef:70:e6:ab:5b:0a:09:e9:9e:5c:9a:d3:ba:b5:dc:a4:b5:da:
         f2:b1:1a:78:6c:2f:18:10:79:09:95:fa:60:4d:e8:39:67:8e:
         0d:73:7d:3c:a0:c3:8b:4e:19:72:41:7c:80:19:9d:a8:53:32:
         e3:c3:d0:01:29:2d:49:f0:e6:01:c4:cd:fd:06:93:b6:3d:3d:
         7b:b3:87:17:d1:fb:04:47:8b:d5:81:fc:a0:f4:62:70:c0:5a:
         93:40:d0:6c:91:66:aa:7e:8b:f0:74:36:1a:4e:1f:67:bc:1b:
         18:c4:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----