Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/323030313a313266303a3a2f33322d3634203d3e2031393136.roa
File:                     323030313a313266303a3a2f33322d3634203d3e2031393136.roa (raw, json)
Hash identifier:          rzDcScwRU+1O1bOYn0rnBEoY5nNxCSwSjkpB1AAEuvo=
Subject key identifier:   B9:6E:B0:4E:77:5D:29:1A:0A:CE:83:9E:25:AE:64:1C:B0:E3:44:63
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       52D6B12AFBF60BA341A18D3696E19055CE36F50C
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/323030313a313266303a3a2f33322d3634203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        2001:12f0::/32 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d6:b1:2a:fb:f6:0b:a3:41:a1:8d:36:96:e1:90:55:ce:36:f5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=B96EB04E775D291A0ACE839E25AE641CB0E34463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:b6:64:56:5d:60:ee:cc:ad:b7:ca:41:c3:
                    41:29:c0:df:45:88:3a:42:33:d9:bc:f5:ff:c4:ec:
                    5c:59:3e:48:3a:73:1c:44:de:41:8f:23:62:7f:aa:
                    61:9e:ce:56:48:0e:af:3f:d4:2d:ed:ce:8b:2a:ca:
                    b2:33:de:55:7d:22:95:09:77:19:e0:91:9d:cb:04:
                    7c:b1:67:10:e7:00:55:a1:fe:5c:f1:ca:12:69:b3:
                    b9:a4:7a:9b:42:29:9f:aa:dc:d4:42:4e:14:1d:22:
                    9e:d8:2c:bb:27:15:bd:bd:4c:78:41:8b:c1:3d:25:
                    06:da:1e:d9:5f:95:ee:7a:5a:27:04:fd:d4:a1:00:
                    7c:3b:dd:7c:53:7f:d7:8e:98:5c:16:9b:cf:7f:f8:
                    b7:64:a1:d0:22:0d:29:a5:35:2f:7a:34:3f:2f:76:
                    20:f7:17:d7:33:56:06:e0:0e:8d:61:5f:d2:43:75:
                    f1:b0:1e:0b:bd:9b:16:44:08:9e:03:b4:dc:56:ca:
                    cb:9c:d2:ba:03:e6:c4:50:49:35:a7:e5:ce:48:dd:
                    e4:3d:1f:6d:23:31:98:bf:5d:2c:65:e9:19:49:24:
                    74:72:b5:6f:bd:d3:e1:2f:7e:c9:af:87:e7:b4:3a:
                    1a:31:4a:d9:cf:f0:38:7d:55:39:be:12:22:21:07:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:B0:4E:77:5D:29:1A:0A:CE:83:9E:25:AE:64:1C:B0:E3:44:63
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/323030313a313266303a3a2f33322d3634203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:10:e3:61:47:68:50:5e:cf:3f:c5:d6:a4:67:21:74:8f:
         b2:e5:05:35:45:56:f5:5e:4c:d1:78:4c:39:43:3d:42:aa:e7:
         1c:4b:2b:e3:8e:06:45:61:dc:f0:08:fd:1e:6d:f1:6a:7c:92:
         9b:b8:d2:b2:f7:c7:28:4d:e7:b9:51:e1:df:df:18:87:2a:f0:
         11:82:23:ba:64:19:8e:16:31:93:6d:d9:1e:d1:a6:2d:88:77:
         f5:42:54:aa:18:d2:be:30:5b:66:94:4f:53:e6:e2:90:e7:e8:
         28:ce:ca:5b:27:5b:7b:fa:3c:8b:79:72:d7:29:d4:8c:9e:e7:
         cc:3d:c3:bf:f7:3d:01:08:3e:82:87:ca:91:57:fc:77:82:cd:
         6d:3d:5c:54:d4:4d:40:ed:d2:6c:39:04:7b:82:3c:cd:3d:e4:
         e1:0a:c8:79:b1:33:92:ef:b4:29:70:5c:5f:b3:12:1c:c7:38:
         d7:78:2f:11:24:d4:e9:83:26:ba:2e:7d:71:a9:67:21:35:4c:
         b6:18:3b:cf:39:64:15:49:ac:b7:23:14:fa:52:e2:d0:25:50:
         16:66:b6:fd:79:0a:72:6b:6f:97:47:30:52:7a:27:59:bb:ee:
         a8:e0:76:5c:d5:d9:27:f8:df:c9:69:ed:14:99:0b:36:82:72:
         40:4a:e2:3b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUtaxKvv2C6NBoY02luGQVc429QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDFaFw0yNTA4MDcwMzA5MDFaMDMxMTAvBgNV
BAMTKEI5NkVCMDRFNzc1RDI5MUEwQUNFODM5RTI1QUU2NDFDQjBFMzQ0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIN7ZkVl1g7sytt8pBw0EpwN9F
iDpCM9m89f/E7FxZPkg6cxxE3kGPI2J/qmGezlZIDq8/1C3tzosqyrIz3lV9IpUJ
dxngkZ3LBHyxZxDnAFWh/lzxyhJps7mkeptCKZ+q3NRCThQdIp7YLLsnFb29THhB
i8E9JQbaHtlfle56WicE/dShAHw73XxTf9eOmFwWm89/+LdkodAiDSmlNS96ND8v
diD3F9czVgbgDo1hX9JDdfGwHgu9mxZECJ4DtNxWysuc0roD5sRQSTWn5c5I3eQ9
H20jMZi/XSxl6RlJJHRytW+90+Evfsmvh+e0OhoxStnP8Dh9VTm+EiIhB4a1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUuW6wTnddKRoKzoOeJa5kHLDjRGMwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzIzMDMwMzEzYTMxMzI2NjMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAgARLwMA0GCSqGSIb3DQEBCwUAA4IBAQCcJBDjYUdoUF7P
P8XWpGchdI+y5QU1RVb1XkzReEw5Qz1CquccSyvjjgZFYdzwCP0ebfFqfJKbuNKy
98coTee5UeHf3xiHKvARgiO6ZBmOFjGTbdke0aYtiHf1QlSqGNK+MFtmlE9T5uKQ
5+gozspbJ1t7+jyLeXLXKdSMnufMPcO/9z0BCD6Ch8qRV/x3gs1tPVxU1E1A7dJs
OQR7gjzNPeThCsh5sTOS77QpcFxfsxIcxzjXeC8RJNTpgya6Ln1xqWchNUy2GDvP
OWQVSay3IxT6UuLQJVAWZrb9eQpya2+XRzBSeidZu+6o4HZc1dkn+N/Jae0UmQs2
gnJASuI7
-----END CERTIFICATE-----