Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e3139322e302f31392d3332203d3e2031393136.roa
File:                     3230302e31382e3139322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Fuu79yYGqvx+JPLU9HJy5w/IOmwdIpf62fWqBxGw1KQ=
Subject key identifier:   E4:82:38:3F:7C:12:86:9A:F8:D3:79:76:06:31:9C:6E:12:BA:A7:FD
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       5A44193ADCCCE1A780019304ED0EB0EE89B15DA4
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e3139322e302f31392d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.18.192.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:44:19:3a:dc:cc:e1:a7:80:01:93:04:ed:0e:b0:ee:89:b1:5d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=E482383F7C12869AF8D3797606319C6E12BAA7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:5d:04:cb:ad:a6:9f:bf:d4:64:1b:cb:d8:
                    36:0f:64:d2:23:ab:a5:2f:1d:d3:e3:38:33:3c:eb:
                    af:db:50:cd:d8:a9:9a:c7:a6:ab:b5:20:a7:ec:33:
                    30:7f:92:0d:66:d2:f1:a0:22:c8:66:7b:34:2d:21:
                    59:6f:2c:4c:c8:f8:d1:8e:c0:85:0e:68:a6:26:2e:
                    1c:b6:3f:f4:a2:0c:6e:94:ce:5a:15:24:6c:b3:9d:
                    0f:f0:99:62:0b:5e:a3:41:65:fd:e7:01:71:45:20:
                    1e:1a:ad:ee:de:86:30:a5:6a:5c:e1:10:50:77:47:
                    0d:c5:f3:56:45:66:13:0d:81:87:fd:e7:34:f0:7a:
                    e1:29:9a:9d:d4:e8:13:4a:51:3e:1b:c8:0a:b2:1a:
                    d9:c6:d7:6a:1e:8e:8a:67:90:9d:d9:8f:37:8b:5c:
                    1c:58:ef:b0:8c:00:fb:0f:6b:cc:f0:73:42:d5:80:
                    54:71:90:77:99:79:ca:d1:b1:2f:10:30:70:9c:d5:
                    5b:f0:bb:6c:36:c2:21:9c:fc:79:f0:40:8e:e1:58:
                    ab:68:27:93:a9:49:94:60:e8:c0:8f:8f:d0:b7:ad:
                    e6:0a:e2:97:1d:61:90:e0:f4:25:59:78:f8:dd:d7:
                    17:7c:0d:fb:c0:10:5f:b9:f2:54:f1:e0:83:61:da:
                    50:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:82:38:3F:7C:12:86:9A:F8:D3:79:76:06:31:9C:6E:12:BA:A7:FD
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e3139322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:68:b1:82:4a:b5:b7:c9:04:5b:cc:da:f4:31:81:5a:a4:be:
         8a:49:3d:c0:dd:b5:5c:0b:2a:03:87:b6:6b:24:6e:5f:2b:fa:
         ec:4f:9a:33:87:d6:d8:e5:1c:f3:53:29:5c:90:66:e5:a3:fb:
         54:41:d8:0f:00:c8:da:da:b9:5a:57:eb:66:fb:4f:39:7a:e6:
         0a:1e:2f:33:3d:ee:7d:21:d5:1e:1c:ce:e6:69:f6:3d:97:e3:
         76:88:50:e4:55:c7:f8:14:fb:63:54:89:af:19:56:20:4a:0d:
         4f:31:59:e4:cc:38:99:a2:d9:6e:1f:1e:2f:e5:17:95:b8:53:
         80:d2:d6:97:39:a1:36:d3:f9:2c:92:0d:68:60:95:02:ee:59:
         ca:6d:2c:90:4a:9f:4c:4f:42:cb:bd:25:99:ad:37:90:93:4c:
         ab:19:fb:dc:f7:5f:e6:8f:19:42:62:0b:c4:8b:c0:0f:3d:99:
         9a:55:1b:46:cc:0c:4d:d8:c0:04:13:79:38:73:4f:a3:3e:5f:
         04:37:57:73:50:01:b2:fa:17:a9:ec:c3:eb:ec:96:47:ad:de:
         ad:75:0d:85:fe:bc:df:e8:f9:66:45:73:05:80:c8:5f:68:5c:
         dc:4b:29:76:d4:09:2a:4d:01:7a:64:ba:6b:6d:37:91:03:1b:
         f3:fb:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----