Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132322e302f32332d3233203d3e20323633353433.roa
File:                     3134332e3230322e3132322e302f32332d3233203d3e20323633353433.roa (raw, json)
Hash identifier:          J4ntmENyHY+9lnO/BCbrN+sFAnv5Ozx7ceD0qVzTmMw=
Subject key identifier:   DD:6F:26:D1:8A:DE:4C:FE:F7:0C:C3:BC:3E:AF:37:22:D2:4F:FE:A5
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       78198EF0E73611B0FF8CA37546C2398CCF965C63
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132322e302f32332d3233203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:43 +0000
ROA not before:           Thu 04 Apr 2024 20:35:43 +0000
ROA not after:            Thu 03 Apr 2025 20:40:43 +0000
asID:                     263543
IP address blocks:        143.202.122.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:19:8e:f0:e7:36:11:b0:ff:8c:a3:75:46:c2:39:8c:cf:96:5c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:43 2024 GMT
            Not After : Apr  3 20:40:43 2025 GMT
        Subject: CN=DD6F26D18ADE4CFEF70CC3BC3EAF3722D24FFEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:0c:5f:90:65:ad:cf:e1:40:b8:e6:2e:0d:
                    45:56:01:56:09:c8:8e:df:35:58:f7:62:b0:92:d8:
                    87:78:86:0e:1e:c2:94:b8:5a:a4:d0:39:bc:7b:2f:
                    eb:31:d1:f7:4e:5c:3b:3f:37:fe:3e:e5:9a:d7:70:
                    d8:36:e3:b7:5e:0e:8e:20:49:e5:0b:fb:c7:3e:ae:
                    8e:36:0b:f6:52:17:06:17:38:d3:fc:b6:6b:03:89:
                    f4:76:b9:b7:d1:19:07:57:0d:57:f9:f9:ac:1e:fc:
                    17:9d:60:a4:42:39:d3:9a:7b:50:6c:1f:c5:d5:ee:
                    ce:54:64:ab:28:9a:e2:40:aa:97:62:92:a6:cf:4d:
                    91:7e:c3:93:54:ad:f4:9f:ca:ef:52:c0:a9:52:ec:
                    0d:89:01:ab:7c:71:da:7b:35:78:52:98:96:88:27:
                    86:da:a4:76:5a:d8:75:23:94:9b:9a:26:b7:5b:23:
                    e4:25:69:10:54:54:32:65:6a:08:49:45:04:04:85:
                    a3:94:7d:47:1f:40:85:a4:12:4e:79:7b:ca:f9:94:
                    27:0f:07:76:6a:a3:2b:43:7a:16:d1:7c:ec:d1:fb:
                    08:38:91:55:da:df:17:89:0a:e4:8d:8d:b5:f7:88:
                    a5:88:53:18:c8:42:d1:83:26:a4:6f:88:02:60:b6:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:26:D1:8A:DE:4C:FE:F7:0C:C3:BC:3E:AF:37:22:D2:4F:FE:A5
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132322e302f32332d3233203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:f5:8f:ca:31:9a:f0:b7:49:9d:cc:16:fc:47:46:d8:19:8b:
         f3:74:0e:e9:05:ed:3a:dd:06:c1:fa:97:e5:da:9f:d3:6f:e6:
         96:88:4e:8b:10:4a:e3:51:bf:5b:31:04:f4:36:40:6e:69:c3:
         8d:f5:8c:40:58:ab:33:f6:f2:d3:4a:3d:24:1a:ba:89:f1:c4:
         8c:d4:ba:0c:6f:d7:b8:04:44:8b:bd:9c:e1:5c:11:c2:61:75:
         44:e6:42:08:48:36:18:a2:4e:42:89:2e:cf:d5:f4:4a:8b:03:
         a0:48:30:70:dc:66:a3:a8:a3:1c:f9:a3:da:9e:82:59:2c:2b:
         9f:e3:43:74:be:28:c5:a8:ea:f7:b8:25:82:53:ba:87:ea:94:
         5e:46:55:9d:b3:d1:81:9e:d5:e3:23:19:f1:c1:df:7a:d0:3b:
         53:32:72:7a:4f:48:86:a6:d9:08:1a:1f:80:06:ca:79:bd:05:
         09:07:95:95:cf:87:0e:26:61:da:3f:fe:c3:57:1a:d8:bc:4d:
         af:18:69:23:aa:92:59:1f:fd:f5:39:1d:ad:b0:63:f5:d0:f4:
         2b:9a:b0:ba:d9:bf:44:4e:f1:d3:bd:af:0e:58:02:2d:50:af:
         17:57:a5:f1:75:5b:e2:f2:48:77:36:6c:ff:60:0f:19:31:83:
         7e:1b:03:00
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeBmO8Oc2EbD/jKN1RsI5jM+WXGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyRjY0NjBFQjAwNUJDQUE5ODlBOTQ4NjdDMTZGOTQw
RjIxNTdDODAeFw0yNDA0MDQyMDM1NDNaFw0yNTA0MDMyMDQwNDNaMDMxMTAvBgNV
BAMTKERENkYyNkQxOEFERTRDRkVGNzBDQzNCQzNFQUYzNzIyRDI0RkZFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAAxfkGWtz+FAuOYuDUVWAVYJ
yI7fNVj3YrCS2Id4hg4ewpS4WqTQObx7L+sx0fdOXDs/N/4+5ZrXcNg247deDo4g
SeUL+8c+ro42C/ZSFwYXONP8tmsDifR2ubfRGQdXDVf5+awe/BedYKRCOdOae1Bs
H8XV7s5UZKsomuJAqpdikqbPTZF+w5NUrfSfyu9SwKlS7A2JAat8cdp7NXhSmJaI
J4bapHZa2HUjlJuaJrdbI+QlaRBUVDJlaghJRQQEhaOUfUcfQIWkEk55e8r5lCcP
B3ZqoytDehbRfOzR+wg4kVXa3xeJCuSNjbX3iKWIUxjIQtGDJqRviAJgtrA/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3W8m0YreTP73DMO8Pq83ItJP/qUwHwYDVR0j
BBgwFoAU5i9kYOsAW8qpialIZ8FvlA8hV8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt
V3kvMS9FNjJGNjQ2MEVCMDA1QkNBQTk4OUE5NDg2N0MxNkY5NDBGMjE1N0M4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MkY2NDYwRUIwMDVCQ0FB
OTg5QTk0ODY3QzE2Rjk0MEYyMTU3QzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKY1VzYUVGa3p0eU5xdWFFVG50Nmt5NE5zRlRpaGdMNTUzOXFWY0dybVd5LzEv
MzEzNDMzMmUzMjMwMzIyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY/KejANBgkqhkiG9w0BAQsFAAOCAQEAlfWP
yjGa8LdJncwW/EdG2BmL83QO6QXtOt0GwfqX5dqf02/mlohOixBK41G/WzEE9DZA
bmnDjfWMQFirM/by00o9JBq6ifHEjNS6DG/XuAREi72c4VwRwmF1ROZCCEg2GKJO
Qokuz9X0SosDoEgwcNxmo6ijHPmj2p6CWSwrn+NDdL4oxajq97glglO6h+qUXkZV
nbPRgZ7V4yMZ8cHfetA7UzJyek9IhqbZCBofgAbKeb0FCQeVlc+HDiZh2j/+w1ca
2LxNrxhpI6qSWR/99TkdrbBj9dD0K5qwutm/RE7x072vDlgCLVCvF1el8XVb4vJI
dzZs/2APGTGDfhsDAA==
-----END CERTIFICATE-----