Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa
File:                     3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          pcWDmbkbXeSvEAQK+wgYg2RKaN65N3ysJPMN1fEmAyo=
Subject key identifier:   59:7F:86:16:42:C5:69:AF:C9:32:60:51:D6:94:39:45:A4:DE:88:0F
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       34B844E33DF71E38999EADB4B87A94C68F8984F0
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.133.192.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b8:44:e3:3d:f7:1e:38:99:9e:ad:b4:b8:7a:94:c6:8f:89:84:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=597F861642C569AFC9326051D6943945A4DE880F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:69:f6:b4:ed:ab:80:91:f0:f2:45:1e:5e:
                    48:63:de:d7:77:d9:39:2e:79:44:23:e3:fb:c5:ea:
                    94:d4:fa:cf:e8:60:2b:eb:67:c0:66:38:9e:5c:ef:
                    f6:44:59:43:79:24:7c:9a:5c:7b:f1:db:8b:17:98:
                    20:16:f1:e1:65:13:26:f5:85:af:4d:8c:e4:3f:25:
                    b3:b3:d3:3b:a9:35:80:d4:cb:8b:ad:8c:f4:86:e1:
                    f4:38:d3:7f:54:54:5a:e0:32:ec:5b:1d:9e:e0:2f:
                    63:cc:83:e7:5d:3f:59:85:21:bf:e8:a7:0e:5f:ea:
                    a9:fb:48:55:27:5e:6c:49:72:37:d8:a4:fe:aa:96:
                    c4:70:f8:8e:67:cd:01:fe:64:e3:3e:05:9c:2d:8c:
                    6e:fa:e3:f4:04:25:a6:64:bc:7b:48:fd:a5:c7:77:
                    5a:3c:3b:a0:75:d3:e5:26:11:8f:b2:75:03:fd:3d:
                    03:31:65:d4:51:fc:06:c7:d0:5c:b6:3c:44:ca:2b:
                    21:c3:ca:3d:96:5b:93:87:82:fe:41:da:6a:dd:7c:
                    b8:fa:3c:8c:a1:67:19:40:0e:16:f0:56:4a:28:85:
                    fa:0f:8a:1e:6e:c1:ce:07:9f:65:32:42:4d:d3:7e:
                    48:b5:ff:3f:c4:6a:a3:be:9b:0c:cb:e8:de:3a:61:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7F:86:16:42:C5:69:AF:C9:32:60:51:D6:94:39:45:A4:DE:88:0F
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7c:41:69:fe:28:ff:8e:55:a2:ca:43:78:da:49:e1:b5:cf:9b:
         e4:ad:c3:23:23:d0:ee:28:39:d5:88:3f:f2:f4:8a:67:80:d6:
         0f:55:d4:1b:37:90:06:9c:5a:f1:6f:3b:ed:07:ad:f5:f7:9f:
         95:b9:ba:f7:bd:54:e5:7a:63:85:a6:c3:11:31:0b:b9:a2:b0:
         b1:b0:ff:98:a0:57:af:ca:51:6a:fc:08:33:d4:09:fd:58:ef:
         9d:ab:91:e1:67:d1:85:61:6d:4a:56:8b:ce:1f:95:e2:d2:c5:
         b0:76:0b:20:c9:5c:22:d9:32:87:17:9c:e9:ab:ad:ad:49:37:
         ab:bb:ad:ce:77:bc:da:77:ff:37:41:01:89:ab:a5:85:a1:ac:
         78:e9:78:4c:16:8c:c3:53:3c:f9:2e:12:b2:bf:60:fb:ac:a4:
         47:b4:25:02:d1:c7:d0:38:fc:8c:f6:33:78:e4:f0:f7:a0:fd:
         21:4c:e2:49:fa:b6:6a:49:5f:9d:83:b2:bd:4b:ab:60:b5:ea:
         e0:e7:1c:05:59:72:0a:ad:96:58:eb:79:24:91:e1:4e:71:bc:
         4b:c7:ed:4f:09:44:e7:a6:7b:9e:65:17:22:86:70:2f:ea:b8:
         4c:44:13:54:dd:77:9c:34:91:84:24:39:8f:d3:37:fb:92:0b:
         02:f0:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org