Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3234302e302f32302d3332203d3e2031393136.roa
File:                     3230302e3133332e3234302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          awS6SefVtqBuOwATC8P1DshgTtdsyJxZeZ200wYf1Ig=
Subject key identifier:   C4:7D:CA:11:70:DC:1C:94:55:B2:E5:64:C1:16:69:EC:64:2F:F7:92
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       24048F0A53611B6762998448750A2A4C276C24C5
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3234302e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.133.240.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:04:8f:0a:53:61:1b:67:62:99:84:48:75:0a:2a:4c:27:6c:24:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=C47DCA1170DC1C9455B2E564C11669EC642FF792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:09:25:ca:72:f1:9c:e4:c3:b9:94:56:3c:
                    d2:7d:54:1c:c4:8a:0c:d5:fa:1e:ea:14:23:3c:f6:
                    21:83:5e:23:8e:a4:53:50:e0:63:9b:f2:0c:87:11:
                    3d:59:97:6b:c2:e2:3d:2e:4f:45:c4:34:c5:32:cf:
                    43:dd:9e:10:60:75:3e:be:9f:1b:0c:6b:6e:7d:5e:
                    88:3e:3a:67:49:6d:82:f7:64:53:93:20:04:1b:3f:
                    c9:ac:d9:0c:4c:ff:b4:73:71:f1:46:76:9d:d4:2a:
                    99:33:52:e9:07:81:ee:f5:84:fd:ca:7e:ef:45:68:
                    3f:a9:2d:01:45:e8:e0:a2:e7:95:36:cd:6f:c1:3f:
                    6f:1a:06:db:48:a6:d2:8a:f7:0d:98:46:a5:35:6d:
                    71:9b:58:b9:6d:ad:f0:0b:cf:34:d3:86:cf:7f:d0:
                    13:f4:1b:5d:92:fc:fe:78:31:a7:ff:e7:94:69:52:
                    ae:b4:35:3e:73:a6:38:71:3d:e8:f5:ef:8c:ce:0c:
                    0d:6c:32:2d:b4:a1:4b:f6:69:8a:60:2d:30:df:9c:
                    16:7d:0c:d9:d2:4f:bf:ba:0a:39:ee:ec:a0:08:c8:
                    8e:4b:fc:b2:a0:25:f6:37:3f:fb:70:c9:72:a7:0f:
                    9e:1a:e7:0a:ab:03:24:c6:c1:8d:0c:b2:7f:83:cc:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7D:CA:11:70:DC:1C:94:55:B2:E5:64:C1:16:69:EC:64:2F:F7:92
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3234302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:b4:f0:ce:a8:fc:98:ad:4f:f6:34:9f:0c:fd:26:58:19:
         6a:c1:6d:10:41:8f:fc:90:87:8e:25:1d:ac:e8:fe:1f:e1:d4:
         dd:32:71:73:84:ff:6b:14:15:be:5c:96:fc:47:35:66:ca:a1:
         75:1e:a2:36:41:4e:78:86:9c:ad:e0:0c:06:30:10:4e:6e:e8:
         15:a3:3b:f2:59:01:25:ff:0c:26:77:69:a6:92:3e:8f:c2:1f:
         e4:c3:b4:2e:0e:f0:44:93:55:75:d1:ed:c8:5d:89:ae:13:3a:
         a9:0b:53:fb:a2:1f:c6:1b:67:30:06:82:55:d9:2a:94:e7:f6:
         1e:ed:19:e9:ab:35:90:6e:77:a6:e5:11:ff:32:3d:8d:ac:fe:
         cc:08:1b:0f:76:fa:af:51:1d:f0:49:b7:90:68:70:10:b0:f0:
         9e:45:1c:06:48:56:94:37:23:bb:74:b1:07:7f:a2:a7:68:a6:
         69:11:66:36:a6:3a:25:d0:69:49:28:10:f0:97:de:88:0f:26:
         cb:0f:23:c5:70:5f:3c:bf:54:e5:3e:3c:06:61:9c:58:be:c8:
         ce:e0:a0:b7:c8:76:8b:9b:04:72:3c:b4:54:7f:d8:56:eb:90:
         d2:97:6f:6a:3d:0b:fb:b1:18:90:85:b9:7f:e7:9b:c9:a2:51:
         bb:de:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org