Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Ii9z7bIrWNAu2gfsjoarFroxyWbjbZ978gmmzSTaS7M=
Subject key identifier:   60:07:84:AF:B0:12:8D:1A:23:DC:1A:A5:04:07:9B:CD:3A:B2:E8:64
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       1600289B2065B237ED553BDB44BB7FD77FF00C77
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.128.128.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:00:28:9b:20:65:b2:37:ed:55:3b:db:44:bb:7f:d7:7f:f0:0c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=600784AFB0128D1A23DC1AA504079BCD3AB2E864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:35:63:cb:34:28:49:5b:aa:20:d9:1f:73:
                    b8:f5:48:22:6f:39:d3:95:9a:d0:bf:01:16:ad:55:
                    7a:fd:7f:8e:ec:75:49:ed:d6:b2:f1:1b:2f:76:d2:
                    22:1f:09:a3:c9:ce:e6:e4:eb:38:18:ee:3e:25:c5:
                    4e:59:51:2a:0a:e8:9e:43:35:1e:82:f4:6b:dc:e4:
                    6b:42:8f:29:7d:cd:88:77:27:38:01:d7:9e:80:43:
                    e1:a7:7b:79:d0:ec:cb:ff:a3:27:c2:ba:25:7e:55:
                    94:b9:27:f3:7e:14:ca:98:7c:56:86:35:08:7e:c9:
                    4b:15:9a:3f:8d:c1:f7:5f:54:b0:ec:a1:d5:06:26:
                    ca:75:a9:72:13:82:ca:dc:f4:6a:53:69:d3:44:bc:
                    96:d6:42:3f:04:ee:5a:34:2e:c3:61:0c:36:ba:c8:
                    53:9c:d9:b1:0b:f4:6d:eb:42:f9:f1:55:ce:cc:4c:
                    1e:ab:87:1e:a8:d2:a1:80:24:29:13:89:2f:96:71:
                    51:a1:ee:bb:e2:07:b5:20:78:d9:10:2a:e8:5c:70:
                    bc:d7:4d:28:90:ee:b2:50:20:ae:1f:82:8a:b4:e3:
                    1b:fc:d6:ac:c8:01:d4:0b:f8:a9:8c:59:06:2d:b1:
                    7b:c0:dd:45:44:ca:f3:8d:c5:a9:d3:73:57:a0:0a:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:07:84:AF:B0:12:8D:1A:23:DC:1A:A5:04:07:9B:CD:3A:B2:E8:64
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:08:62:fe:72:47:9e:6a:ec:76:ee:54:38:39:d8:4e:c2:80:
         a9:41:cb:05:8d:09:8f:46:1b:b6:14:5c:fa:58:58:07:20:f5:
         b9:93:87:a7:a0:b5:0b:3c:cc:37:01:6a:2d:18:10:41:fd:e9:
         f1:ed:23:37:82:f9:2c:de:29:ac:07:62:ee:c8:3c:ff:1a:ac:
         ea:25:d4:46:d8:b0:83:d9:9f:de:cf:c0:54:dd:54:8a:53:1c:
         6e:f2:b2:a7:1f:75:df:8a:04:24:08:28:50:91:db:25:e7:6a:
         a4:33:c7:a0:6d:4b:1e:5d:bd:a7:25:11:7b:ee:32:83:7a:1b:
         84:c1:52:96:08:6b:79:98:98:46:39:bd:49:ae:14:7a:86:52:
         d9:65:ee:24:91:48:30:2a:12:83:49:37:d2:54:5c:90:a4:7b:
         ab:5a:b9:66:97:db:e3:6b:20:fd:55:4a:d5:be:82:be:e6:a0:
         5b:e1:26:13:72:ef:ae:b2:e5:d3:5f:fe:b9:07:69:7c:a9:17:
         eb:83:d9:32:20:5e:30:ea:7f:12:86:7b:4f:6c:e0:68:e8:72:
         54:e0:57:40:d2:5a:88:0d:90:1e:cd:35:29:ab:52:df:a5:b2:
         85:45:ca:06:76:8a:b6:18:e7:20:3e:dd:92:ab:92:b7:97:51:
         33:34:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org