Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3230382e302f32312d3231203d3e203238313635.roa
File:                     3138372e36322e3230382e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          q7tcqiGAr2/8R8n4f1zYVLNai+TogLoKCnftRL25UhE=
Subject key identifier:   4C:22:CA:72:21:68:40:8C:46:87:AD:59:A5:3A:2D:42:7B:4A:73:CB
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       207251F1A1D5BEFB4DBF6E08E26CDEFB14D338C0
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3230382e302f32312d3231203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:23 +0000
ROA not before:           Wed 31 Jul 2024 22:20:23 +0000
ROA not after:            Wed 30 Jul 2025 22:25:23 +0000
asID:                     28165
IP address blocks:        187.62.208.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:51:f1:a1:d5:be:fb:4d:bf:6e:08:e2:6c:de:fb:14:d3:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:23 2024 GMT
            Not After : Jul 30 22:25:23 2025 GMT
        Subject: CN=4C22CA722168408C4687AD59A53A2D427B4A73CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:e6:c8:29:50:98:e3:65:77:54:73:63:d2:
                    4c:46:b4:69:9a:45:e0:fc:d5:ff:07:fa:2a:6d:b8:
                    f7:a1:9b:0a:ee:16:a9:77:ff:65:38:f5:1a:ca:b6:
                    14:e3:43:14:0e:30:88:7a:45:c9:65:c4:1f:d8:41:
                    ca:47:8d:92:1b:ff:97:af:b6:79:d9:ea:08:cc:01:
                    73:0f:4d:68:c0:45:8d:4e:b2:33:9f:8b:66:69:88:
                    73:76:85:b7:67:66:a0:d2:78:65:e3:77:8a:eb:a8:
                    e8:d3:f5:58:c3:70:39:b8:98:d8:3c:81:bd:f3:ba:
                    bb:fe:2e:68:ec:bd:fa:0a:c2:10:cb:8f:f8:a1:d7:
                    7e:17:88:21:88:44:86:7c:aa:b1:cf:3d:db:be:4c:
                    1f:d3:03:a7:d3:f6:cd:46:1d:1c:f6:6f:f1:d0:e7:
                    ee:30:4c:ec:20:51:99:a7:05:18:35:de:bf:f7:5e:
                    ed:2e:a8:de:bd:2c:bc:d0:fa:1b:13:e4:59:17:e4:
                    4c:cd:51:d4:2e:e0:58:6e:c2:d5:9b:37:b5:eb:8d:
                    b3:d6:5b:3c:25:6a:1b:de:21:e5:d2:71:21:94:f3:
                    27:6d:9d:7b:71:34:ff:ec:0e:69:47:ec:de:e6:1c:
                    12:27:e5:21:d9:76:4b:38:11:4c:ee:59:04:11:5e:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:22:CA:72:21:68:40:8C:46:87:AD:59:A5:3A:2D:42:7B:4A:73:CB
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3230382e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:c7:5e:a7:60:db:54:15:4b:67:8e:9f:3f:b6:61:57:bd:
         2e:7f:96:a8:4a:a1:a4:64:0a:0e:1f:4d:26:2e:13:0e:39:3c:
         b4:2b:5f:60:94:b4:da:9e:95:e1:fb:31:c1:09:81:19:1b:31:
         8b:ff:b5:1c:75:0b:bd:c4:aa:5f:50:be:35:cf:99:ca:33:db:
         2f:e7:15:3b:2f:a5:14:1e:70:ea:c4:d2:00:ba:8a:76:34:01:
         e1:b4:ff:ab:2b:1c:a9:f9:19:b3:56:fe:35:87:9f:79:9a:2e:
         cd:37:eb:7d:ea:4a:9b:1c:a9:fd:c6:13:c7:17:dd:40:22:81:
         46:da:36:c4:3a:04:49:e3:5a:06:00:aa:fa:87:31:7c:cb:5b:
         76:cb:37:d7:84:6e:06:d4:43:97:e8:56:f4:64:d8:c8:bf:0d:
         b1:65:a7:11:1d:27:47:e1:0e:89:c9:6c:a4:99:49:ca:8c:27:
         eb:76:02:20:12:4e:1a:ff:99:f3:08:5d:88:76:25:05:af:a0:
         c6:a5:ea:7c:a8:47:4a:c7:ab:15:4a:2f:1f:91:29:80:da:32:
         18:fc:34:d3:40:be:77:8f:f3:3d:0a:2f:75:5a:1a:05:24:39:
         c8:39:d3:82:32:43:f3:ae:c0:3e:98:fe:d4:a1:98:ed:aa:01:
         07:21:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----