Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa
File:                     3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa (raw, json)
Hash identifier:          qpM6RjAKEV2LW6zD/bzz/vixbiov+nvNtFDniTM0Lc8=
Subject key identifier:   F6:4C:51:F7:79:EB:F0:82:BB:13:65:6D:C8:1F:CA:E2:26:BD:DB:AF
Certificate issuer:       /CN=7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4
Certificate serial:       25F6C573128CFB8D0458CE682BBA4CB303BCE098
Authority key identifier: 7F:17:5C:48:BF:0E:2B:F9:2E:CE:B4:5C:8E:8D:5A:B9:31:AA:29:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa
Signing time:             Thu 04 Apr 2024 00:24:52 +0000
ROA not before:           Thu 04 Apr 2024 00:19:52 +0000
ROA not after:            Thu 03 Apr 2025 00:24:52 +0000
asID:                     262549
IP address blocks:        177.72.176.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f6:c5:73:12:8c:fb:8d:04:58:ce:68:2b:ba:4c:b3:03:bc:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4
        Validity
            Not Before: Apr  4 00:19:52 2024 GMT
            Not After : Apr  3 00:24:52 2025 GMT
        Subject: CN=F64C51F779EBF082BB13656DC81FCAE226BDDBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:ef:b5:87:85:82:7b:dd:5c:21:42:d7:28:
                    af:d6:dc:06:4f:16:52:a9:f2:00:af:bc:03:d1:38:
                    73:16:8d:a8:69:00:e4:8a:80:0d:93:31:2e:29:21:
                    74:8d:8b:41:0a:00:d7:ae:8b:73:32:ce:54:3a:c8:
                    79:d0:f9:d5:a3:86:87:73:0c:22:a3:80:9d:dd:7d:
                    68:27:3c:71:80:a5:53:a6:65:14:4d:08:f9:7b:ea:
                    e6:e2:a1:b8:7f:ee:1f:73:ab:e8:75:38:2a:5d:b7:
                    2a:62:70:37:8d:c7:b8:68:e7:41:97:c8:4d:97:5a:
                    6a:63:62:74:9c:a0:76:4b:80:6c:63:00:68:8f:ce:
                    ab:02:1a:5c:7c:2b:d0:3c:ff:69:3e:5d:8c:b6:f4:
                    25:ac:6f:62:57:03:df:0d:7f:2e:13:b6:f3:33:d2:
                    7b:30:87:bb:d6:0e:30:79:ae:8c:fe:3a:91:6c:23:
                    a2:f7:57:f0:2a:91:69:41:86:0b:f9:b4:bd:f5:a8:
                    a4:4d:84:2a:bf:a1:ae:75:73:81:82:15:f8:6f:29:
                    5d:a3:ec:ee:9e:c3:32:cb:ec:9a:0c:b9:95:20:b5:
                    7b:41:60:86:a9:dd:de:6d:ee:c4:1f:a1:7a:1b:74:
                    f5:e7:19:d9:d6:5e:77:dd:b2:6d:4e:ae:02:ac:8e:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:51:F7:79:EB:F0:82:BB:13:65:6D:C8:1F:CA:E2:26:BD:DB:AF
            X509v3 Authority Key Identifier:
                keyid:7F:17:5C:48:BF:0E:2B:F9:2E:CE:B4:5C:8E:8D:5A:B9:31:AA:29:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F175C48BF0E2BF92ECEB45C8E8D5AB931AA29F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/1/3137372e37322e3137362e302f32312d3231203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:60:b8:3c:37:c9:e6:c9:a0:49:fb:53:b0:97:b1:46:9f:09:
         91:28:09:fb:60:35:15:3c:55:81:47:c6:ef:0b:5b:15:2e:f3:
         9d:c1:f6:c8:82:ec:56:ab:d5:71:5f:65:fe:63:ee:99:f5:b0:
         b2:9f:d9:e1:8c:29:c0:da:cf:d5:6a:f3:cc:c4:75:97:4b:bb:
         17:da:21:92:55:85:52:3c:87:e0:a3:c9:b4:3c:c6:70:a4:78:
         a7:73:ec:58:eb:f0:f5:a2:b7:ce:38:ea:48:c6:3e:0e:b3:22:
         8f:6b:8f:6e:4d:3a:f4:54:0d:1b:7e:5c:ed:e3:d4:c4:c8:7c:
         43:a8:9a:41:88:e6:6a:24:5e:8b:a8:08:76:ff:3c:04:68:4a:
         37:0b:73:48:c4:fc:fc:2e:66:18:f0:24:d5:f3:72:97:c7:db:
         f9:1b:31:10:44:ba:80:b9:a6:07:d4:20:cd:a9:cb:cf:c7:c2:
         43:00:ff:46:d0:1d:a8:72:9c:94:3a:d6:94:bb:5d:cb:62:d0:
         0d:12:fa:bb:ed:94:a3:18:8f:04:b0:9e:54:7d:74:d1:02:84:
         03:f2:82:5e:ee:b0:44:ba:5b:6d:4c:25:d5:7a:06:93:36:52:
         81:31:0b:2f:19:65:ca:63:0f:fd:6d:89:bf:8f:bc:5d:f6:a5:
         91:07:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----