Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133302e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3133302e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          476dyUBn/zkO3HmgveYibhJePsr3EfDxvGADXLNKCEQ=
Subject key identifier:   12:15:49:5D:AB:1E:00:EC:71:47:66:6D:5D:DE:3C:89:0D:2D:A7:E8
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       10ACA441FAAB6C56E6C5EA0918074396C770C341
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133302e302e302f31362d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.130.0.0/16 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ac:a4:41:fa:ab:6c:56:e6:c5:ea:09:18:07:43:96:c7:70:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=1215495DAB1E00EC7147666D5DDE3C890D2DA7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:24:0b:90:73:32:05:f9:24:ac:7b:e5:5b:
                    58:bd:7e:60:df:da:2f:7b:03:0f:eb:97:58:a2:3c:
                    d1:e2:c3:4b:63:56:3c:02:e0:4b:ea:4b:0c:04:5c:
                    85:29:78:ed:73:9c:a7:42:d7:76:f6:ea:0c:c6:ca:
                    19:99:d1:d7:fd:07:87:c2:d9:18:20:00:47:cd:a7:
                    d3:09:dc:ef:dc:2c:6e:b9:e9:1a:64:ad:32:1f:58:
                    c5:bf:af:00:1d:c5:24:c4:19:46:6e:22:20:6f:43:
                    aa:21:13:57:57:1e:e6:98:0f:62:1a:4f:4d:d4:0d:
                    25:93:6a:4c:91:5a:ba:7b:88:f9:26:b3:a5:7d:3a:
                    b4:b3:07:48:13:2d:6d:ce:4b:54:9a:93:64:57:22:
                    f1:d0:8b:ea:9a:e0:92:00:f4:f7:71:61:9b:8b:e0:
                    e9:8c:47:79:93:e7:12:d6:b2:61:d6:5b:8e:d6:c6:
                    58:de:dc:83:fb:63:8e:2e:54:e6:ec:b9:b3:e7:df:
                    d4:25:46:fc:97:c7:fc:c2:eb:e5:28:c3:00:6e:49:
                    e6:a5:22:e9:3f:c0:ea:65:23:50:23:eb:01:19:cd:
                    3a:0c:56:54:75:d9:ac:24:5b:25:16:fe:0a:42:72:
                    58:3b:0c:53:71:66:40:c5:6a:1c:b7:bb:f0:8d:b4:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:15:49:5D:AB:1E:00:EC:71:47:66:6D:5D:DE:3C:89:0D:2D:A7:E8
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133302e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:e0:fe:11:1f:26:19:c8:ae:60:68:cc:4e:cf:67:33:c4:
         08:b8:34:d4:cd:b9:74:2b:33:86:89:ca:73:ca:8e:c5:62:54:
         d8:9e:9d:b9:13:42:e8:4a:48:0a:f7:8b:31:2c:5e:91:11:9b:
         88:88:25:c2:e2:86:57:b4:c8:df:1c:11:6a:af:07:47:1f:10:
         3b:6b:21:cb:e9:b5:a9:4b:c3:c4:8b:01:a3:8e:47:99:83:0e:
         03:55:15:14:f8:fc:38:20:3f:14:51:f8:85:15:31:04:f8:29:
         8a:d2:70:9d:6c:3f:87:6c:54:36:3b:ed:65:cb:91:e4:6d:d6:
         af:dc:e2:dc:f2:28:3e:ea:ad:67:2e:82:d6:5e:fc:c2:da:7b:
         c5:8d:81:b6:87:62:44:4b:51:5a:4f:5f:e4:99:3d:49:96:bc:
         9d:61:84:d2:9e:cb:8e:96:c5:b0:25:f5:15:52:5a:85:f4:6e:
         0d:d9:01:8c:5f:04:4a:53:19:52:e8:e9:b2:03:03:ce:4d:39:
         2a:3c:ce:0e:e7:2d:eb:e7:07:3b:29:99:f3:cf:ae:b2:c4:50:
         a9:2a:67:0b:42:01:fa:6f:14:d3:ec:c3:9f:4d:14:ce:0a:b8:
         7e:30:ba:29:6b:26:b4:3b:24:a0:82:74:77:f9:65:55:7a:43:
         0d:97:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----