Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3133322e3235352e39362e302f32322d3332203d3e2031393136.roa
File:                     3133322e3235352e39362e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          8QiAfn3d8j/t1DLhWAxZ19pMmaEQAE6Qgx7l/cQVO1M=
Subject key identifier:   82:14:16:A7:08:96:91:A9:D6:8D:4A:72:0B:02:3A:0B:15:D7:58:99
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       44C173E55B6596248AD4A8C566F75E99E5794B7A
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3133322e3235352e39362e302f32322d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        132.255.96.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c1:73:e5:5b:65:96:24:8a:d4:a8:c5:66:f7:5e:99:e5:79:4b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=821416A7089691A9D68D4A720B023A0B15D75899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:aa:e6:14:7c:a4:be:f4:23:87:e4:cc:58:
                    27:16:54:b9:da:9e:cc:08:36:b1:c8:e4:f4:25:70:
                    a3:20:69:21:86:c0:f2:5b:8e:6d:7c:3c:44:80:7c:
                    a8:e8:92:fe:90:aa:5e:67:3b:c0:ea:b0:b1:11:07:
                    11:11:df:af:4b:79:56:fb:61:d0:71:42:fe:6c:ba:
                    b8:ed:2e:96:95:ae:6a:ea:cd:de:c8:bd:f6:80:bf:
                    82:aa:c2:f8:c3:b3:8f:a1:3b:a0:f4:b1:19:88:9e:
                    89:e5:48:db:a9:1e:92:eb:ae:00:09:3a:c3:f4:a0:
                    3c:ff:9b:3b:cb:2f:1d:cc:19:37:25:d8:9c:13:12:
                    b2:9c:f8:f3:d0:43:55:27:47:21:d5:03:a0:25:f6:
                    80:7a:75:ae:92:c6:0a:c9:b9:6a:f1:ec:ae:23:0f:
                    0a:01:b5:63:10:d0:1d:39:99:b8:c7:1e:8b:1f:35:
                    f3:6f:76:22:b8:2f:91:ea:86:ce:f0:70:81:df:c2:
                    ed:a0:23:c5:63:92:c2:e8:d7:56:0c:a0:6b:84:70:
                    9b:8b:37:44:0a:dd:0a:43:a4:e9:1b:e4:e7:e9:10:
                    e9:df:9a:fc:65:20:59:08:2e:e6:6e:d5:d8:7a:88:
                    8a:85:87:c0:7f:35:a1:a5:64:cc:b5:41:ce:66:48:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:14:16:A7:08:96:91:A9:D6:8D:4A:72:0B:02:3A:0B:15:D7:58:99
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3133322e3235352e39362e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:35:70:f2:83:bb:ca:12:4a:27:e2:49:d0:9c:4e:d2:dc:
         d4:16:66:90:8d:f0:4d:91:0c:8e:4a:41:e5:e5:5d:20:c5:ec:
         06:73:d2:9d:a7:ce:b3:a5:8a:ae:fe:d8:48:12:5c:3b:d6:f0:
         82:24:cb:46:d1:db:5e:f3:52:21:0e:fd:ba:4a:42:b6:c2:48:
         fd:2f:83:12:fd:b2:fd:55:a0:ee:9b:ba:f5:ee:0e:58:87:17:
         ef:07:8c:7c:59:e6:2d:33:7b:87:f8:d5:f5:74:c4:c4:00:85:
         1c:62:95:77:eb:5b:42:d6:2a:fa:fd:4a:d3:a9:c2:a9:7d:a3:
         c5:78:88:65:e3:e9:26:b7:0c:59:a0:6f:40:1e:4d:2a:aa:26:
         64:5e:ba:a8:66:c9:75:fb:d0:2e:d9:9f:5b:0b:80:ef:c5:e2:
         b1:ab:dd:46:3b:ad:2f:29:c4:cb:bf:af:67:1e:c2:0f:9f:a9:
         0f:24:12:40:d3:a2:a1:0b:2c:4f:36:39:7e:da:e1:5b:d4:ec:
         a4:28:69:7f:af:7a:d1:57:e3:c0:bf:25:14:89:9a:2c:7c:8f:
         63:eb:f5:92:ea:70:b3:83:3d:b8:07:9a:39:bb:76:8d:be:22:
         6f:77:36:0b:5c:ee:4a:64:ab:fb:19:0b:00:e5:6b:14:f2:9b:
         93:46:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org