Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa
File:                     3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa (raw, json)
Hash identifier:          IuImhd1R/hwczSkCMvKmHxOJLa0SdwYCCHuNFt/7kP8=
Subject key identifier:   A9:E3:99:D0:AA:A2:10:78:C8:C2:04:54:C7:A1:EC:8D:28:94:FB:A0
Certificate issuer:       /CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
Certificate serial:       485368083A1C6A6194257828E7709402AA65F542
Authority key identifier: 29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa
Signing time:             Fri 16 Aug 2024 15:06:59 +0000
ROA not before:           Fri 16 Aug 2024 15:01:59 +0000
ROA not after:            Fri 15 Aug 2025 15:06:59 +0000
asID:                     271296
IP address blocks:        192.145.220.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:53:68:08:3a:1c:6a:61:94:25:78:28:e7:70:94:02:aa:65:f5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258
        Validity
            Not Before: Aug 16 15:01:59 2024 GMT
            Not After : Aug 15 15:06:59 2025 GMT
        Subject: CN=A9E399D0AAA21078C8C20454C7A1EC8D2894FBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:2c:f3:bf:7d:cb:f8:c1:c8:1a:27:b4:53:
                    41:93:17:d7:d4:5d:4a:86:44:90:5a:49:16:a1:d1:
                    53:54:be:6e:40:e4:f2:7a:10:f0:9b:86:69:e0:f9:
                    be:9f:dc:66:46:65:28:12:aa:60:66:d4:30:cc:42:
                    3e:72:6e:b2:e3:cf:90:6d:96:e4:86:c9:db:7f:76:
                    cb:bf:2d:3c:71:62:6f:2d:9c:20:3f:d9:c6:fc:c8:
                    1a:75:4d:8d:33:aa:f0:25:d1:33:99:11:b5:5f:46:
                    9d:60:44:48:97:35:17:08:40:91:e7:f0:4d:f7:45:
                    71:ea:ee:b5:55:fc:8c:2d:6e:a5:b4:cd:e5:6b:1a:
                    5f:2d:04:ca:0c:b9:31:a1:d5:89:fa:1e:49:e7:d8:
                    a1:d9:7b:01:10:0f:e0:92:21:fc:db:c0:b6:88:17:
                    4a:34:79:9c:ae:84:b8:31:6d:d6:da:40:8e:bd:59:
                    9d:59:3c:6d:29:05:c5:d4:8b:39:fa:b7:0e:60:b3:
                    00:2d:d7:ad:1b:37:5c:87:b4:9c:86:2f:6d:16:f3:
                    c7:b7:b1:e8:27:89:66:a6:54:47:ef:e5:12:51:7f:
                    2a:54:26:aa:37:c5:be:bd:e9:9c:bd:0f:81:d7:50:
                    b6:8e:ab:ea:9e:9c:43:8d:79:e3:15:04:c4:24:ea:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:99:D0:AA:A2:10:78:C8:C2:04:54:C7:A1:EC:8D:28:94:FB:A0
            X509v3 Authority Key Identifier:
                keyid:29:E0:C1:C6:BE:F4:7B:9A:CA:2A:F1:3B:8A:C8:F7:4F:E4:D4:A2:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E0C1C6BEF47B9ACA2AF13B8AC8F74FE4D4A258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gx276Y8sWkN9ZErYg1HtsZocnLwmVgKtNkR1Wq2S8m9o/0/3139322e3134352e3232302e302f32322d3332203d3e20323731323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:6e:79:11:25:ac:4c:1e:a6:4a:65:33:cd:dc:c7:8e:1d:
         ac:44:f4:bb:d4:11:48:4f:49:55:36:d6:a4:a9:2c:6e:b6:ae:
         74:8b:74:71:2f:80:ed:ab:35:25:e6:bc:83:30:60:ff:48:d2:
         14:31:8b:cd:95:d9:44:5a:90:e7:c5:ec:fb:70:80:d9:5e:f4:
         4d:af:ed:71:e8:06:55:62:6e:63:09:77:4d:9e:d7:d8:62:31:
         fa:ed:cd:14:44:60:88:ec:ae:a6:76:ea:e5:35:f1:03:a1:96:
         25:f0:25:c7:50:16:82:d5:58:71:8b:76:bd:08:4d:1e:8e:ac:
         ac:78:41:58:ed:a1:6c:2a:4e:81:23:ee:76:30:d7:6b:53:4f:
         51:c3:94:69:61:d0:8f:39:ca:84:61:fb:91:26:56:4c:de:7e:
         73:3d:99:76:ad:82:f7:66:0b:ff:52:40:4e:07:6f:f0:b0:b8:
         bf:e3:33:f5:e2:c6:2f:9f:4e:fa:9c:f6:14:e2:87:f8:f2:8b:
         7d:16:00:ef:70:24:fa:69:8f:13:86:79:d0:b4:3c:6e:05:4c:
         13:bd:c2:c8:53:19:63:f4:e2:1a:e9:1f:e9:dc:44:50:3d:50:
         91:bd:33:e9:42:1e:3c:ea:a2:af:f1:73:9e:6b:4b:9f:57:77:
         f6:b3:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----