Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133302e39392e302f32342d3234203d3e203136353039.roa
File:                     3230302e3133302e39392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          reZwi1Lp2R0MCANGHzfFke/XgDDlIHHeTerNDnjA4y0=
Subject key identifier:   41:3C:A7:62:2D:70:73:A6:0A:D5:E4:02:A5:90:4D:D3:6D:82:CB:A9
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       306BF7C7F1814A73E9E66278A9A267C524126782
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133302e39392e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     16509
IP address blocks:        200.130.99.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6b:f7:c7:f1:81:4a:73:e9:e6:62:78:a9:a2:67:c5:24:12:67:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=413CA7622D7073A60AD5E402A5904DD36D82CBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:8b:80:6b:2f:33:62:f7:b0:31:cf:2b:e5:
                    38:f3:46:c9:83:64:6a:b0:ec:b6:76:c0:77:a8:dd:
                    26:af:71:47:f6:d0:b2:e9:af:0b:0c:ce:29:8d:87:
                    ce:1a:c1:f1:1d:33:95:49:f2:be:f0:59:6f:b7:f9:
                    32:e0:c4:fd:b4:6b:9a:60:54:ba:2f:b3:ea:e9:6b:
                    53:4c:04:be:e0:73:8d:b6:52:be:c3:a6:f0:1f:55:
                    0e:91:4d:fc:b6:4b:7b:1a:c0:98:eb:3a:f6:5f:11:
                    89:f4:51:2e:d8:c1:1b:0e:c6:55:d8:9b:7a:e7:ba:
                    cc:e9:96:4d:b9:df:cf:02:3b:da:0f:33:cb:b0:0b:
                    f1:1c:25:50:9b:98:fd:58:8f:8f:3b:85:ec:82:7c:
                    29:fe:9c:fd:df:5c:b7:3a:f4:e1:42:81:9f:04:1a:
                    ab:c2:42:55:98:95:01:6f:f7:09:cd:28:4e:2f:f4:
                    74:cb:44:59:21:d6:40:84:90:4f:9e:69:e3:a0:d9:
                    27:e3:b8:cc:fd:1a:04:e9:59:e6:10:a4:b2:8a:ea:
                    46:ef:95:8e:35:04:c6:ca:16:b1:e3:df:29:49:ee:
                    90:a0:b0:cd:53:0c:e7:f8:d9:6b:25:fd:8e:83:b3:
                    04:20:6e:28:ac:01:a2:b9:14:02:72:97:5a:f9:b1:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3C:A7:62:2D:70:73:A6:0A:D5:E4:02:A5:90:4D:D3:6D:82:CB:A9
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133302e39392e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:3d:6d:98:48:c7:a4:5e:95:0a:ee:f0:58:1b:c8:b3:8e:
         41:9b:74:80:08:da:dc:4b:72:92:aa:22:e0:58:3b:db:a6:cd:
         8b:85:dc:ca:0c:20:02:9c:1a:e6:42:94:84:49:46:b6:00:50:
         6c:11:62:52:95:65:d3:06:61:f6:e5:fb:99:a4:50:77:8a:b4:
         77:9f:76:ce:f0:46:24:85:cf:1b:71:0c:0e:1c:c6:97:56:30:
         2a:b3:eb:0d:c8:a7:e8:8c:1d:4c:0a:6c:01:78:e8:21:70:63:
         3d:2e:18:51:74:4f:a8:c5:34:46:fc:6b:6b:dd:28:64:31:70:
         50:a2:e6:bd:0c:44:02:7e:e4:aa:49:fc:2d:a4:a2:d2:f7:fc:
         34:0f:3d:e6:15:cb:2e:89:0b:55:55:49:37:e6:57:d5:16:a8:
         fa:bb:35:66:2a:a2:a7:df:2f:7f:2d:c7:09:a3:76:09:55:36:
         af:e1:4f:df:aa:5e:81:0b:df:4b:50:75:82:f6:e1:63:d6:60:
         97:a5:71:7c:2f:58:a1:da:ee:be:f4:99:74:d3:89:8d:b6:a7:
         ad:17:18:57:e8:31:d4:98:09:b3:58:1c:04:cb:a2:ee:1e:f7:
         3d:68:d3:a2:56:8e:e6:6c:3a:b7:29:42:9a:e5:40:14:e7:88:
         d2:c8:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org