Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137302e302f32332d3233203d3e203238313635.roa
File:                     3137302e38312e3137302e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          roXX/5VxMhUxLEz79DwZ+I89gC4DtCqR4rbjz0rWYbE=
Subject key identifier:   D4:CF:B8:AD:D5:49:5C:7F:31:26:78:A4:0B:A2:B4:92:7B:B6:BC:AD
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       117EB293329CDB1081A03CE03FB6D7596BBB5853
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137302e302f32332d3233203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:22 +0000
ROA not before:           Wed 31 Jul 2024 22:20:22 +0000
ROA not after:            Wed 30 Jul 2025 22:25:22 +0000
asID:                     28165
IP address blocks:        170.81.170.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:b2:93:32:9c:db:10:81:a0:3c:e0:3f:b6:d7:59:6b:bb:58:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:22 2024 GMT
            Not After : Jul 30 22:25:22 2025 GMT
        Subject: CN=D4CFB8ADD5495C7F312678A40BA2B4927BB6BCAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3a:7c:f5:12:c2:66:49:05:92:ce:d6:56:49:
                    13:9e:8d:32:04:c2:3b:ba:1f:73:c0:95:f3:d0:a7:
                    ec:17:8f:8d:5f:0e:97:b6:8d:cf:6d:79:f2:81:61:
                    c2:75:1f:8a:74:8a:ef:90:f5:e5:a1:00:1a:33:65:
                    d0:0d:81:37:a7:1d:ba:11:2b:1e:76:ae:68:db:6b:
                    be:7b:07:0c:93:b3:24:e3:cc:ab:03:53:bd:3e:72:
                    8b:cf:38:0c:e0:db:ee:6b:5f:a3:15:88:ff:27:0e:
                    a5:23:7a:6f:5d:4a:39:d6:a8:26:2f:b9:8d:fe:01:
                    ab:af:08:6b:91:bc:9f:df:24:16:c5:78:b1:f6:a4:
                    87:ed:f3:9c:91:c2:0f:3e:1d:24:e7:67:ae:b5:2e:
                    a0:f8:b5:ce:73:bd:20:46:b8:cb:0b:eb:58:7e:d9:
                    6f:a2:2a:85:12:7b:a9:6c:25:cd:6c:0a:f8:e8:66:
                    af:c3:81:ce:81:4c:03:e7:1c:0e:b9:34:b8:95:68:
                    25:84:a2:da:8e:81:4d:8e:84:fc:58:6f:26:3c:98:
                    aa:11:5d:84:29:c7:c1:9b:47:0d:e0:2b:42:df:f7:
                    40:a7:cf:cf:a6:2d:8d:9b:d0:a7:30:99:49:15:29:
                    e3:ea:ba:8b:b3:5e:fd:ac:da:f2:fb:27:bb:51:18:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CF:B8:AD:D5:49:5C:7F:31:26:78:A4:0B:A2:B4:92:7B:B6:BC:AD
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137302e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:ed:a8:7d:55:61:2e:5d:f4:48:a5:7a:4e:14:59:f2:52:f4:
         4d:98:98:ca:fc:d0:c2:a3:e3:c1:a7:31:fd:24:b5:35:99:4c:
         25:24:86:d5:0d:f7:2e:7c:f6:c2:14:f4:57:43:9f:67:d2:05:
         5f:88:ba:63:1d:61:7e:20:53:5a:1b:12:09:cf:42:c8:46:7a:
         6a:c2:ac:ce:cc:71:77:e1:d0:d2:76:83:28:e7:0b:df:f6:a9:
         1f:d9:b9:b8:a4:10:a6:e8:04:c3:f4:79:e9:cc:96:5b:3a:0e:
         89:c8:c4:e3:47:eb:9d:0a:16:e6:18:0a:0f:f7:75:5b:a7:6f:
         08:e4:49:94:9e:1b:29:d6:55:aa:f1:44:6d:38:8e:b0:b5:27:
         18:bc:93:61:b1:a9:ce:22:22:bf:d3:bc:db:84:b2:4e:b5:aa:
         8b:3b:62:0f:71:42:85:08:a6:68:33:58:fd:33:c6:41:1c:8d:
         97:b1:4a:6a:2e:5e:49:fe:c6:1e:43:64:d6:a2:1b:7c:a4:84:
         f2:fc:33:82:2a:7e:3a:04:05:f2:e6:34:66:90:af:b9:42:31:
         4a:62:17:c6:ba:35:b2:8a:e2:f2:27:26:2a:d1:a6:c4:a8:43:
         1f:06:1e:a1:a8:cc:66:ab:de:07:db:b7:99:0d:ff:b6:77:e0:
         79:17:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----