Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e382e302f32312d3332203d3e2031393136.roa
File:                     3230302e31392e382e302f32312d3332203d3e2031393136.roa (raw, json)
Hash identifier:          4MjQxl2qByfo2Qksv+fOLEnOFaa5nYdWxJe983VVOhE=
Subject key identifier:   71:DD:B0:D3:82:9F:9F:E1:D0:09:4A:0D:94:5F:F7:0F:BA:55:F4:E5
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       371306CD5790EEC887EC67410232774FDDA1A1DB
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e382e302f32312d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.19.8.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:13:06:cd:57:90:ee:c8:87:ec:67:41:02:32:77:4f:dd:a1:a1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=71DDB0D3829F9FE1D0094A0D945FF70FBA55F4E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:62:e1:4e:c5:cb:61:4e:84:fc:bd:50:f3:
                    95:2c:73:24:f4:a7:1a:2b:91:60:5b:42:83:6b:a5:
                    db:a4:bd:17:8e:b4:81:dd:3d:5c:b8:e0:36:db:c0:
                    e4:79:89:17:5e:e6:30:3e:a4:a1:85:e3:d4:11:e9:
                    62:63:90:ae:29:98:30:1b:ec:14:68:5a:9f:9f:6d:
                    50:a7:f7:83:b0:64:83:ca:c5:5e:10:8c:56:f4:99:
                    6e:a1:b6:24:3c:b8:00:20:9e:c9:52:14:33:eb:41:
                    ec:c2:a7:b5:74:90:d4:20:c6:a4:4f:95:5f:c6:75:
                    6f:c5:1d:1a:b6:0d:d4:6f:e1:99:26:51:68:5f:e3:
                    2e:d1:cc:19:cb:88:18:0b:4a:e8:c5:53:1e:cd:30:
                    b5:01:41:c3:fe:da:37:d4:43:da:42:f5:f3:6f:83:
                    94:68:50:a8:94:cb:77:d8:d2:1b:9e:3f:25:6f:ac:
                    90:ca:13:bd:8a:25:5a:63:ea:a0:7e:e6:d2:3c:58:
                    61:74:d1:f0:00:f0:da:0c:22:59:1b:2c:bc:43:cd:
                    41:7f:b3:bf:38:b1:61:ae:85:8a:35:d5:33:6e:b2:
                    73:7f:16:b3:f5:c4:ed:c8:35:2e:67:d9:81:d3:f8:
                    47:d4:71:af:06:47:be:35:92:67:84:09:b9:c7:e7:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DD:B0:D3:82:9F:9F:E1:D0:09:4A:0D:94:5F:F7:0F:BA:55:F4:E5
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e382e302f32312d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:e7:cc:e2:d4:c9:c4:1e:18:69:d6:ef:7f:a3:34:66:ef:cc:
         50:f3:ee:fd:ec:44:89:ec:58:0c:d6:76:12:53:59:e5:fc:d9:
         3a:1e:b8:2d:f7:27:bd:77:e7:de:4e:07:31:5f:d0:8b:e5:71:
         11:1d:bc:ef:bd:5a:6e:ff:a8:fa:77:1d:0e:04:3d:3d:55:80:
         c4:70:03:bd:1b:36:3e:c9:54:78:e8:a0:e4:db:fc:f8:c2:a7:
         3c:75:45:b8:fc:b8:99:86:27:f8:60:b5:5b:36:f2:35:ea:36:
         ae:44:8e:04:51:06:43:da:80:da:b1:fa:71:1b:46:6b:f9:33:
         7a:a3:a8:0f:96:0c:74:5c:15:14:a3:be:b4:3e:c8:eb:a9:de:
         5e:dc:7c:ec:85:c4:00:d6:79:bb:c0:37:2d:83:8f:2b:0d:df:
         ac:bb:87:13:65:60:21:65:43:ab:69:70:57:fa:2d:de:7d:4c:
         bb:48:3e:e1:eb:db:d5:5e:80:59:b4:c1:b7:46:94:00:fb:04:
         a0:01:65:06:7a:3c:44:ac:68:e1:92:25:96:4a:f3:e9:2d:b3:
         24:81:b2:0a:f0:77:55:d3:19:5f:20:63:cc:b9:34:56:cc:5d:
         0d:be:97:b8:87:f5:e1:0d:9a:22:fa:af:b7:e2:9c:c0:5f:0d:
         62:5f:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org