Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3332203d3e20323636313635.roa
File:                     37322e34342e31362e302f32322d3332203d3e20323636313635.roa (raw, json)
Hash identifier:          4lPHS7qI7bjgGQg3a9t0xecSUqUe/JI/npmb0/VYXLE=
Subject key identifier:   B7:6F:C4:1E:93:FA:E7:4D:5B:5A:1D:0F:AF:AC:4D:78:98:A1:C5:75
Certificate issuer:       /CN=4F4F05BDB8BE98C86EC3BA2C107D382468673695
Certificate serial:       348C09713E3A1E76FCF55A7DAEEE143C5054C680
Authority key identifier: 4F:4F:05:BD:B8:BE:98:C8:6E:C3:BA:2C:10:7D:38:24:68:67:36:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F4F05BDB8BE98C86EC3BA2C107D382468673695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3332203d3e20323636313635.roa
Signing time:             Fri 28 Jun 2024 04:32:51 +0000
ROA not before:           Fri 28 Jun 2024 04:27:51 +0000
ROA not after:            Fri 27 Jun 2025 04:32:51 +0000
asID:                     266165
IP address blocks:        72.44.16.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8c:09:71:3e:3a:1e:76:fc:f5:5a:7d:ae:ee:14:3c:50:54:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F4F05BDB8BE98C86EC3BA2C107D382468673695
        Validity
            Not Before: Jun 28 04:27:51 2024 GMT
            Not After : Jun 27 04:32:51 2025 GMT
        Subject: CN=B76FC41E93FAE74D5B5A1D0FAFAC4D7898A1C575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:4d:f8:cc:90:a2:5f:19:61:6b:76:75:bb:
                    84:ae:e8:af:8b:70:6b:fe:86:4d:6c:71:e1:b7:c3:
                    15:17:14:99:54:ed:ca:58:25:fd:cf:5a:7c:18:23:
                    4b:b4:e7:47:16:e6:ab:6d:41:59:63:a3:53:ba:f4:
                    c9:53:6d:31:af:9c:82:6d:26:5a:0d:a2:ed:66:5f:
                    7e:01:c7:5a:44:35:34:80:82:11:dd:1c:d0:ed:0d:
                    7e:73:18:57:5d:98:4a:33:3f:50:73:2b:c9:0a:86:
                    45:ce:e0:c0:e2:12:5d:b5:c4:84:b1:f9:ab:c0:67:
                    f3:b6:b6:ce:5e:fb:b8:7e:77:b1:d5:6f:9d:18:e6:
                    19:98:5a:9d:3e:a1:c1:a0:a8:3b:7d:37:a3:ab:e8:
                    ec:02:74:8c:ce:4f:79:75:58:e3:01:ad:96:a7:b6:
                    eb:80:80:8f:13:ad:54:6b:34:22:2f:50:85:72:ec:
                    9c:09:57:6d:24:c1:aa:d8:5f:b9:59:62:67:97:c0:
                    ac:bf:d8:ae:72:66:7f:33:e9:3b:b5:1e:10:bb:ce:
                    46:53:78:66:78:fd:e9:63:4d:31:03:37:27:e9:91:
                    26:ff:a6:31:eb:14:4f:0e:c8:96:6c:a6:12:f3:31:
                    d0:9c:4c:4f:3b:70:d4:b1:56:de:26:27:74:6e:63:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6F:C4:1E:93:FA:E7:4D:5B:5A:1D:0F:AF:AC:4D:78:98:A1:C5:75
            X509v3 Authority Key Identifier:
                keyid:4F:4F:05:BD:B8:BE:98:C8:6E:C3:BA:2C:10:7D:38:24:68:67:36:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/4F4F05BDB8BE98C86EC3BA2C107D382468673695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F4F05BDB8BE98C86EC3BA2C107D382468673695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31362e302f32322d3332203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:1b:1a:a8:0e:37:ff:48:14:3b:ad:b6:f3:01:20:b9:61:
         4f:b7:46:30:dd:53:57:33:e0:de:2f:16:55:f0:8c:14:33:34:
         51:57:6d:be:c2:ea:1c:69:a6:d6:92:3e:8b:92:d9:c1:8b:4c:
         32:00:32:d9:88:63:a1:07:cf:77:89:a6:53:3f:c0:97:22:6e:
         d8:5e:49:c5:e8:7e:21:1a:da:93:6a:7b:d2:7c:1a:0f:80:52:
         49:25:2b:4e:06:da:6d:46:4f:b6:63:ea:24:19:7b:5d:fe:6c:
         ca:55:d5:de:17:ff:63:a8:fa:4d:8c:12:2b:0f:d1:dd:c5:b5:
         88:4d:ec:f3:3e:78:8f:8b:c1:66:06:5f:c2:38:68:cc:66:06:
         f4:12:4c:2d:f2:19:a5:b0:45:65:72:50:dd:55:4d:e5:f8:7c:
         c7:a2:c4:b1:ef:fd:b4:f9:e9:ce:c1:52:a8:d5:6e:e2:5b:81:
         ad:ad:2c:2b:1e:ff:66:25:34:e9:3a:3c:d6:b6:60:da:1d:96:
         e8:0d:6c:46:30:79:2b:20:a4:a8:57:69:cb:21:bb:aa:23:79:
         7a:d4:22:4e:5b:0d:aa:25:fb:33:9a:e0:0f:b4:6c:0e:72:a9:
         b0:a7:fe:67:d6:71:db:37:85:b8:28:7e:be:ef:c8:93:7f:a9:
         2f:21:29:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----