Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3132392e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          xF35W7QDvlG4nFcHP3oGeCF4Z2R1ALdsZzrbSNzP9Qs=
Subject key identifier:   04:33:19:EE:5E:78:A7:E4:B1:17:41:81:31:1F:47:07:9B:86:24:7B
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       2FD1AF684B76281759291E338F0176FBA29D9292
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.129.0.0/16 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d1:af:68:4b:76:28:17:59:29:1e:33:8f:01:76:fb:a2:9d:92:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=043319EE5E78A7E4B1174181311F47079B86247B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:20:59:09:28:5e:6e:50:4d:05:93:1a:66:
                    35:28:10:12:0f:27:08:e8:3a:af:55:98:9c:14:fa:
                    fd:07:ba:38:71:8d:19:98:35:fe:c8:93:ed:7c:b0:
                    99:81:c1:3c:fb:6e:ff:3e:e2:5d:70:fd:e7:40:f6:
                    83:9a:b7:af:d8:18:c7:6b:55:67:f6:9b:25:de:c5:
                    9a:ad:be:87:fa:d2:3e:d5:bf:b8:0b:ad:ad:b2:ca:
                    b5:17:8f:d3:5a:f2:d4:81:0c:3b:3c:6e:41:b7:67:
                    1f:da:bf:30:85:5a:d9:31:14:ba:55:d5:0a:48:9d:
                    76:b6:80:c6:07:d1:9a:6c:34:83:81:9a:31:7b:a4:
                    b7:f3:a6:79:9f:99:fb:e5:d5:19:05:28:c5:d0:92:
                    55:5e:58:37:a0:27:3e:6c:75:84:32:3b:39:2f:67:
                    75:c0:ea:83:87:5f:63:c1:cd:84:df:8a:f9:85:ac:
                    ab:69:61:0d:93:01:11:09:4b:d3:b1:91:ae:5f:d8:
                    d7:43:a2:86:dd:62:34:e8:a6:06:c8:4d:92:49:bc:
                    e9:be:0c:4f:fd:8c:96:71:61:1d:fc:44:73:24:5e:
                    69:79:99:fc:f3:40:b6:e9:71:c5:97:a2:8a:c4:15:
                    f2:fd:d3:8d:38:cf:93:ad:f9:2e:85:94:fe:e2:e5:
                    d0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:33:19:EE:5E:78:A7:E4:B1:17:41:81:31:1F:47:07:9B:86:24:7B
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132392e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:2c:8e:64:67:cb:31:7b:52:fc:09:88:15:c7:29:9f:d8:32:
         ef:9d:21:8f:85:81:b4:a3:57:40:46:03:82:f5:ed:eb:92:e1:
         65:5b:81:f1:5b:84:cc:91:41:e8:6d:08:67:54:7e:de:9a:c0:
         c5:c7:c6:7d:c0:8b:81:9e:8a:95:2e:99:ca:17:da:86:0b:f1:
         a6:c7:80:c0:32:1d:1f:e9:11:23:d6:b3:2f:6b:ff:e5:bd:33:
         aa:6d:40:92:53:6f:0c:7a:a9:9e:0b:52:84:fa:d1:08:be:81:
         b1:03:48:bb:ad:ad:bb:ee:5a:cb:a6:94:ed:95:86:77:ba:c1:
         4f:58:ca:22:f9:8c:2d:28:1a:a4:fe:5b:f9:f1:cf:83:ee:25:
         4c:f2:e3:21:96:85:12:04:63:1c:cb:9c:46:bf:a2:a5:e0:1f:
         bb:2d:10:5a:31:a0:a1:0f:b9:ac:8d:20:23:a8:61:96:a2:50:
         b3:2b:89:56:2f:41:36:41:ef:36:d5:75:87:d5:f3:ff:c9:3b:
         ef:b9:77:f7:94:4b:86:e0:eb:40:67:73:f1:80:9e:79:d6:44:
         c5:b5:2f:1c:d2:fc:e6:1c:d9:d1:a9:2c:9a:9d:ea:45:65:c4:
         5c:e1:88:e8:ed:bd:34:a4:f5:2e:03:a5:d3:4b:cb:7d:11:68:
         50:d1:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----