Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
File:                     3230302e31372e3132382e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          OTUoOzCPaePcR5wSLy9sYUW4crFXQ7gSbORxj+GALNA=
Subject key identifier:   53:21:73:E8:0B:38:8B:81:90:21:97:DD:BF:89:09:9C:5B:91:FE:01
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       3E2AE8C7A8F731D1786F1F363B360FBA4E6F5D49
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     1916
IP address blocks:        200.17.128.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:e8:c7:a8:f7:31:d1:78:6f:1f:36:3b:36:0f:ba:4e:6f:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=532173E80B388B81902197DDBF89099C5B91FE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:a7:5d:db:62:42:81:f4:85:20:50:77:51:
                    37:71:2a:e8:dd:23:c0:4d:fa:b0:60:f8:d5:4c:36:
                    75:4c:23:bb:2c:33:bb:6d:db:64:46:fd:07:68:49:
                    55:a6:0d:1f:83:d4:3e:41:ea:1c:6a:2e:81:e8:1e:
                    d4:4b:c3:96:cd:bb:0e:c2:64:f8:ee:f7:93:0b:d8:
                    c7:85:79:bd:aa:ae:9b:bb:f4:e0:5b:d7:80:90:fa:
                    f7:1a:f5:ff:12:ca:d0:b3:e8:1f:d2:d6:5d:25:2b:
                    f8:a1:bf:97:6f:47:0e:b3:67:67:27:4e:d8:75:11:
                    e4:cd:7d:77:ee:57:2e:3b:d8:3c:fa:c1:a8:4e:ff:
                    de:81:2c:76:fe:7e:3f:25:75:01:31:0d:fe:7a:33:
                    7a:3b:15:17:37:99:62:cc:8b:4d:7f:7a:a9:1a:ba:
                    ef:8b:65:d0:74:f0:49:ca:67:86:9c:38:12:56:59:
                    c2:8e:6a:c7:2e:8d:2f:ec:34:8d:81:bb:28:7e:df:
                    79:bf:4f:c7:ec:5d:0a:23:6e:f2:46:1f:0b:0a:6a:
                    8e:39:1c:7e:82:50:a9:00:00:5e:e8:29:ac:a3:bf:
                    60:35:e0:0b:52:fb:35:3a:2b:57:e0:e1:30:d9:3d:
                    49:d9:1f:de:13:cb:51:c1:ad:2c:f2:db:14:96:90:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:73:E8:0B:38:8B:81:90:21:97:DD:BF:89:09:9C:5B:91:FE:01
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:e9:a5:ef:91:89:85:d5:a4:44:b2:b9:4f:8f:3f:34:7b:9d:
         29:8a:2c:94:a3:7e:62:32:0b:ef:92:4b:b4:9d:f4:e7:9c:cd:
         fb:35:9d:e3:9e:03:44:be:fe:e7:a4:35:99:65:b6:f6:04:8f:
         35:91:f9:59:b4:7a:e7:00:06:5e:d0:4b:8e:30:65:db:c1:b1:
         e7:c2:82:e5:4f:fe:a6:fa:dd:07:5a:f9:b2:e6:82:b5:ab:f6:
         13:f3:39:ba:6b:39:eb:3b:e9:16:3c:54:b1:2f:3c:85:ba:4a:
         ba:20:74:0b:70:c3:a8:79:e1:16:a9:ad:b9:82:89:f7:d3:75:
         e9:fb:f6:79:12:34:51:96:a3:6c:9c:35:4a:1c:c5:83:24:20:
         1c:28:98:b4:42:d6:b8:eb:fd:20:59:fd:14:f0:9d:2d:f9:3a:
         66:02:c4:83:79:73:9c:6d:43:42:9f:4e:7a:a0:b1:e0:5b:a0:
         ff:3e:3f:df:b8:c7:0f:73:12:87:e0:2d:08:f0:f0:ca:35:3f:
         0b:87:e1:88:1e:76:d9:f5:42:23:4c:42:15:9d:c3:e7:05:2d:
         3a:27:dd:4d:63:83:11:82:8d:fb:31:e4:26:c3:6c:01:e8:9d:
         f7:e7:8a:f3:1f:c4:46:c4:f7:b8:8e:09:fa:eb:f3:39:b9:1b:
         b2:cc:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org