Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa
File:                     3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          HtPEFo2n7Xo1h4QzqHdoIORpCb5AMPDgp5kCG5hvNkM=
Subject key identifier:   35:17:1A:B9:F3:77:15:E1:E5:3A:B3:88:27:37:5D:CC:89:1F:5D:B9
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       045866D617F4706AD20BA69F9EBB68B7C20F9167
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.143.192.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:58:66:d6:17:f4:70:6a:d2:0b:a6:9f:9e:bb:68:b7:c2:0f:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=35171AB9F37715E1E53AB38827375DCC891F5DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:54:51:76:eb:32:1d:03:31:78:25:f7:c7:
                    f9:9a:cc:1c:14:2d:84:2e:1c:8f:32:b3:a0:54:25:
                    17:0e:1f:82:9b:a0:ca:53:fc:f1:69:47:0a:7c:c7:
                    3a:6f:e0:f2:90:d4:6d:ac:87:6e:fe:a3:e3:33:e1:
                    c4:25:c3:d8:f9:0f:df:9d:81:aa:24:f3:a2:fa:89:
                    3d:18:8c:60:8e:21:fd:90:92:75:0a:fa:3f:7b:25:
                    0c:93:6f:2b:e0:20:90:b9:7c:16:a9:23:96:1f:bd:
                    e1:e8:d4:23:19:ec:fb:ec:9b:b3:4b:0b:78:26:e3:
                    05:09:03:5b:31:f9:51:f6:ea:56:0d:39:71:52:04:
                    c7:80:e1:da:9f:c3:8c:01:db:86:a9:e9:b7:f9:a3:
                    c7:8e:23:ad:ae:2a:6e:6f:e9:a6:fd:e1:74:71:e3:
                    5d:f5:5f:45:6a:43:25:6e:07:df:be:f4:83:88:ba:
                    1e:6d:32:4f:2e:f2:51:1a:24:ed:39:dd:a0:05:71:
                    ba:a5:5b:9a:26:69:8a:36:d8:2c:65:9f:80:ae:ce:
                    40:63:bd:5a:a4:19:43:26:2d:bb:89:07:32:27:ef:
                    ba:f8:5c:7f:bc:55:75:71:2c:82:4b:89:9f:3e:2a:
                    17:ca:df:8b:8e:05:cc:8d:d3:7a:d0:13:da:bf:a4:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:1A:B9:F3:77:15:E1:E5:3A:B3:88:27:37:5D:CC:89:1F:5D:B9
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:05:96:88:59:8a:ba:aa:c4:f0:e8:97:74:56:6c:15:4a:e4:
         7f:10:19:0b:6e:88:9e:eb:f0:e1:00:de:23:6b:ee:33:a6:12:
         1c:b2:c7:3a:05:f4:24:f3:da:49:04:a5:a3:ee:10:7f:75:8b:
         5b:09:39:ed:b0:bb:be:75:8c:0d:49:2b:90:81:6e:92:2a:72:
         16:c1:0c:8f:66:2e:cc:21:0a:fb:3f:44:d1:6c:45:c4:46:3b:
         88:b1:56:b3:70:ed:9c:e1:64:e6:7a:78:05:0b:46:73:f3:2b:
         e2:ee:ed:c0:02:89:0b:a0:fc:16:70:79:5a:8f:0e:b5:ef:88:
         fd:0d:6f:94:cb:c3:43:77:2d:dc:ac:5b:3d:66:0f:ba:e1:97:
         6c:ef:b5:00:02:23:fa:c1:52:80:47:8c:30:75:59:97:d7:8c:
         13:09:38:f5:43:30:63:ba:40:97:05:24:ce:43:96:80:7a:f5:
         93:52:b2:7b:aa:b2:b5:25:6b:cd:da:56:0a:7a:ef:05:ec:80:
         51:3c:76:61:c9:c9:88:0c:16:cd:ac:1f:cc:d0:ce:3d:ec:25:
         47:d2:49:6e:8f:fa:09:2f:55:8a:82:10:50:5a:18:56:83:ef:
         77:bc:c7:29:84:88:d8:11:b1:8c:5d:be:3f:10:60:fd:f0:39:
         fd:5c:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org