Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/3230312e37312e382e302f32322d3332203d3e20323730323833.roa
File:                     3230312e37312e382e302f32322d3332203d3e20323730323833.roa (raw, json)
Hash identifier:          Lgzg8FigkwdnOms1Gqw8AFFpnhj57lPS+xoLdPBBh5A=
Subject key identifier:   81:02:63:F1:4E:E4:9E:29:C5:0F:0B:7A:4B:F3:0E:99:58:2A:D0:6C
Certificate issuer:       /CN=F5EE2742A453C95BED27E0E9DFF2A29B69DDC8EF
Certificate serial:       4A2990C0F65B24DD3D404ED3ABD9293E3D93FD24
Authority key identifier: F5:EE:27:42:A4:53:C9:5B:ED:27:E0:E9:DF:F2:A2:9B:69:DD:C8:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5EE2742A453C95BED27E0E9DFF2A29B69DDC8EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/3230312e37312e382e302f32322d3332203d3e20323730323833.roa
Signing time:             Fri 28 Jun 2024 14:51:30 +0000
ROA not before:           Fri 28 Jun 2024 14:46:30 +0000
ROA not after:            Fri 27 Jun 2025 14:51:30 +0000
asID:                     270283
IP address blocks:        201.71.8.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:29:90:c0:f6:5b:24:dd:3d:40:4e:d3:ab:d9:29:3e:3d:93:fd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5EE2742A453C95BED27E0E9DFF2A29B69DDC8EF
        Validity
            Not Before: Jun 28 14:46:30 2024 GMT
            Not After : Jun 27 14:51:30 2025 GMT
        Subject: CN=810263F14EE49E29C50F0B7A4BF30E99582AD06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:72:69:65:f1:05:26:1d:db:f1:2a:39:be:
                    c7:73:a3:e5:68:92:0f:6c:0f:84:fd:38:c9:da:1f:
                    15:b9:20:73:72:26:f8:69:4e:a3:4b:99:19:62:a6:
                    f7:5b:c1:ba:0b:76:bb:16:e8:8a:0c:31:f2:42:90:
                    a4:0d:eb:1e:0b:ee:7d:58:2c:12:86:81:f4:7b:d4:
                    d9:65:5a:a4:4c:9f:2f:9b:c2:26:b6:eb:cb:ee:65:
                    ba:16:7d:cc:87:64:62:3a:c2:3f:58:29:e6:98:0d:
                    2f:0d:3c:af:15:d6:9e:a2:5a:cb:de:bb:27:98:1a:
                    aa:b5:5d:17:20:18:d3:1e:e2:9d:61:e4:1f:30:01:
                    43:6f:7b:22:95:6d:42:03:bc:73:64:1a:37:ff:2d:
                    79:cd:c8:6a:84:1c:bf:48:ad:55:a3:c6:c8:5a:9f:
                    ba:1b:94:c9:53:81:f1:28:a3:37:01:5e:95:63:e0:
                    00:8a:ec:33:ae:3c:1b:21:41:c4:be:b6:e6:a5:55:
                    6d:44:56:c0:ee:09:8f:c9:3d:c6:21:25:28:9a:67:
                    45:5e:c8:60:b8:bc:82:64:23:40:e3:b1:cc:3f:d7:
                    6a:d7:a6:3c:07:3c:ad:b0:e5:b9:3f:5f:fd:05:33:
                    45:dd:82:8a:ec:d4:f7:ea:10:ee:ea:d5:71:4e:20:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:02:63:F1:4E:E4:9E:29:C5:0F:0B:7A:4B:F3:0E:99:58:2A:D0:6C
            X509v3 Authority Key Identifier:
                keyid:F5:EE:27:42:A4:53:C9:5B:ED:27:E0:E9:DF:F2:A2:9B:69:DD:C8:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/F5EE2742A453C95BED27E0E9DFF2A29B69DDC8EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5EE2742A453C95BED27E0E9DFF2A29B69DDC8EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVoeygDsqcixLAou8nj2uz5cqJiWQRidXN9S8VDxfFsa/0/3230312e37312e382e302f32322d3332203d3e20323730323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:a6:b4:f6:10:ff:ff:94:8a:77:88:87:5a:19:c8:6f:7c:7e:
         1c:c2:18:9d:25:1b:c7:30:02:66:22:1f:1e:87:ca:f9:be:c4:
         bf:ff:5f:61:a2:86:ca:0e:01:01:e6:0c:59:b7:23:c3:10:ab:
         2d:86:7c:86:1d:a8:23:92:69:0e:bc:ef:10:ad:28:43:20:7e:
         65:e7:59:eb:43:d3:b6:81:29:bb:d2:a1:0b:93:7a:e1:87:c8:
         6b:4b:c7:8e:91:bb:02:83:9c:c3:d7:e9:22:b2:be:b5:02:b2:
         4a:91:19:4b:0d:2b:8b:44:0f:8f:5c:f2:95:10:2f:66:54:8b:
         f4:b3:be:3d:b7:49:1e:1f:10:ca:78:7f:88:0c:a0:9c:a1:f6:
         b4:9a:22:c8:76:88:a1:bf:0c:f1:19:ac:fa:e9:c0:48:ae:d1:
         b8:2b:7b:e8:2b:87:f1:5c:03:23:65:5c:f0:2c:c2:25:63:44:
         a9:1e:2b:f7:cd:54:1d:6b:1d:fc:b4:fe:55:98:34:43:e7:d1:
         50:9a:b5:ad:f9:44:b3:79:1b:82:0e:de:51:d4:86:ce:04:bd:
         11:52:ab:5a:bd:b1:c0:72:43:25:27:b1:85:e4:28:89:72:60:
         2f:b2:2d:d1:0b:c8:bb:36:71:b2:82:c9:dd:87:21:83:64:67:
         01:fb:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----