Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa
File:                     3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          A6ED4DEC1KW2qq5J+TVO9j9eHb1f6U1xW/G8zLkVBfA=
Subject key identifier:   2B:1F:B7:7E:4F:5D:08:55:28:F0:DE:57:1E:33:6E:C0:09:43:FA:95
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       4EC97845E6F07E7FB28EC3CAC51798D3DF7F6A58
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:08:59 +0000
ROA not before:           Thu 08 Aug 2024 03:03:59 +0000
ROA not after:            Thu 07 Aug 2025 03:08:59 +0000
asID:                     1916
IP address blocks:        200.128.224.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c9:78:45:e6:f0:7e:7f:b2:8e:c3:ca:c5:17:98:d3:df:7f:6a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:03:59 2024 GMT
            Not After : Aug  7 03:08:59 2025 GMT
        Subject: CN=2B1FB77E4F5D085528F0DE571E336EC00943FA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:f8:2b:78:d7:fb:a0:84:2e:55:52:10:29:
                    df:fc:a1:5f:93:73:61:57:94:21:b8:33:4f:52:91:
                    ef:a8:16:60:66:fe:a5:d4:56:71:f1:8f:7e:fa:3b:
                    08:31:f7:51:d0:f8:a6:22:86:bc:44:56:1f:55:e7:
                    9c:c1:56:26:4a:47:88:51:97:49:96:df:02:28:6b:
                    11:4f:3a:4f:df:ca:e0:6d:ae:93:8f:5a:2b:c4:ba:
                    c5:35:36:72:87:36:c0:75:aa:af:87:a0:fb:bd:b3:
                    9e:58:42:a2:81:e7:c7:8a:fb:63:02:16:78:6c:45:
                    81:18:02:6b:c1:c6:0c:c3:ba:cf:8b:0c:3c:a7:ed:
                    35:4a:d2:86:15:d1:7c:9b:77:2c:8f:49:f3:ea:1e:
                    82:93:6c:af:fd:82:da:c8:c5:04:e3:24:f5:70:dc:
                    e8:79:33:9a:00:21:00:a9:1f:d1:a4:e8:99:21:46:
                    5f:ce:61:6a:df:e1:70:b3:35:04:48:b9:8e:2b:96:
                    93:bc:01:b2:2a:df:b9:e3:b9:a0:e5:a4:dc:d0:76:
                    10:53:0a:f7:76:3d:25:92:66:e9:e3:7d:76:7d:1e:
                    16:bb:40:26:79:29:3f:ac:de:c1:cd:c6:4e:56:45:
                    47:98:a3:2d:e9:c8:1d:94:45:f9:c5:01:fc:a1:9c:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1F:B7:7E:4F:5D:08:55:28:F0:DE:57:1E:33:6E:C0:09:43:FA:95
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3132382e3232342e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:03:82:09:d4:08:35:81:83:17:67:a0:ef:2f:d6:c2:24:
         50:55:d7:a7:3f:7d:a7:0d:46:87:00:2f:d6:66:c1:44:20:fa:
         70:d2:a0:85:d8:e0:55:3c:35:3e:74:83:ae:6f:2f:88:63:07:
         a0:ac:94:d8:de:78:be:23:76:ce:f9:e1:7e:44:31:97:ba:0b:
         65:da:bb:b7:03:81:55:84:5f:38:4f:b6:ba:58:e2:4c:2a:32:
         e3:f7:0d:a8:e5:ab:8f:fe:65:72:83:d1:f2:22:f2:f2:84:69:
         f6:43:28:e8:40:79:99:06:1a:8b:bc:98:08:9f:f4:cf:76:ce:
         26:55:67:f1:36:2b:ac:a4:75:ce:ed:b9:ae:57:c9:c3:aa:98:
         b9:6d:56:6a:84:ca:b6:87:69:2b:1f:ff:3b:57:ce:a3:b9:9e:
         0c:44:63:db:32:e3:d2:e8:1c:af:00:7d:be:05:e3:ad:6e:b2:
         52:32:c5:5d:91:1a:cf:6e:30:2c:4a:db:07:c1:91:82:a5:09:
         05:88:70:ba:d0:05:4f:eb:5e:e4:64:bd:fd:a4:77:c7:d9:1b:
         58:c1:f0:7d:c4:3d:c7:96:3d:21:42:20:6e:3d:e9:fc:cd:cf:
         49:38:d6:82:be:51:d5:91:94:4b:de:87:9c:8b:0d:b0:db:a1:
         7b:a4:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org