Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          +/PE62wG/t6AzIgULV8B5palszVKmp5P+r7Dtr1hpYo=
Subject key identifier:   F6:19:8D:96:69:BB:2F:E1:49:36:E0:A1:B7:82:1E:A8:98:D8:88:F8
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       21945C61517ABAFBFC796E8D9648DC33A93DE3D6
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     1916
IP address blocks:        200.239.128.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:94:5c:61:51:7a:ba:fb:fc:79:6e:8d:96:48:dc:33:a9:3d:e3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=F6198D9669BB2FE14936E0A1B7821EA898D888F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:a5:97:ef:0f:01:97:e6:cc:81:21:42:a1:
                    87:6f:b3:e9:eb:d7:1e:76:5b:a0:6e:c9:ff:0d:8e:
                    88:cb:76:33:77:22:cb:cc:be:58:3e:c5:4e:77:6d:
                    3f:d2:ef:54:6d:27:e5:49:f9:06:54:fb:29:98:56:
                    8a:29:a4:53:43:90:b2:e4:94:53:42:b6:7c:e8:a0:
                    c7:51:99:ab:5b:57:53:c1:56:90:9d:d3:02:7b:35:
                    b7:7a:5a:17:31:45:c6:0e:8a:8a:b5:a6:30:a5:16:
                    25:78:df:9e:fc:76:ef:30:26:97:11:89:51:24:ef:
                    1a:53:e5:fd:ad:67:cf:ae:41:be:5e:d4:47:21:07:
                    fa:a7:9e:db:a3:58:f4:94:56:75:2e:45:13:ca:63:
                    61:6e:c8:ff:79:9b:3f:0e:a4:ab:3b:77:41:ca:fb:
                    dd:ff:87:0d:fd:64:04:d3:58:83:ab:7e:56:f1:45:
                    6b:f1:fb:75:be:8e:a8:13:79:22:ed:5c:75:44:b9:
                    01:3a:8a:41:e1:de:d8:5b:00:a0:63:81:cf:db:f9:
                    54:2f:30:12:af:65:71:79:76:b4:f3:b2:fd:91:bb:
                    70:0f:f5:89:c3:05:32:1c:a5:a3:d7:60:9c:87:ce:
                    32:a4:e8:25:85:10:da:60:ab:b1:40:df:68:2e:4a:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:8D:96:69:BB:2F:E1:49:36:E0:A1:B7:82:1E:A8:98:D8:88:F8
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:e4:a7:fa:2d:46:45:c9:f1:62:0c:0a:2f:08:68:cf:07:
         08:04:f4:0e:66:21:82:1f:bb:46:a8:10:3d:da:81:65:3e:b0:
         27:13:13:74:be:a2:f2:bd:95:e3:fa:a1:c5:cd:2c:0c:e7:93:
         d3:3d:4b:d6:90:90:96:15:a2:96:a2:69:5b:02:30:ac:e4:73:
         e3:23:00:3c:4f:81:a1:4f:fc:82:21:bb:45:cb:04:f2:3d:79:
         4e:66:59:3b:be:d6:64:d1:9d:9e:5e:ce:31:24:bc:3d:57:ab:
         a8:c0:d0:8d:47:3f:f9:14:0f:24:8f:9a:22:ef:7b:d6:3d:c3:
         aa:52:4b:61:cb:53:cb:0d:f0:b2:c4:ad:25:54:a7:35:2c:43:
         34:e3:17:18:d6:98:68:8c:ec:49:03:5e:06:db:dd:44:92:d3:
         2d:ec:92:a7:a8:e0:ff:46:1f:47:31:d7:09:4c:f6:42:63:f7:
         71:b6:13:c3:56:bf:e4:c1:df:89:80:46:44:a3:6b:38:07:3e:
         cd:5b:4c:c9:46:83:71:52:c4:19:f4:fb:43:5a:53:bd:d5:c6:
         6e:21:46:7e:84:5e:ab:94:4a:79:9a:61:98:f3:70:66:8e:c9:
         56:97:9b:57:37:87:34:2b:01:3f:8a:29:15:d1:4a:8f:c8:37:
         a0:d3:df:c9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIZRcYVF6uvv8eW6NlkjcM6k949YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDBaFw0yNTA4MDcwMzA5MDBaMDMxMTAvBgNV
BAMTKEY2MTk4RDk2NjlCQjJGRTE0OTM2RTBBMUI3ODIxRUE4OThEODg4RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo56WX7w8Bl+bMgSFCoYdvs+nr
1x52W6Buyf8NjojLdjN3IsvMvlg+xU53bT/S71RtJ+VJ+QZU+ymYVooppFNDkLLk
lFNCtnzooMdRmatbV1PBVpCd0wJ7Nbd6WhcxRcYOioq1pjClFiV43578du8wJpcR
iVEk7xpT5f2tZ8+uQb5e1EchB/qnntujWPSUVnUuRRPKY2FuyP95mz8OpKs7d0HK
+93/hw39ZATTWIOrflbxRWvx+3W+jqgTeSLtXHVEuQE6ikHh3thbAKBjgc/b+VQv
MBKvZXF5drTzsv2Ru3AP9YnDBTIcpaPXYJyHzjKk6CWFENpgq7FA32guSs0hAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9hmNlmm7L+FJNuCht4IeqJjYiPgwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzIzMDMwMmUzMjMzMzkyZTMxMzIzODJlMzAyZjMxMzgyZDMzMzIyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyO+AMA0GCSqGSIb3DQEBCwUAA4IBAQCo1+Sn+i1G
RcnxYgwKLwhozwcIBPQOZiGCH7tGqBA92oFlPrAnExN0vqLyvZXj+qHFzSwM55PT
PUvWkJCWFaKWomlbAjCs5HPjIwA8T4GhT/yCIbtFywTyPXlOZlk7vtZk0Z2eXs4x
JLw9V6uowNCNRz/5FA8kj5oi73vWPcOqUkthy1PLDfCyxK0lVKc1LEM04xcY1pho
jOxJA14G291EktMt7JKnqOD/Rh9HMdcJTPZCY/dxthPDVr/kwd+JgEZEo2s4Bz7N
W0zJRoNxUsQZ9PtDWlO91cZuIUZ+hF6rlEp5mmGY83BmjslWl5tXN4c0KwE/iikV
0UqPyDeg09/J
-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org