Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32302d3230203d3e203238313635.roa (raw, json)
Hash identifier:          CPHi4r6mfnqWf5rvz4pH213KLdAO0r/wJGfpxGQ5ECo=
Subject key identifier:   FE:3D:47:1B:8C:9E:D7:A6:5F:FD:04:CC:1F:E0:3A:2F:8E:6E:50:8E
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       6933D27E1A64EC929DEC3152E2327745E19BA76F
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:32 +0000
ROA not before:           Wed 31 Jul 2024 22:20:32 +0000
ROA not after:            Wed 30 Jul 2025 22:25:32 +0000
asID:                     28165
IP address blocks:        187.62.208.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:33:d2:7e:1a:64:ec:92:9d:ec:31:52:e2:32:77:45:e1:9b:a7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:32 2024 GMT
            Not After : Jul 30 22:25:32 2025 GMT
        Subject: CN=FE3D471B8C9ED7A65FFD04CC1FE03A2F8E6E508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:08:d5:50:51:0e:90:0d:b2:50:a2:d6:62:
                    7c:96:91:0e:ce:c3:f0:b0:26:ec:d0:48:b0:fd:04:
                    c6:e1:cf:33:fc:10:6d:06:06:ad:ef:b1:8b:f8:a8:
                    dd:2f:74:73:c4:53:91:db:91:03:f0:37:7b:24:fb:
                    7c:56:df:87:ec:83:94:16:6a:e4:a1:39:d0:05:ab:
                    56:e7:c8:37:fb:f8:75:16:92:ec:47:df:0e:08:3b:
                    af:6c:03:13:69:35:ad:e4:6c:96:25:d8:11:f6:f3:
                    9a:4c:94:3c:b0:3a:2d:e8:d8:bc:14:a2:ba:34:87:
                    6b:30:43:47:b6:92:2d:c5:14:2e:b0:b1:26:1a:ac:
                    0f:69:0c:99:0a:73:d5:26:36:26:cc:33:d9:8e:e6:
                    05:89:4f:62:17:66:cc:2e:1f:55:c4:fa:f6:04:ae:
                    3a:cf:39:0d:59:5f:84:7d:25:9f:17:82:7a:bf:c5:
                    14:81:ff:eb:4b:2b:76:8c:31:9d:b5:e9:8e:43:41:
                    58:0e:27:f8:a0:24:fa:82:11:4f:96:7e:7c:7b:bc:
                    21:a4:77:96:ee:ad:16:ec:92:bd:89:e2:8b:8c:82:
                    f4:4b:69:fb:0b:98:cb:ba:74:33:e3:3e:30:14:92:
                    a4:eb:79:19:07:c7:3a:5e:dc:09:00:36:3b:d8:12:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:47:1B:8C:9E:D7:A6:5F:FD:04:CC:1F:E0:3A:2F:8E:6E:50:8E
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3230382e302f32302d3230203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:a0:87:42:b7:17:95:c5:0e:3c:79:3c:c7:fc:c8:68:7c:c3:
         2c:0d:d8:6f:d4:23:6b:21:82:3a:dd:21:39:c0:95:50:48:a8:
         6d:7e:56:7c:70:76:2c:ef:c0:ed:ea:d5:bf:8d:84:42:2e:74:
         23:d6:cb:67:89:7f:0a:2d:7e:d2:04:2b:f9:fa:26:fc:ef:10:
         70:28:11:44:25:fc:35:b3:45:73:70:5f:78:5e:c4:fd:2c:86:
         d0:2e:47:03:57:09:81:b3:3b:17:6b:72:90:ee:3a:b7:9d:6e:
         cb:e5:55:7a:cb:9b:21:d2:2d:f6:91:06:20:46:0a:28:4e:a0:
         47:0e:3d:b7:64:96:99:86:e1:8d:bc:b7:a2:08:80:3c:4a:87:
         8a:82:19:16:d9:4d:ca:fa:a6:66:86:1a:67:55:ea:79:63:f8:
         48:88:51:3f:59:9d:af:7a:9d:59:39:52:31:a0:e4:ce:16:16:
         3a:69:dc:9a:cd:98:b8:1c:78:e8:4d:74:75:2b:8f:93:c7:b0:
         6f:44:32:d6:0c:00:79:6c:12:c4:8e:f7:41:89:cd:d6:2f:a3:
         00:18:ce:2d:4f:72:81:39:c4:fc:d2:34:06:a3:f3:b3:f1:82:
         f2:76:7b:9a:76:23:8e:70:80:83:1e:f0:b4:36:b7:24:64:fd:
         cb:19:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----