Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e3131322e302f32302d3332203d3e2031393136.roa
File:                     3230302e31372e3131322e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          9Lk+0cKM1CbS6k0T4C0nmWA8xuQnyLMvBWrPRPZmyLw=
Subject key identifier:   DB:D4:45:B1:F3:B4:54:5B:5B:83:A2:D6:EB:E0:21:6F:32:C7:FD:F9
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       1961B07515AFAC01B7EF7D4522520EE7B22CB404
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e3131322e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     1916
IP address blocks:        200.17.112.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:61:b0:75:15:af:ac:01:b7:ef:7d:45:22:52:0e:e7:b2:2c:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=DBD445B1F3B4545B5B83A2D6EBE0216F32C7FDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:52:81:3e:cd:94:60:96:4f:ed:4d:c5:88:
                    81:41:0d:f1:ba:a5:d0:30:c0:b5:12:33:0a:53:7d:
                    0b:5c:26:c5:64:91:a1:d9:19:d1:5c:a7:0d:41:1c:
                    fe:27:91:2c:02:7f:81:ee:17:e9:ac:da:ad:4f:a9:
                    c1:42:ac:81:94:20:bb:86:7c:14:98:49:da:84:2f:
                    62:d5:80:1d:26:54:0a:9d:0a:19:a9:8a:ef:ef:bf:
                    90:fe:01:c5:68:c3:e7:72:ec:65:03:03:c5:d5:b5:
                    92:b6:7e:81:04:7e:88:ac:5a:e1:5b:ad:df:5c:6b:
                    8e:81:93:d7:29:fa:aa:35:d7:42:fe:43:ab:b3:16:
                    0f:03:54:84:e0:c5:43:d3:05:26:1e:b8:e9:0f:36:
                    be:5c:30:a6:0a:c6:f0:5f:66:fc:61:b1:e6:97:6e:
                    b1:3f:19:22:db:e2:e6:c4:83:3d:57:04:25:c4:b8:
                    3f:37:3b:dc:2b:59:52:8c:d2:76:e0:28:66:f2:f3:
                    8e:d8:71:e2:85:4d:7d:3e:f5:22:90:5f:8f:4d:e1:
                    44:69:64:91:09:e0:05:26:a1:4f:f0:1b:82:b7:87:
                    ed:30:af:cb:72:c8:b1:63:7f:a5:04:f2:03:e1:99:
                    26:0c:48:65:0f:21:2d:8c:e7:0a:96:6a:a2:21:80:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:45:B1:F3:B4:54:5B:5B:83:A2:D6:EB:E0:21:6F:32:C7:FD:F9
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e3131322e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:dc:58:e0:ad:f7:bb:bc:05:a7:14:fa:5b:44:fe:f9:19:
         a9:80:ef:52:91:ab:35:87:78:9c:b4:1d:a6:b7:6d:98:27:9d:
         fa:ec:4e:75:8a:ca:eb:4b:24:08:a2:97:53:0f:a2:f8:e3:54:
         2f:72:6b:08:55:c4:5b:67:46:9c:8c:52:ef:a7:ad:ab:f7:f6:
         9a:2a:75:a7:69:e2:aa:7d:05:a1:a4:70:e9:da:a8:af:f7:cc:
         9c:8c:34:c4:49:da:b8:ec:33:92:33:9a:e6:9c:72:da:d5:ef:
         f1:9b:97:cf:69:ca:e7:b9:41:0f:1f:7f:f4:9c:4e:d9:04:a6:
         ce:03:9d:a2:56:8c:cd:1b:3e:51:21:8a:1d:d7:77:f6:25:cb:
         0f:92:5a:24:6f:d8:b3:91:59:10:8c:8a:46:23:ca:aa:93:61:
         68:10:9b:54:98:db:b8:8e:c9:67:0b:be:53:15:c7:82:b5:b6:
         18:96:39:e1:af:80:54:f1:79:89:39:c3:7c:de:94:55:65:1c:
         dd:15:e6:14:83:cd:4d:f4:c1:a0:bf:7f:03:9c:cf:1a:bb:fa:
         d4:25:d9:fe:53:3f:d8:51:f2:a6:12:84:4d:af:2f:b2:a0:c3:
         83:c9:7e:52:1f:be:81:19:6e:88:4f:26:fd:3a:6d:1a:d6:ce:
         e3:d8:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----