Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133312e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3133312e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Lc5LEtF68KwKexEiJbbQQYWAXdCl/SmnyKkv06rQUms=
Subject key identifier:   4D:AD:55:79:29:5A:31:33:DB:D8:91:FB:1B:51:A8:44:EC:91:2B:4F
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       33F9E33F0900F7A8C8599A39377EF59FCD1ECCBF
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133312e302e302f31362d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:08:59 +0000
ROA not before:           Thu 08 Aug 2024 03:03:59 +0000
ROA not after:            Thu 07 Aug 2025 03:08:59 +0000
asID:                     1916
IP address blocks:        200.131.0.0/16 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f9:e3:3f:09:00:f7:a8:c8:59:9a:39:37:7e:f5:9f:cd:1e:cc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:03:59 2024 GMT
            Not After : Aug  7 03:08:59 2025 GMT
        Subject: CN=4DAD5579295A3133DBD891FB1B51A844EC912B4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:0a:e4:f4:c9:1c:f6:e0:58:19:0b:96:00:
                    cf:83:b1:4c:5e:da:3c:a4:72:14:c2:2d:2f:46:7a:
                    3e:e5:3e:10:c1:57:8f:28:b5:68:32:bf:21:03:29:
                    a8:e5:58:e2:c7:a2:0e:fc:68:77:aa:29:ce:16:ee:
                    16:db:a0:64:79:9e:ce:1f:7e:10:71:08:76:5e:df:
                    98:89:ac:ac:74:f8:fb:44:53:56:13:fd:ab:f8:4a:
                    9a:9d:ee:f9:3e:ac:12:94:30:e5:66:ef:63:f3:75:
                    20:47:df:95:ba:4b:8d:28:e9:34:98:01:58:24:ae:
                    3e:5e:df:c8:78:27:b9:9e:4d:72:6f:50:7f:3d:bb:
                    03:37:ed:0d:5e:00:a1:12:83:56:c0:46:da:5b:86:
                    44:1e:2a:55:c0:0c:7e:bc:34:40:79:46:fb:54:e0:
                    33:95:14:92:61:81:2f:d6:72:55:85:0c:30:9b:4f:
                    63:bc:6e:07:87:15:c5:ff:38:f7:67:fe:10:9b:03:
                    03:63:20:34:d6:94:b4:b7:e3:4c:df:72:08:25:81:
                    ec:3f:0d:51:f8:3d:69:fb:c7:76:9c:47:ab:9f:19:
                    85:aa:c9:3f:2b:25:85:e8:e7:fd:8c:e2:61:5d:93:
                    28:bf:d6:5c:9e:bf:a3:65:4f:d0:fb:94:97:10:0c:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AD:55:79:29:5A:31:33:DB:D8:91:FB:1B:51:A8:44:EC:91:2B:4F
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133312e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:30:93:35:b1:47:5e:05:a1:5c:3a:b2:84:b4:49:b7:fa:07:
         e0:8f:74:f7:d0:98:ff:b5:f2:b4:2d:17:8d:c7:6a:e7:a5:ba:
         dc:3a:88:43:2e:00:98:1f:9d:57:5f:dc:ff:30:6b:ca:03:a7:
         f3:77:2f:cc:6d:17:7e:f7:c5:e9:13:64:33:44:06:35:7f:49:
         7c:8f:05:32:90:ea:b3:e4:3b:0e:6e:aa:04:6e:fc:10:02:d3:
         c4:ac:ff:b2:10:2e:d5:2f:b7:d9:87:40:a5:3d:e9:b7:26:bf:
         2f:9a:15:8f:01:b2:cb:9f:52:78:5a:b3:56:68:78:4c:f7:28:
         14:dd:18:73:d1:a5:39:3f:be:55:34:f2:a4:39:33:83:82:47:
         03:90:73:2d:82:3a:f5:c8:77:64:90:61:67:06:f6:cc:2f:ee:
         3e:61:d7:f2:76:86:41:90:6d:cd:f0:ad:1b:9d:78:b4:dd:72:
         be:57:81:df:13:a4:ec:40:e1:8b:43:1e:5b:1f:ca:49:e9:cb:
         42:56:e0:eb:38:f6:41:43:44:bd:7a:72:b4:d1:0e:b2:3e:af:
         fa:ad:19:9c:19:81:2f:f7:d4:ff:7d:c0:61:f7:20:1e:6a:14:
         85:24:0c:1d:df:d2:e2:8f:76:5d:b8:9e:4c:34:e9:44:35:59:
         6e:de:43:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUM/njPwkA96jIWZo5N371n80ezL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzAzNTlaFw0yNTA4MDcwMzA4NTlaMDMxMTAvBgNV
BAMTKDREQUQ1NTc5Mjk1QTMxMzNEQkQ4OTFGQjFCNTFBODQ0RUM5MTJCNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmQrk9Mkc9uBYGQuWAM+DsUxe
2jykchTCLS9Gej7lPhDBV48otWgyvyEDKajlWOLHog78aHeqKc4W7hbboGR5ns4f
fhBxCHZe35iJrKx0+PtEU1YT/av4Spqd7vk+rBKUMOVm72PzdSBH35W6S40o6TSY
AVgkrj5e38h4J7meTXJvUH89uwM37Q1eAKESg1bARtpbhkQeKlXADH68NEB5RvtU
4DOVFJJhgS/WclWFDDCbT2O8bgeHFcX/OPdn/hCbAwNjIDTWlLS340zfcgglgew/
DVH4PWn7x3acR6ufGYWqyT8rJYXo5/2M4mFdkyi/1lyev6NlT9D7lJcQDOhPAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUTa1VeSlaMTPb2JH7G1GoROyRK08wHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzIzMDMwMmUzMTMzMzEyZTMwMmUzMDJmMzEzNjJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwDIgzANBgkqhkiG9w0BAQsFAAOCAQEABzCTNbFHXgWhXDqy
hLRJt/oH4I9099CY/7XytC0Xjcdq56W63DqIQy4AmB+dV1/c/zBrygOn83cvzG0X
fvfF6RNkM0QGNX9JfI8FMpDqs+Q7Dm6qBG78EALTxKz/shAu1S+32YdApT3ptya/
L5oVjwGyy59SeFqzVmh4TPcoFN0Yc9GlOT++VTTypDkzg4JHA5BzLYI69ch3ZJBh
Zwb2zC/uPmHX8naGQZBtzfCtG514tN1yvleB3xOk7EDhi0MeWx/KSenLQlbg6zj2
QUNEvXpytNEOsj6v+q0ZnBmBL/fU/33AYfcgHmoUhSQMHd/S4o92XbieTDTpRDVZ
bt5DLw==
-----END CERTIFICATE-----