Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133372e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3133372e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          WHpfbmDQvBL2vQc0L2e7xgXgcQIK/Uc9UWBcEwBLB9w=
Subject key identifier:   2E:C1:01:2E:F0:D4:7F:24:6A:9C:7A:0C:E5:63:DE:B1:8D:6D:B4:BA
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       60F455954017CDB1F9DA9883BB33358B34538219
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133372e302e302f31362d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.137.0.0/16 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f4:55:95:40:17:cd:b1:f9:da:98:83:bb:33:35:8b:34:53:82:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=2EC1012EF0D47F246A9C7A0CE563DEB18D6DB4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:ee:f4:8f:cf:09:3f:b2:c6:6d:bd:2c:c4:
                    ba:b9:9e:17:2f:3b:03:38:e2:15:32:b1:2e:41:3c:
                    5a:ec:e0:51:bb:a0:46:b9:1e:91:08:e5:3a:1c:b9:
                    c6:0a:17:ed:b6:50:3d:dd:15:e7:cc:7c:07:c8:2e:
                    b5:44:39:4d:c3:42:f9:2b:4c:38:1e:78:22:32:f3:
                    c4:9c:cb:e3:7d:b6:8e:c1:bf:6f:96:fe:57:99:81:
                    10:40:d5:10:d0:c8:d1:9a:0f:9a:fc:09:ee:a4:69:
                    ce:86:ae:11:c1:6c:04:e5:ef:3d:aa:d5:d4:16:fe:
                    ec:a6:3c:6f:b7:c4:15:3b:50:8d:89:d5:1b:7b:73:
                    18:f8:02:d2:d4:70:ff:92:8e:25:7a:9b:fe:f2:20:
                    15:6e:2e:70:7d:bf:63:3e:e0:b5:4b:6e:dd:17:25:
                    6e:a8:49:b4:c2:9c:6a:f9:e7:7d:f7:f2:63:eb:67:
                    f0:84:35:89:09:bd:c1:6b:78:03:3a:7c:87:f2:ba:
                    c2:b2:d2:fd:04:dd:5c:a1:65:d8:57:7f:cd:27:5e:
                    ae:36:d3:9c:be:29:f5:3a:b8:46:eb:97:a4:66:20:
                    08:b5:9a:f2:25:b6:df:28:db:1c:24:91:da:1e:2e:
                    ce:16:12:85:0b:e6:f9:d7:28:fc:5f:fd:d8:e2:45:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:01:2E:F0:D4:7F:24:6A:9C:7A:0C:E5:63:DE:B1:8D:6D:B4:BA
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133372e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.137.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:db:13:77:a9:65:07:f5:96:64:c3:8c:56:3b:ab:ae:a1:28:
         bb:b6:9e:9c:35:03:f3:64:a8:64:9c:02:61:93:6d:de:20:bc:
         7e:93:6d:cd:3a:50:53:e5:bd:3a:c0:99:45:f0:1f:ff:33:bd:
         f5:85:fa:99:08:10:13:52:98:62:f5:e5:b4:8e:db:66:a4:e9:
         ae:3f:04:fd:5f:52:55:7d:4c:08:66:f2:de:e3:19:00:77:6b:
         5a:1e:23:5c:8e:6b:2d:ce:9b:7b:7c:36:17:79:a3:cd:cb:21:
         70:cf:8a:75:9c:e4:50:fd:bc:67:da:44:e8:3a:a9:fe:9f:d2:
         15:0b:0c:12:fe:26:99:7a:50:92:57:2b:06:98:14:71:82:e6:
         90:73:58:fd:f2:90:86:4d:29:de:ca:83:58:5f:a9:d0:2d:d5:
         ce:08:d9:1e:b8:74:76:2c:1f:4d:0b:64:8b:c9:6e:cc:39:ab:
         27:85:9b:a0:00:32:b3:a7:fc:c5:aa:a8:89:c2:41:9f:58:34:
         0c:0b:33:49:df:40:1b:0f:e0:fe:a3:5f:40:e8:50:19:db:3c:
         d2:17:aa:c5:da:d1:1d:f3:0d:83:75:74:97:fd:ea:bc:db:31:
         e3:a6:02:63:ec:2d:46:72:f8:84:6a:72:ec:93:a2:fa:a6:1c:
         a9:d6:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----