Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3136372e3234392e3234382e302f32322d3332203d3e20323635313731.roa
File:                     3136372e3234392e3234382e302f32322d3332203d3e20323635313731.roa (raw, json)
Hash identifier:          j14Zj6U2uqIglkYYCxuZFmx8VXgq9bhR0lXYFd9kysw=
Subject key identifier:   0F:61:1B:F9:0B:F6:79:7C:83:AB:27:50:B9:A6:6D:76:4F:87:7F:6A
Certificate issuer:       /CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Certificate serial:       6BE62BC4BD91A3EB70D8185CE0982FE9080717EF
Authority key identifier: 29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3136372e3234392e3234382e302f32322d3332203d3e20323635313731.roa
Signing time:             Wed 21 Aug 2024 14:59:23 +0000
ROA not before:           Wed 21 Aug 2024 14:54:23 +0000
ROA not after:            Wed 20 Aug 2025 14:59:23 +0000
asID:                     265171
IP address blocks:        167.249.248.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e6:2b:c4:bd:91:a3:eb:70:d8:18:5c:e0:98:2f:e9:08:07:17:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
        Validity
            Not Before: Aug 21 14:54:23 2024 GMT
            Not After : Aug 20 14:59:23 2025 GMT
        Subject: CN=0F611BF90BF6797C83AB2750B9A66D764F877F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:b4:61:b6:92:57:21:0f:ed:cd:46:2a:82:
                    00:83:3e:a8:12:f4:8d:92:20:8b:b9:47:0d:7c:29:
                    79:2a:27:d7:b4:b1:08:10:ef:04:fc:f3:05:5a:4b:
                    4b:ac:31:b1:70:4f:d0:53:f6:d7:9e:d3:ab:01:7e:
                    88:c4:9e:9f:47:b1:10:60:f0:c1:21:45:13:e5:47:
                    e6:a5:bb:e6:fb:ff:2c:ba:22:0a:ee:5a:aa:10:75:
                    01:c4:58:65:f9:b9:aa:49:33:3d:5e:08:ae:36:37:
                    ee:b1:d5:9a:e7:20:9c:30:5a:a5:1c:71:1a:a1:b3:
                    f4:df:32:1e:4d:aa:95:f2:13:ca:e5:45:ce:4b:d3:
                    ec:a1:54:36:c4:a6:61:55:cf:b0:cc:ba:1c:2d:69:
                    6e:e3:18:f5:29:a6:44:3b:e8:e8:e8:de:69:97:05:
                    f5:62:c5:a5:56:f3:bd:a0:3f:5c:95:43:cf:41:13:
                    30:d4:55:15:34:b4:e7:08:a0:24:7a:76:fe:12:58:
                    1c:93:fb:09:1a:fe:02:c6:a1:c1:f3:53:9f:3d:3d:
                    0b:ef:74:cd:5e:e2:6c:47:6d:55:13:03:00:a0:0e:
                    d8:b2:0f:89:24:e6:5a:dc:fb:83:2f:6f:98:a8:f3:
                    8d:f6:3d:f5:3d:90:a6:3b:8d:25:39:d3:53:f5:e2:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:61:1B:F9:0B:F6:79:7C:83:AB:27:50:B9:A6:6D:76:4F:87:7F:6A
            X509v3 Authority Key Identifier:
                keyid:29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3136372e3234392e3234382e302f32322d3332203d3e20323635313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:3e:6b:0a:5f:9e:91:1c:5a:e2:9d:59:9c:d8:c3:48:8d:9e:
         43:27:1d:cb:84:aa:75:5d:8c:0f:36:18:ad:4f:c1:8a:ec:76:
         d7:5e:74:4b:e3:bf:d3:94:1b:e2:cc:4d:39:1f:c0:3c:a7:4b:
         39:34:ba:34:f4:86:9e:bf:ef:ff:28:72:bc:5c:26:e5:ff:14:
         6c:27:ca:c2:6f:e1:2c:fc:69:43:4a:78:69:27:d4:93:d9:c9:
         6a:8e:39:5e:53:ae:a3:77:c9:48:76:42:a3:1f:26:f7:90:07:
         4f:d5:9b:94:1b:71:65:0b:3f:ef:ea:25:d2:95:1a:2f:00:2f:
         04:a5:94:60:00:09:d9:49:3d:fd:35:5c:79:ab:e4:18:12:64:
         91:ba:4c:8f:c6:fb:6d:8e:c4:be:4d:23:d1:73:84:23:05:d2:
         fa:56:82:26:c1:f2:76:4e:8b:ac:d8:19:d0:95:c9:14:6e:dd:
         53:50:98:64:4f:5f:db:fd:a6:dd:27:2a:0a:03:73:a9:7a:49:
         e2:fd:9a:6b:ce:7a:10:44:db:8e:c5:6b:1e:d2:71:fd:0f:23:
         0a:f0:3f:29:09:9d:09:4a:69:c5:21:6a:03:e3:ed:41:06:61:
         64:a7:26:b1:96:39:94:04:4e:75:92:3a:59:1b:93:48:9f:ab:
         ab:02:17:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----