Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3332203d3e20323637363636.roa
File:                     34352e3232342e3230382e302f32322d3332203d3e20323637363636.roa (raw, json)
Hash identifier:          u//OKoNcwR8iAPm253ED2gIoF55cksFOTkvsEerIIvs=
Subject key identifier:   44:72:7A:BA:4B:81:E4:12:37:F7:A7:16:C1:CA:5D:2E:CC:A8:3D:D0
Certificate issuer:       /CN=D861DF3EA87B40F943CC232763B8F7AD14962D54
Certificate serial:       02709C935C6B3A71E19D32320F6B98520BDEDFFA
Authority key identifier: D8:61:DF:3E:A8:7B:40:F9:43:CC:23:27:63:B8:F7:AD:14:96:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D861DF3EA87B40F943CC232763B8F7AD14962D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3332203d3e20323637363636.roa
Signing time:             Tue 28 May 2024 19:11:09 +0000
ROA not before:           Tue 28 May 2024 19:06:09 +0000
ROA not after:            Tue 27 May 2025 19:11:09 +0000
asID:                     267666
IP address blocks:        45.224.208.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:9c:93:5c:6b:3a:71:e1:9d:32:32:0f:6b:98:52:0b:de:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D861DF3EA87B40F943CC232763B8F7AD14962D54
        Validity
            Not Before: May 28 19:06:09 2024 GMT
            Not After : May 27 19:11:09 2025 GMT
        Subject: CN=44727ABA4B81E41237F7A716C1CA5D2ECCA83DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:31:14:00:98:77:ce:f7:27:e4:d7:55:da:
                    5b:0a:7f:7c:da:4b:f0:92:fc:08:dc:41:00:94:ed:
                    ec:9a:4a:17:4a:36:df:37:69:96:8c:6a:c3:4c:ee:
                    ee:13:62:89:7b:57:9d:28:a4:40:eb:b3:6e:10:50:
                    01:a5:c7:8f:48:03:0d:84:74:ff:d2:c8:2e:0a:ef:
                    8a:40:d5:7c:d7:2d:64:f0:f0:63:5e:e3:42:3a:65:
                    37:3b:13:c9:4a:bc:e4:b3:fd:42:3e:11:fd:a8:9b:
                    fa:dd:60:11:9c:2b:02:66:8d:9e:87:de:12:f9:61:
                    77:dc:bb:f1:41:d5:91:a8:cd:34:d8:9f:fe:1c:b9:
                    4c:c1:d5:eb:f3:21:18:b5:8a:dd:69:5e:00:ad:bf:
                    3e:8f:31:6a:8c:cd:c6:5b:c1:0e:28:d8:a8:e0:de:
                    af:54:fb:57:ba:2b:46:e8:85:ca:f6:af:cf:39:8b:
                    bc:ff:a4:bc:f4:06:f4:80:af:2f:4a:97:46:6b:5d:
                    3b:cd:b8:48:43:58:c5:c4:77:f0:4d:fd:1c:b0:18:
                    3f:e4:0b:7d:06:ea:a7:89:e5:b7:b9:cb:e9:a2:4f:
                    6f:cc:f9:be:ec:f1:e6:3a:8b:56:00:2f:63:29:c9:
                    c8:06:0d:7d:c8:d7:1b:e1:0b:84:0f:39:5d:4b:7c:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:72:7A:BA:4B:81:E4:12:37:F7:A7:16:C1:CA:5D:2E:CC:A8:3D:D0
            X509v3 Authority Key Identifier:
                keyid:D8:61:DF:3E:A8:7B:40:F9:43:CC:23:27:63:B8:F7:AD:14:96:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/D861DF3EA87B40F943CC232763B8F7AD14962D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D861DF3EA87B40F943CC232763B8F7AD14962D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9w665A78SqaJKMADSFRDEYczmLX94qxjLAUNjgPswdeK/0/34352e3232342e3230382e302f32322d3332203d3e20323637363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:c1:db:a1:5e:48:25:08:5f:a6:ba:7d:ef:b6:2c:0d:67:89:
         4a:6a:a3:2d:ce:ee:2d:11:81:ae:5f:86:89:66:a5:5c:d9:34:
         e8:a7:2d:73:6a:e6:c0:d5:1a:b6:dd:b9:e7:2f:c5:cf:5f:d4:
         54:84:5d:ef:ca:6d:ed:12:70:00:9f:ce:9d:86:28:32:3f:ae:
         53:3b:b4:77:60:78:b0:ac:81:bc:ac:40:9d:05:38:b5:07:e6:
         4b:f6:74:21:e0:8d:f8:9d:a4:59:98:00:41:87:ac:7a:9b:ad:
         b9:1b:53:7d:55:3d:f9:6e:ef:c2:4e:5d:89:77:f8:7e:dd:83:
         7e:da:aa:f4:5b:5e:6f:2e:77:b5:2c:5d:2e:18:2f:2e:97:9c:
         6f:11:27:0f:ee:f8:df:f8:f4:0b:18:8d:6c:bf:7d:b6:67:be:
         f4:3b:10:8a:d8:be:0a:b8:f7:fa:8b:bc:df:46:7f:40:a3:b5:
         4d:4e:19:68:f7:4c:3e:4d:10:c3:ee:36:5d:c5:5b:5d:7a:81:
         80:85:1f:cf:24:57:83:80:14:fa:9d:78:d4:37:e7:8d:0b:0f:
         a4:74:bf:9f:f0:bf:8a:39:cb:ee:2d:b6:59:c0:cc:58:a2:86:
         9a:ae:89:0c:2b:5f:3b:70:df:8e:95:27:30:48:93:f0:31:ab:
         67:92:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----