Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138392e302f32342d3332203d3e20323731363331.roa
File:                     3230312e3231382e3138392e302f32342d3332203d3e20323731363331.roa (raw, json)
Hash identifier:          Mi8EoMo5irOcIMPgA1mKzRcwljsM6HfbIECPn+UGOJ8=
Subject key identifier:   5E:E1:C0:E8:53:52:48:AB:6C:77:ED:70:D5:52:E9:0C:99:F6:0F:F2
Certificate issuer:       /CN=91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96
Certificate serial:       3D18E1F4B0F65D2AA8CDCED376FD36553E4574A5
Authority key identifier: 91:BF:6A:31:0C:0A:22:67:BB:E5:54:68:ED:38:ED:DA:B9:BD:AC:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138392e302f32342d3332203d3e20323731363331.roa
Signing time:             Mon 10 Jun 2024 21:04:51 +0000
ROA not before:           Mon 10 Jun 2024 20:59:51 +0000
ROA not after:            Mon 09 Jun 2025 21:04:51 +0000
asID:                     271631
IP address blocks:        201.218.189.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:18:e1:f4:b0:f6:5d:2a:a8:cd:ce:d3:76:fd:36:55:3e:45:74:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96
        Validity
            Not Before: Jun 10 20:59:51 2024 GMT
            Not After : Jun  9 21:04:51 2025 GMT
        Subject: CN=5EE1C0E8535248AB6C77ED70D552E90C99F60FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7e:a9:ee:ae:75:24:d8:63:25:a3:45:b3:61:
                    7f:27:78:a2:2b:16:e4:cf:cc:ed:9a:39:0b:f1:8a:
                    8e:9b:60:1e:f6:77:be:28:c3:05:d6:6b:ff:dd:de:
                    96:78:e1:0b:f3:51:19:e8:cc:75:68:4d:7e:cd:3c:
                    55:7f:23:34:a2:da:2f:68:a9:c3:e2:6f:a1:db:1f:
                    35:bf:34:cd:c4:45:08:60:20:d7:5b:6d:f1:01:a1:
                    2c:94:f8:40:e7:7e:1d:24:4f:d8:7e:16:af:82:5a:
                    1a:5d:34:95:2f:72:b5:c1:f1:f9:5c:8d:7e:f4:df:
                    8e:96:00:ea:47:62:c8:09:fe:8d:f1:47:a9:0c:51:
                    d5:87:86:e6:e0:68:4e:86:73:87:f1:06:3d:59:6e:
                    20:de:2e:77:5c:d0:e2:6e:02:17:17:88:d5:b3:90:
                    5f:83:4c:cc:c1:3f:a1:51:d0:88:ef:64:45:cd:09:
                    9e:47:28:31:a7:e0:cc:82:89:1e:89:25:c5:e7:f6:
                    44:e8:3a:e2:5c:1e:3b:ed:40:df:b4:ba:f1:9c:55:
                    be:a7:79:26:aa:b4:9f:6d:0e:3d:3b:37:e6:85:94:
                    3a:e9:41:86:81:0c:91:d4:ac:78:0f:a1:f7:46:63:
                    f2:68:3e:05:61:2c:6a:9b:15:58:d1:37:77:6d:1c:
                    b0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:C0:E8:53:52:48:AB:6C:77:ED:70:D5:52:E9:0C:99:F6:0F:F2
            X509v3 Authority Key Identifier:
                keyid:91:BF:6A:31:0C:0A:22:67:BB:E5:54:68:ED:38:ED:DA:B9:BD:AC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/3230312e3231382e3138392e302f32342d3332203d3e20323731363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:74:87:96:ce:b9:1b:5d:f3:4c:3a:ca:91:64:cb:52:88:32:
         3f:78:b8:c2:ff:c6:f4:d5:08:ac:53:6c:39:31:3b:68:37:6b:
         64:47:f6:ae:4d:62:08:29:ee:0a:31:53:07:7d:f2:85:48:6d:
         0a:e9:5c:f5:7f:93:f4:c3:b3:cd:18:5e:1f:46:31:0c:b2:10:
         04:9e:99:bf:0e:73:1d:40:64:52:ab:c2:03:c3:6d:a1:78:58:
         dd:c7:74:d6:ea:c9:45:1a:97:8a:c8:64:46:32:f9:44:77:76:
         30:46:8c:1f:dc:9e:d4:5e:b9:47:7a:7d:c8:e7:4a:b2:ff:c0:
         63:0a:72:46:b1:d9:57:13:d7:9e:d3:30:0d:17:65:c2:f2:13:
         04:ce:93:29:de:52:b4:b0:80:5b:bc:2b:2b:4c:7b:8b:24:f9:
         06:46:68:3f:db:2d:0c:6f:af:b0:89:ba:9c:c1:a5:12:73:d2:
         f9:c6:74:a2:8f:42:4a:5f:e9:36:a2:af:79:17:89:2b:35:66:
         e0:05:df:fd:c5:d6:b9:aa:26:a4:5f:ad:da:10:e8:96:8e:a2:
         14:2f:23:56:14:1f:4f:39:8d:69:06:ad:fe:1d:ad:c0:8d:fe:
         fb:18:cc:07:b4:0e:41:03:20:6b:fa:52:70:84:cb:1f:38:3c:
         ff:88:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----