Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e302e302f32302d3332203d3e2031393136.roa
File:                     3230302e31372e302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          xLJuNaLRyAjuqpKwmiP//yn2+9SkREDi/SERiaTMMi8=
Subject key identifier:   F1:22:DA:A0:CD:66:12:FC:91:81:92:2B:C1:9E:4E:F6:10:F3:BA:85
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       56EB4E50EC576D7C089FE9CF48B44D0FFE90BC2D
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e302e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     1916
IP address blocks:        200.17.0.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:eb:4e:50:ec:57:6d:7c:08:9f:e9:cf:48:b4:4d:0f:fe:90:bc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=F122DAA0CD6612FC9181922BC19E4EF610F3BA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:6c:4c:e9:fc:1a:e8:d7:ee:dc:51:04:a6:
                    d3:bf:93:54:a2:04:0b:e8:f9:61:e1:8c:e9:8e:58:
                    00:5e:96:30:bb:f2:d1:51:af:3e:03:a6:17:c1:f8:
                    f5:e6:30:86:4a:c4:ed:22:35:0b:5b:ce:79:72:6c:
                    ac:01:d7:78:09:42:9d:14:63:2c:82:07:ac:15:b0:
                    e0:f5:94:bf:b9:5f:15:9a:c1:5b:bd:50:a7:72:f3:
                    2a:c7:75:b9:b2:97:c1:96:d4:ff:68:d4:49:d9:7e:
                    7f:b5:db:80:4c:fb:ed:22:9a:3f:4c:48:c7:2a:cd:
                    cc:ff:a0:d0:fa:c6:9d:b1:a6:b3:3c:3e:55:8e:32:
                    cb:bc:89:1c:71:7f:5f:f7:b9:c5:3d:d8:b3:59:ef:
                    1d:41:80:55:cc:63:df:1a:08:8c:84:c1:9a:69:a7:
                    ba:cd:25:ee:b1:d6:f2:d2:3a:9f:65:59:9b:bd:b7:
                    7d:44:a7:2d:ee:9c:ac:ec:5f:64:0e:f9:6f:c3:39:
                    b5:a3:2b:df:4f:2a:32:43:70:98:e9:56:a7:36:e4:
                    f2:57:96:f2:55:44:2c:e9:b3:ba:8f:ca:53:60:57:
                    d1:0f:7d:aa:a1:4d:f7:c3:c5:a7:ac:64:b0:56:72:
                    5c:63:41:ab:b0:d3:90:b6:f4:22:ee:3b:dd:d4:40:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:DA:A0:CD:66:12:FC:91:81:92:2B:C1:9E:4E:F6:10:F3:BA:85
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:5b:b6:28:e9:9b:e6:2c:be:25:a4:65:ae:f0:dc:b4:fa:
         a6:8a:e6:2e:23:67:94:6c:86:f2:43:53:b5:3c:d5:08:2f:39:
         82:ab:bd:0c:3e:60:c3:c0:ce:b6:02:a1:4e:70:2e:9d:32:c0:
         6e:df:c0:33:09:77:b5:fe:8f:8c:77:43:8d:c1:7b:90:ca:a1:
         ed:3e:38:5b:1e:8b:c9:69:0c:0b:3e:c2:a3:9b:13:4f:aa:00:
         eb:3e:fd:f9:55:24:ea:7e:85:b8:90:64:c4:5c:4c:ae:eb:c0:
         95:9d:c4:d2:32:97:fa:70:57:a8:21:7c:08:10:51:1e:11:7b:
         bb:ac:97:4e:bb:7b:cc:d9:58:9c:dc:e7:65:6b:87:53:86:83:
         9f:54:33:1f:10:9a:c5:87:31:fd:d5:25:f9:67:b2:96:3e:53:
         35:aa:e1:d1:33:16:3c:71:5d:17:d9:29:39:d5:ef:65:2e:f8:
         77:38:00:6e:35:d3:d9:85:a7:9f:96:7b:c3:fa:12:b4:46:13:
         b5:87:48:3b:8c:b9:ad:ba:9c:e4:27:07:1d:fd:20:58:5f:4c:
         e8:f2:bd:16:9f:68:fd:0a:a1:0b:78:cc:92:43:23:84:f4:cc:
         ea:24:29:00:80:a0:f8:20:54:0b:7b:0a:af:d4:e4:ff:a4:5e:
         2b:2e:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----