Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133392e302e302f31382d3332203d3e2031393136.roa
File:                     3230302e3133392e302e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          b9ZulHBTjVoBPJnFjI2icLdoIWz2ls4PDtsOGPxOU0s=
Subject key identifier:   00:DC:C1:61:81:8D:1F:80:35:18:78:4D:29:FC:79:81:49:ED:77:A1
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       6D0A923F79B4A91ABA84EE2E7F11542F8B4EB05D
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133392e302e302f31382d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.139.0.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0a:92:3f:79:b4:a9:1a:ba:84:ee:2e:7f:11:54:2f:8b:4e:b0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=00DCC161818D1F803518784D29FC798149ED77A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:f2:52:95:82:de:b0:05:bb:9b:09:0a:1b:
                    07:70:d5:8f:0f:ef:45:0f:97:d6:56:22:a5:aa:a4:
                    ad:a4:e5:bb:f8:bb:00:4c:50:38:b8:cd:74:c9:31:
                    8f:77:24:30:25:9d:3b:5a:a1:d5:1c:04:9d:0d:c1:
                    63:a2:5e:e8:f0:a7:a5:24:1b:d7:37:2a:87:4b:12:
                    72:08:d6:d7:db:e1:d9:2b:48:38:3b:4a:b6:91:ff:
                    11:c0:fb:f5:aa:0a:98:91:17:46:ff:01:cc:21:64:
                    5f:7e:ac:e7:0e:08:7b:01:cf:e1:d2:9e:a4:bc:77:
                    9f:f2:fb:3d:8c:87:31:43:d3:6a:19:1e:6e:c0:c6:
                    ec:ab:db:0e:31:ec:c1:cd:ba:d2:81:4e:1b:0c:cb:
                    44:6f:91:f5:37:9a:b9:ad:b0:0e:28:13:97:c4:f0:
                    b7:78:72:33:6c:b8:84:d5:81:91:15:16:00:4e:2e:
                    5d:c4:26:9e:56:ce:6d:11:0a:e0:a6:1d:33:8d:90:
                    28:cd:79:71:50:6f:c2:74:b4:5a:ba:6b:26:4f:d0:
                    11:cd:b3:91:aa:c0:ab:19:b7:c9:94:1d:47:8e:71:
                    a2:68:0b:bf:76:a6:fa:f3:39:df:25:52:61:28:dd:
                    10:a4:65:0f:92:9d:07:24:46:85:17:b1:aa:b7:60:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DC:C1:61:81:8D:1F:80:35:18:78:4D:29:FC:79:81:49:ED:77:A1
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133392e302e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:bd:31:d9:ab:46:69:f1:72:61:f6:c5:01:43:4e:e1:4b:ab:
         1c:01:7f:08:2e:57:6a:ed:4a:6c:03:2c:36:c1:91:37:af:d3:
         bc:99:ef:75:e6:5b:9a:6a:4f:2d:b9:c7:bc:f0:49:4d:62:e9:
         99:3c:dc:ee:55:16:bd:12:3d:6f:93:f7:75:a6:66:95:1e:51:
         00:4e:40:d2:20:a2:ca:ec:16:3e:4c:48:24:7a:13:c3:f2:f1:
         9a:9d:59:3f:5b:31:95:72:d2:d4:71:ce:5b:e1:31:83:8f:b2:
         7c:e0:d5:64:c5:a0:42:29:90:8f:8d:30:4f:d9:a1:01:56:7b:
         5f:d2:02:fc:18:8b:6f:41:9e:f3:7a:0c:1e:74:31:8d:1d:82:
         30:4e:04:a1:a3:a2:63:ad:7b:5a:0d:32:3b:b9:c8:16:86:d6:
         fb:c4:f8:5b:3e:a4:28:e2:83:fb:de:63:62:3b:2f:f4:f1:d5:
         55:3a:1a:66:c8:98:4c:4e:6a:a8:75:19:36:d4:a8:2c:b8:97:
         38:61:b2:2e:3d:e2:67:b2:ba:d4:81:1e:54:95:2c:77:8f:f9:
         28:fe:96:83:75:0e:c3:68:3c:bc:56:b8:c3:4c:0f:e1:89:99:
         39:86:a0:97:bc:f7:31:2f:cf:f5:b1:af:cf:3f:48:a6:76:cf:
         6c:54:10:3b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUbQqSP3m0qRq6hO4ufxFUL4tOsF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDJaFw0yNTA4MDcwMzA5MDJaMDMxMTAvBgNV
BAMTKDAwRENDMTYxODE4RDFGODAzNTE4Nzg0RDI5RkM3OTgxNDlFRDc3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZvJSlYLesAW7mwkKGwdw1Y8P
70UPl9ZWIqWqpK2k5bv4uwBMUDi4zXTJMY93JDAlnTtaodUcBJ0NwWOiXujwp6Uk
G9c3KodLEnII1tfb4dkrSDg7SraR/xHA+/WqCpiRF0b/AcwhZF9+rOcOCHsBz+HS
nqS8d5/y+z2MhzFD02oZHm7Axuyr2w4x7MHNutKBThsMy0RvkfU3mrmtsA4oE5fE
8Ld4cjNsuITVgZEVFgBOLl3EJp5Wzm0RCuCmHTONkCjNeXFQb8J0tFq6ayZP0BHN
s5GqwKsZt8mUHUeOcaJoC792pvrzOd8lUmEo3RCkZQ+SnQckRoUXsaq3YCN5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUANzBYYGNH4A1GHhNKfx5gUntd6EwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzIzMDMwMmUzMTMzMzkyZTMwMmUzMDJmMzEzODJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAbIiwAwDQYJKoZIhvcNAQELBQADggEBAIe9MdmrRmnxcmH2
xQFDTuFLqxwBfwguV2rtSmwDLDbBkTev07yZ73XmW5pqTy25x7zwSU1i6Zk83O5V
Fr0SPW+T93WmZpUeUQBOQNIgosrsFj5MSCR6E8Py8ZqdWT9bMZVy0tRxzlvhMYOP
snzg1WTFoEIpkI+NME/ZoQFWe1/SAvwYi29BnvN6DB50MY0dgjBOBKGjomOte1oN
Mju5yBaG1vvE+Fs+pCjig/veY2I7L/Tx1VU6GmbImExOaqh1GTbUqCy4lzhhsi49
4meyutSBHlSVLHeP+Sj+loN1DsNoPLxWuMNMD+GJmTmGoJe89zEvz/Wxr88/SKZ2
z2xUEDs=
-----END CERTIFICATE-----