Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3231362e302f32312d3231203d3e203238313635.roa
File:                     3138372e36322e3231362e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          Q17Wq0iCmftCRnrL+q61n3rNA9bX/phH0AkfB6WFpGQ=
Subject key identifier:   63:C5:65:F4:1B:F4:FF:DA:D7:3A:87:17:6B:FA:7E:F8:C4:57:61:59
Certificate issuer:       /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial:       4A5D0F4ED0F7CA07B3592D9060377F5CA750623E
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3231362e302f32312d3231203d3e203238313635.roa
Signing time:             Wed 31 Jul 2024 22:25:18 +0000
ROA not before:           Wed 31 Jul 2024 22:20:18 +0000
ROA not after:            Wed 30 Jul 2025 22:25:18 +0000
asID:                     28165
IP address blocks:        187.62.216.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:0f:4e:d0:f7:ca:07:b3:59:2d:90:60:37:7f:5c:a7:50:62:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
        Validity
            Not Before: Jul 31 22:20:18 2024 GMT
            Not After : Jul 30 22:25:18 2025 GMT
        Subject: CN=63C565F41BF4FFDAD73A87176BFA7EF8C4576159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:8c:ca:5e:82:0a:97:0b:c5:43:e7:b3:cd:
                    da:c6:78:f4:3d:0d:02:61:b8:22:75:00:73:77:a6:
                    6f:94:0c:6a:1f:ae:a6:dd:17:c8:0f:ea:21:7b:71:
                    89:20:2a:ee:d1:dd:22:69:24:98:98:95:f6:32:98:
                    e4:1f:3a:9f:fe:8c:fe:71:aa:d4:3d:bf:9f:75:19:
                    6a:e6:bd:2a:5e:b8:06:48:0c:aa:22:cb:eb:0f:ec:
                    cb:bf:36:b6:57:c8:25:61:30:be:97:05:a6:e9:ae:
                    e9:81:fe:44:c3:3b:9e:e4:13:c3:72:18:e7:01:8d:
                    16:80:03:ed:d6:fb:53:5c:61:2c:49:c7:93:4c:a3:
                    f7:6b:5b:f3:80:a9:5d:50:1f:08:a0:54:b6:5a:67:
                    69:70:43:2e:f2:36:a7:89:08:1f:a2:d7:0e:a7:8b:
                    f9:d0:83:9d:c7:9c:87:1b:06:c7:11:9b:81:98:2e:
                    b5:17:e4:73:d6:81:e8:14:f5:f8:64:a7:0b:cd:13:
                    d5:5e:c2:9d:43:a5:7d:fb:bd:3c:5f:d1:a2:4e:f6:
                    75:49:80:f0:f1:2f:0a:ae:24:b7:7e:a1:4d:ed:7c:
                    30:99:a8:3d:76:80:16:2f:ec:d7:74:8e:33:ab:de:
                    59:59:96:ef:98:a1:3c:59:65:1e:17:4b:90:5c:46:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:65:F4:1B:F4:FF:DA:D7:3A:87:17:6B:FA:7E:F8:C4:57:61:59
            X509v3 Authority Key Identifier:
                keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3138372e36322e3231362e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:a6:8e:36:34:3b:2b:3b:49:64:e6:5c:27:4c:4b:9a:62:88:
         bb:25:36:86:21:03:e4:d4:ca:36:59:42:b5:b3:d0:58:00:fe:
         c1:1d:49:db:5f:cb:62:77:72:fd:f6:da:fa:c0:e1:56:5e:d0:
         47:b8:0c:30:a9:10:37:79:46:d6:05:af:43:71:3f:63:2e:fa:
         fe:c9:99:40:da:10:48:87:d0:0b:da:18:76:78:3c:09:e4:49:
         61:6e:f7:c8:2d:53:fa:4c:d4:a7:12:73:cc:db:0e:47:dc:b0:
         5a:53:73:25:f7:da:6f:5b:11:44:d2:dc:1c:3e:87:10:8f:48:
         d9:10:54:03:6f:8c:26:b1:31:f5:45:dd:85:0a:5c:44:7b:33:
         fe:d5:6f:04:f1:70:9c:74:cd:fa:57:e6:9c:89:7e:27:d4:eb:
         eb:3f:ad:5f:ce:00:14:70:f7:a9:df:41:4c:fd:dc:52:b9:a4:
         47:82:e1:ca:bb:df:02:68:58:1c:ed:d1:df:a1:02:ec:f3:ae:
         2f:ad:a1:1e:fc:52:f8:ec:5f:6d:10:27:c2:e2:84:d0:0e:51:
         47:93:e4:6f:ed:df:a5:1d:13:9a:c5:4a:47:e5:bf:6a:1c:73:
         a7:48:25:1f:21:0e:c6:29:01:8e:d1:d7:f5:fe:ea:4d:82:82:
         18:9b:4a:f5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSl0PTtD3ygezWS2QYDd/XKdQYj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMThaFw0yNTA3MzAyMjI1MThaMDMxMTAvBgNV
BAMTKDYzQzU2NUY0MUJGNEZGREFENzNBODcxNzZCRkE3RUY4QzQ1NzYxNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+ozKXoIKlwvFQ+ezzdrGePQ9
DQJhuCJ1AHN3pm+UDGofrqbdF8gP6iF7cYkgKu7R3SJpJJiYlfYymOQfOp/+jP5x
qtQ9v591GWrmvSpeuAZIDKoiy+sP7Mu/NrZXyCVhML6XBabprumB/kTDO57kE8Ny
GOcBjRaAA+3W+1NcYSxJx5NMo/drW/OAqV1QHwigVLZaZ2lwQy7yNqeJCB+i1w6n
i/nQg53HnIcbBscRm4GYLrUX5HPWgegU9fhkpwvNE9Vewp1DpX37vTxf0aJO9nVJ
gPDxLwquJLd+oU3tfDCZqD12gBYv7Nd0jjOr3llZlu+YoTxZZR4XS5BcRn9bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY8Vl9Bv0/9rXOocXa/p++MRXYVkwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzODM3MmUzNjMyMmUzMjMxMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuz7YMA0GCSqGSIb3DQEBCwUAA4IBAQBTpo42NDsr
O0lk5lwnTEuaYoi7JTaGIQPk1Mo2WUK1s9BYAP7BHUnbX8tid3L99tr6wOFWXtBH
uAwwqRA3eUbWBa9DcT9jLvr+yZlA2hBIh9AL2hh2eDwJ5ElhbvfILVP6TNSnEnPM
2w5H3LBaU3Ml99pvWxFE0twcPocQj0jZEFQDb4wmsTH1Rd2FClxEezP+1W8E8XCc
dM36V+aciX4n1OvrP61fzgAUcPep30FM/dxSuaRHguHKu98CaFgc7dHfoQLs864v
raEe/FL47F9tECfC4oTQDlFHk+Rv7d+lHROaxUpH5b9qHHOnSCUfIQ7GKQGO0df1
/upNgoIYm0r1
-----END CERTIFICATE-----