Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3233352e302e302f31372d3137203d3e2031393136.roa
File:                     3230302e3233352e302e302f31372d3137203d3e2031393136.roa (raw, json)
Hash identifier:          nPiJG+DjYPwuzJWRrR1fF1nmy6dmG9vQV0r89iOr7kQ=
Subject key identifier:   A6:7D:AA:48:77:83:56:1D:C4:BD:61:90:17:07:1A:1B:C7:5E:EE:34
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       5AE3BD823A202ADE742F13376B3990057B8ED7BD
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3233352e302e302f31372d3137203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.235.0.0/17 maxlen: 17

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:bd:82:3a:20:2a:de:74:2f:13:37:6b:39:90:05:7b:8e:d7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=A67DAA487783561DC4BD619017071A1BC75EEE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:f0:ad:05:4f:42:10:92:6f:9b:a6:47:b9:
                    79:eb:e9:20:d0:52:52:3f:36:fd:b2:5f:4f:28:07:
                    a1:1a:55:17:78:47:ac:9b:47:6e:76:16:8e:e4:f6:
                    30:76:65:7f:fe:85:43:56:f5:e4:23:e1:ff:67:5d:
                    e6:56:c4:5f:a3:1d:bb:d6:a6:8f:27:bd:ed:39:41:
                    b4:6c:40:38:23:d7:ab:87:a0:62:52:eb:81:21:35:
                    19:97:8e:5e:ae:9f:da:2a:0a:51:54:03:8a:9c:15:
                    ad:03:90:9a:c0:78:44:1e:d3:43:4b:c1:a6:12:e5:
                    ba:29:d8:1b:c4:7c:97:6e:ea:63:48:fb:eb:43:58:
                    e6:72:e4:a4:6e:2a:66:f7:56:c0:e4:d9:97:e4:6e:
                    71:7c:cc:82:36:45:93:34:0b:56:ec:cc:3c:ba:c7:
                    3d:ce:40:bc:2a:4d:2a:56:3e:35:15:70:bd:67:3d:
                    63:44:f0:df:71:48:f6:a0:98:4f:29:21:50:5a:dc:
                    6a:8a:4e:4e:9a:2b:19:a8:a4:e7:e8:7c:62:40:7a:
                    14:28:31:d3:6b:cd:1a:f3:7b:3b:47:51:81:d6:41:
                    d5:f6:6e:7a:d6:f1:b2:33:3c:8d:9d:7f:63:a8:00:
                    0c:c5:3f:5a:87:69:d9:b2:25:50:01:8c:58:02:e6:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7D:AA:48:77:83:56:1D:C4:BD:61:90:17:07:1A:1B:C7:5E:EE:34
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3233352e302e302f31372d3137203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.235.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         79:86:a3:2e:59:d6:53:7d:10:0e:7f:7b:0a:39:a8:e3:17:09:
         bd:20:32:6b:c3:d8:65:53:30:38:e9:76:52:37:cc:c5:95:84:
         aa:f3:f3:0c:9c:67:20:2f:9c:18:cf:1b:bf:01:c7:04:85:72:
         03:c2:ec:1a:c7:dc:f3:77:25:f0:b8:81:69:ee:3c:dd:76:c0:
         01:20:bb:6c:d2:48:b5:42:6c:c8:b0:ef:cd:ae:48:0e:8a:6b:
         50:d2:31:67:12:be:9f:f5:fa:73:4a:80:12:5e:84:70:a6:f8:
         92:5f:a8:8f:38:0b:dc:64:53:01:2e:0d:19:36:4a:8c:4f:c7:
         59:f8:ae:26:d0:00:0a:30:64:1f:c5:ac:3f:fb:14:79:8c:04:
         dd:d2:58:97:71:a4:d5:7a:01:67:83:f3:36:fe:12:ed:3a:b0:
         0a:a5:ef:2d:20:bf:ef:62:7c:fd:7f:73:d3:ad:e5:90:a9:cc:
         09:f5:3e:73:93:ef:dd:6a:0b:ac:92:82:a4:b4:6c:ea:92:e6:
         dd:42:24:f1:20:45:de:0f:4f:1a:c1:4a:55:13:54:d8:2e:17:
         0a:f1:9b:fb:fb:5b:a0:65:46:44:1d:b9:c2:a4:a1:37:fc:50:
         03:e1:86:cb:5e:cf:ad:d7:13:84:28:08:4b:34:91:bd:55:66:
         fb:5b:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----