Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e36342e302f32302d3332203d3e2031393136.roa
File:                     3230302e31372e36342e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          tFG0bKcYc4BRNcd2dZWG0/ZC4d4czo6GL5SJ4CGEn7k=
Subject key identifier:   69:81:C1:90:13:5E:F0:16:59:7B:B8:0A:EF:1D:92:11:AF:53:9C:07
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       535584682D714C4FA27D9F0A8607BC6674F25DDD
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e36342e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.17.64.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:84:68:2d:71:4c:4f:a2:7d:9f:0a:86:07:bc:66:74:f2:5d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=6981C190135EF016597BB80AEF1D9211AF539C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:83:5a:0c:e3:68:d1:d2:47:a1:da:da:21:
                    6b:7d:15:1c:dc:84:1c:9c:8e:4f:9e:1e:1c:05:db:
                    07:fa:42:4c:9c:e9:a9:1d:d4:ca:8c:56:0b:18:77:
                    8c:3d:ac:73:2b:12:9a:60:3c:d1:5d:17:0b:a2:ab:
                    18:2b:71:b9:1c:20:f1:a1:9c:57:60:51:dc:f3:5c:
                    97:1c:5b:f1:29:c6:72:5a:cd:a5:6f:46:70:c6:67:
                    47:e9:b8:72:3a:09:83:4f:92:2c:08:d4:d4:bf:3f:
                    e9:3d:8a:23:a1:53:62:7d:5d:cf:13:d6:2a:10:66:
                    eb:d9:07:1b:b4:5c:39:af:90:6e:53:d0:d2:ad:14:
                    ae:01:a0:43:cf:ff:47:b6:37:3e:f0:88:f0:54:f8:
                    a5:4b:67:47:c4:bd:f5:a0:1f:a7:78:ea:9a:5d:2e:
                    84:ae:73:1a:fa:c3:e3:4e:5b:dc:cc:83:ca:37:56:
                    51:eb:c6:d7:f8:e7:d6:b1:10:43:92:fa:7d:99:9f:
                    73:f7:7c:3e:1e:37:6d:a7:40:00:dc:64:15:a1:3d:
                    4d:95:26:d7:76:dc:60:21:5f:fb:7e:62:f5:ce:ba:
                    fa:af:67:3b:e1:7c:fd:db:15:fe:25:b0:0c:f5:56:
                    ca:6b:a6:b6:50:f0:c7:e0:fe:d9:72:9b:f6:0e:dd:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:C1:90:13:5E:F0:16:59:7B:B8:0A:EF:1D:92:11:AF:53:9C:07
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e36342e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:57:7e:19:b6:45:2c:64:fa:68:ed:10:d3:00:88:e6:6c:
         51:0a:42:fe:5d:54:41:e1:bd:27:72:4e:92:06:3c:ff:9b:24:
         2a:e2:59:56:ff:de:62:69:e2:57:de:0b:1f:df:7f:81:6c:19:
         28:ef:46:40:0f:79:9f:5c:c5:71:b9:89:c2:14:cd:c9:0d:dd:
         e9:7a:9e:0e:64:97:3c:f0:a5:f5:97:56:b6:eb:07:e4:0d:ba:
         95:34:a4:fb:84:f0:89:05:b7:d0:45:04:83:1f:55:ff:a8:f1:
         8c:94:5d:4e:ca:6f:c6:78:2e:a0:26:d2:34:22:60:0b:43:88:
         a1:b2:40:62:a4:68:5b:ff:ec:95:35:ca:a6:18:46:77:48:b2:
         d3:ca:ee:ee:1a:bb:56:d4:72:f5:32:66:45:9d:4a:87:fe:a6:
         d9:92:8e:76:98:ed:58:df:c1:12:11:49:03:da:03:ca:28:79:
         d4:ca:88:0e:8e:45:37:a6:43:0f:ff:6f:f7:12:50:6c:25:cb:
         c6:19:d1:bc:18:f4:88:32:08:6a:1d:67:40:56:45:48:8c:18:
         a6:b6:1a:ed:b1:66:0d:17:84:3a:c0:32:c0:84:fc:79:d6:28:
         93:41:b6:52:86:c0:2f:ae:dc:65:44:6b:20:11:33:0c:f8:ec:
         ff:29:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----