Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3137302e37392e3231322e302f32322d3332203d3e2031393136.roa
File:                     3137302e37392e3231322e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          cT0xMXd3RTX5Z1r5M5N9CKjoOyzJ2pFvR+0fXaTOO6k=
Subject key identifier:   BE:FC:74:54:CB:82:62:5B:BF:69:1A:1E:B1:CB:92:BC:4A:3A:AB:23
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       2EA545B7A53130369538B74842E181E1311F4860
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3137302e37392e3231322e302f32322d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     1916
IP address blocks:        170.79.212.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:45:b7:a5:31:30:36:95:38:b7:48:42:e1:81:e1:31:1f:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=BEFC7454CB82625BBF691A1EB1CB92BC4A3AAB23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:32:c9:5d:ba:a3:25:ed:df:ee:cd:36:a6:
                    15:e2:10:ca:3e:0f:9b:3f:d8:8a:36:13:52:47:2b:
                    e7:c7:67:7e:dc:b6:c0:d6:7c:74:41:b6:fc:0d:32:
                    dd:9e:cd:f6:da:1b:a6:88:11:57:d6:a4:b6:eb:9f:
                    e2:a9:9c:83:39:5f:b3:20:d6:a1:35:94:8a:aa:34:
                    10:a0:6a:a9:7b:48:97:eb:68:d6:c4:a1:9e:15:d7:
                    4d:f9:6f:86:94:d1:fc:14:94:14:c6:19:14:b2:79:
                    b8:bf:4b:21:e3:49:70:50:3a:bb:80:f3:59:42:ab:
                    fc:8a:1c:0e:6b:ad:2a:5c:53:0f:36:87:d2:e2:74:
                    3d:bd:81:11:89:3d:ac:b3:7f:ea:84:d1:96:c5:90:
                    bb:6f:7a:98:4a:48:18:b1:55:98:a0:5b:e5:08:65:
                    ef:5f:b9:52:e8:f9:7f:ec:f6:a2:a1:93:f2:a9:aa:
                    38:82:d1:ee:92:cc:9f:4c:21:83:77:6a:05:47:e3:
                    16:36:ff:ba:18:d9:28:f7:2f:a8:b1:18:85:88:2f:
                    9a:b1:82:e2:22:0f:d3:e9:1e:07:aa:0c:1d:f9:eb:
                    37:af:00:2c:66:94:dd:d6:eb:1c:71:94:65:3e:83:
                    a7:95:6f:41:1d:f9:17:6e:7b:3b:59:0d:b5:a1:76:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FC:74:54:CB:82:62:5B:BF:69:1A:1E:B1:CB:92:BC:4A:3A:AB:23
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3137302e37392e3231322e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:30:c3:0d:4b:74:29:3d:17:d3:99:83:33:45:2e:fc:43:66:
         cb:e5:61:4f:26:00:84:9c:b3:59:e4:d1:b7:27:c0:e9:ce:e1:
         54:f3:95:a3:99:49:eb:a5:e3:19:42:86:17:79:81:51:34:0d:
         53:fe:69:da:f9:d8:be:e5:b2:3c:a7:b5:db:a2:4b:31:59:ab:
         87:78:a4:b3:49:3d:95:d9:66:f5:5a:a6:4f:2c:cc:57:31:78:
         74:87:f2:9d:cd:3b:f5:3b:ad:ef:00:db:84:b5:cb:63:cd:d2:
         26:25:e2:27:a4:f0:95:d4:11:66:d9:32:73:ad:f3:4a:57:59:
         87:1f:fa:32:c1:95:ad:31:24:fc:07:8f:8c:28:65:df:6b:39:
         44:67:43:ac:24:c3:dd:db:14:bf:28:f0:1b:72:52:4f:d3:3f:
         5b:a6:43:01:5b:f8:78:ef:cf:e5:e2:ea:bc:c8:97:ef:45:c3:
         45:93:22:cd:06:e0:88:44:67:d5:68:27:df:ee:5b:83:a9:b9:
         8b:71:b5:5d:4a:95:9d:c5:50:df:d4:dc:10:c3:99:99:2d:83:
         5d:30:93:e4:2f:df:02:dd:68:23:01:42:dd:22:cc:91:23:3b:
         e6:7b:50:fe:42:26:25:96:57:e7:35:4b:42:3b:b5:e1:f0:c5:
         50:f3:c9:c9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULqVFt6UxMDaVOLdIQuGB4TEfSGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDBaFw0yNTA4MDcwMzA5MDBaMDMxMTAvBgNV
BAMTKEJFRkM3NDU0Q0I4MjYyNUJCRjY5MUExRUIxQ0I5MkJDNEEzQUFCMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CjLJXbqjJe3f7s02phXiEMo+
D5s/2Io2E1JHK+fHZ37ctsDWfHRBtvwNMt2ezfbaG6aIEVfWpLbrn+KpnIM5X7Mg
1qE1lIqqNBCgaql7SJfraNbEoZ4V1035b4aU0fwUlBTGGRSyebi/SyHjSXBQOruA
81lCq/yKHA5rrSpcUw82h9LidD29gRGJPayzf+qE0ZbFkLtvephKSBixVZigW+UI
Ze9fuVLo+X/s9qKhk/KpqjiC0e6SzJ9MIYN3agVH4xY2/7oY2Sj3L6ixGIWIL5qx
guIiD9PpHgeqDB356zevACxmlN3W6xxxlGU+g6eVb0Ed+RdueztZDbWhdmgRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUvvx0VMuCYlu/aRoescuSvEo6qyMwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzEzNzMwMmUzNzM5MmUzMjMxMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMTM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqpP1DANBgkqhkiG9w0BAQsFAAOCAQEAkzDDDUt0KT0X
05mDM0Uu/ENmy+VhTyYAhJyzWeTRtyfA6c7hVPOVo5lJ66XjGUKGF3mBUTQNU/5p
2vnYvuWyPKe126JLMVmrh3iks0k9ldlm9VqmTyzMVzF4dIfync079Tut7wDbhLXL
Y83SJiXiJ6TwldQRZtkyc63zSldZhx/6MsGVrTEk/AePjChl32s5RGdDrCTD3dsU
vyjwG3JST9M/W6ZDAVv4eO/P5eLqvMiX70XDRZMizQbgiERn1Wgn3+5bg6m5i3G1
XUqVncVQ39TcEMOZmS2DXTCT5C/fAt1oIwFC3SLMkSM75ntQ/kImJZZX5zVLQju1
4fDFUPPJyQ==
-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org