Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e31362e302f32302d3332203d3e2031393136.roa
File:                     3230302e31392e31362e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          MXnDiwXu7kb2E7WLr8nthjPf2UtIyfdS+x2VOFK6k+c=
Subject key identifier:   7A:10:50:25:5E:01:07:9E:88:3F:90:91:30:5D:72:47:91:AE:18:34
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       5D9B7E86EDD69706E98EE5B9961246FAEDB34D96
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e31362e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.19.16.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9b:7e:86:ed:d6:97:06:e9:8e:e5:b9:96:12:46:fa:ed:b3:4d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=7A1050255E01079E883F9091305D724791AE1834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:d4:90:af:20:97:b4:9d:8f:0e:4c:23:5a:
                    7b:af:0d:a3:74:89:9d:45:18:e7:c3:75:a9:7d:55:
                    7f:f0:b1:c9:22:fc:4e:f1:b7:ce:4b:51:b9:4f:4c:
                    88:0a:77:3d:74:3c:36:5b:8d:ae:83:93:cc:99:10:
                    f3:f6:5c:3c:e9:62:19:be:60:5e:0d:f0:52:5e:55:
                    e9:d1:96:07:01:9c:c5:75:7e:25:9b:7a:64:de:0d:
                    76:92:63:fc:ce:8d:d2:84:6c:a9:62:36:5b:f4:c0:
                    50:f8:a6:61:d5:43:85:fc:8a:1f:7f:e1:14:44:0f:
                    14:61:19:f0:9c:c4:08:f1:bc:f8:df:d8:ff:cb:17:
                    7d:a7:65:d9:7a:fc:90:dd:9d:e3:3e:b3:bc:a8:e5:
                    9a:50:06:79:f9:71:e2:b0:2f:11:5b:55:1f:58:12:
                    07:2d:8e:54:4d:27:a0:2a:1c:3b:79:3d:9a:9b:3b:
                    f4:46:65:3e:b7:04:df:f1:db:7c:7c:1b:2a:19:4f:
                    7a:18:41:fc:d9:9a:ce:1e:2d:68:df:0e:f8:49:ec:
                    bf:31:40:fa:0a:d1:6f:ce:36:9d:e8:5a:5f:8b:72:
                    78:47:88:38:d3:54:64:1c:0c:d6:73:cb:f5:f5:ca:
                    d4:fd:f1:18:fc:21:79:29:8b:2d:7e:de:01:03:df:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:10:50:25:5E:01:07:9E:88:3F:90:91:30:5D:72:47:91:AE:18:34
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e31362e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:27:62:0c:21:8b:ca:47:ad:ce:90:ad:33:ee:39:a1:fa:4c:
         a3:ce:d9:9e:57:40:d5:e5:4b:20:f0:14:e9:04:1e:dd:76:49:
         20:46:88:2b:b9:75:29:21:94:68:0e:68:51:4f:06:bb:21:a2:
         b3:bc:53:32:54:2c:ca:c4:e6:22:f8:e7:1b:ce:80:fd:63:c8:
         88:65:70:1a:71:43:03:de:ad:e7:c9:47:88:53:34:24:cd:e8:
         44:86:5a:1a:8d:88:09:ba:56:c2:f5:20:f2:95:ce:2c:0e:09:
         96:bb:ff:7a:0b:32:f4:c3:a3:3a:4d:24:98:ba:e2:c8:be:b0:
         d6:05:0d:a9:29:78:e4:47:a7:03:56:c6:f6:f3:ad:6e:2e:8a:
         b2:b4:63:91:ac:09:32:a9:d6:5f:e0:d9:d9:9c:a7:ae:b9:67:
         2a:f2:d9:7f:7c:b6:09:e0:fc:9a:4f:6e:09:c2:61:ad:fe:29:
         ba:61:e0:b4:c5:ef:a8:5d:b8:e5:fc:ca:33:4f:99:cb:b6:d4:
         ac:91:ec:4f:00:99:e5:37:e9:fd:fa:7a:a9:00:14:b0:da:98:
         81:87:98:57:80:28:e4:5f:6d:5e:a1:d5:c7:32:1e:dd:f2:b2:
         de:03:0b:24:be:e1:5e:3c:18:e2:bc:3c:a0:cd:f7:f6:c7:6f:
         68:71:58:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org