Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32302e302f32322d3332203d3e2031393136.roa
File:                     3230302e31382e32302e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          wRT1fQ50E8Lclq5UqEH1/RNdutMre4cOXHoK0naW4CU=
Subject key identifier:   A9:EB:DF:74:0D:93:17:96:99:DD:F9:D4:A0:1C:E7:03:20:DB:B6:B2
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       115D3D6A7B627F0B3802B7C2CBAC10C91AF107CA
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32302e302f32322d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.18.20.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5d:3d:6a:7b:62:7f:0b:38:02:b7:c2:cb:ac:10:c9:1a:f1:07:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=A9EBDF740D93179699DDF9D4A01CE70320DBB6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:03:62:5b:40:75:4a:49:16:4c:d7:b7:a2:
                    06:2b:15:86:df:23:0d:a3:be:e3:59:08:5f:49:46:
                    4d:f0:c5:a4:cc:7c:56:34:ae:6f:a7:f5:39:9c:88:
                    fe:e0:49:d9:59:13:58:3c:66:1a:ba:76:e6:6c:8e:
                    47:86:fc:ab:b9:5b:17:fd:da:82:de:2d:67:ad:5e:
                    50:58:4e:72:71:4e:c8:2d:9d:16:17:b9:9c:cd:81:
                    5a:49:4b:29:8f:43:da:df:42:ea:fa:ec:d1:f3:ce:
                    4d:94:f0:5c:ee:1d:c8:d3:42:92:b9:c1:f1:57:79:
                    76:dd:82:6f:59:bd:db:a4:b9:c0:0a:f9:dc:a4:5a:
                    02:04:d2:d0:a6:c0:9f:2a:a1:d6:6d:91:45:27:ce:
                    e2:67:91:35:0b:ed:17:9d:db:8c:b9:eb:56:d1:49:
                    78:0a:d9:2f:3e:e1:d5:4b:2f:c2:81:fd:88:16:dd:
                    94:13:da:fd:af:a6:e8:5a:30:34:ac:3e:2f:ed:e8:
                    d6:e7:7b:d2:38:dc:fc:df:5d:2b:0f:16:17:c2:25:
                    bb:89:9e:b2:16:36:52:32:00:46:fd:76:9d:98:9f:
                    38:93:9d:ab:1e:b0:fc:1c:cc:0c:de:02:3f:99:bd:
                    2b:fe:1f:54:91:af:c3:44:35:16:cc:d3:6c:52:e4:
                    87:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EB:DF:74:0D:93:17:96:99:DD:F9:D4:A0:1C:E7:03:20:DB:B6:B2
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32302e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:e8:f4:3e:44:48:f2:43:29:b4:d6:4b:c5:a8:04:cd:8d:c3:
         a7:af:b5:e6:3e:ae:ff:2d:70:4f:98:b8:07:1e:d2:4a:e5:51:
         d8:57:f7:ff:dc:d2:50:be:02:83:f4:64:7d:0a:45:7b:44:02:
         07:78:44:d8:35:7f:68:ce:aa:1a:2a:ba:5e:08:76:75:5c:94:
         79:43:85:dc:65:da:b1:9c:4c:fc:51:d2:9c:c3:49:25:4f:a9:
         c0:21:20:4e:28:3b:06:17:84:aa:6b:b7:d8:ff:12:79:91:bd:
         71:be:55:24:e1:40:14:e3:a8:6f:89:96:2e:f1:6b:5e:97:de:
         d8:82:ec:77:1b:dc:42:c0:76:d0:8e:cb:ef:17:c2:5e:34:f6:
         6a:ac:aa:e9:01:40:23:2e:89:b7:58:ee:ec:c3:35:49:16:2c:
         fc:ab:01:70:cf:69:25:7d:11:86:c1:53:a6:22:67:ef:f4:0c:
         5b:ac:74:5b:1c:99:81:57:8e:1e:96:b1:e5:86:d4:8f:df:62:
         f8:a9:51:69:84:63:19:b4:11:88:db:ee:20:97:6a:8c:08:88:
         a0:b2:26:e8:90:b0:68:d6:02:04:ea:28:44:66:58:7a:d5:43:
         53:45:3b:7a:e8:8c:6f:86:2f:9a:89:fb:0a:2a:bc:28:9c:5b:
         0b:91:c1:3d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUEV09antifws4ArfCy6wQyRrxB8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDJaFw0yNTA4MDcwMzA5MDJaMDMxMTAvBgNV
BAMTKEE5RUJERjc0MEQ5MzE3OTY5OURERjlENEEwMUNFNzAzMjBEQkI2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb4QNiW0B1SkkWTNe3ogYrFYbf
Iw2jvuNZCF9JRk3wxaTMfFY0rm+n9TmciP7gSdlZE1g8Zhq6duZsjkeG/Ku5Wxf9
2oLeLWetXlBYTnJxTsgtnRYXuZzNgVpJSymPQ9rfQur67NHzzk2U8FzuHcjTQpK5
wfFXeXbdgm9ZvdukucAK+dykWgIE0tCmwJ8qodZtkUUnzuJnkTUL7Red24y561bR
SXgK2S8+4dVLL8KB/YgW3ZQT2v2vpuhaMDSsPi/t6Nbne9I43PzfXSsPFhfCJbuJ
nrIWNlIyAEb9dp2YnziTnasesPwczAzeAj+ZvSv+H1SRr8NENRbM02xS5IfDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUqevfdA2TF5aZ3fnUoBznAyDbtrIwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzIzMDMwMmUzMTM4MmUzMjMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBALIEhQwDQYJKoZIhvcNAQELBQADggEBALro9D5ESPJDKbTW
S8WoBM2Nw6evteY+rv8tcE+YuAce0krlUdhX9//c0lC+AoP0ZH0KRXtEAgd4RNg1
f2jOqhoqul4IdnVclHlDhdxl2rGcTPxR0pzDSSVPqcAhIE4oOwYXhKprt9j/EnmR
vXG+VSThQBTjqG+Jli7xa16X3tiC7Hcb3ELAdtCOy+8Xwl409mqsqukBQCMuibdY
7uzDNUkWLPyrAXDPaSV9EYbBU6YiZ+/0DFusdFscmYFXjh6WseWG1I/fYvipUWmE
Yxm0EYjb7iCXaowIiKCyJuiQsGjWAgTqKERmWHrVQ1NFO3rojG+GL5qJ+woqvCic
WwuRwT0=
-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org