Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          LjdrxACmLvv6flATRXLY8k03nwLWHP2c4epbyepy++U=
Subject key identifier:   74:AA:5B:1E:A9:46:49:7F:77:4B:82:B0:AC:A6:F9:6F:49:9E:63:79
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       1EDF09685F9590BCC58F4BBCF38808F22332B89F
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.133.128.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:df:09:68:5f:95:90:bc:c5:8f:4b:bc:f3:88:08:f2:23:32:b8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=74AA5B1EA946497F774B82B0ACA6F96F499E6379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:c9:99:e0:59:96:eb:24:6d:9e:13:22:c5:
                    75:47:03:66:f1:70:7b:91:14:30:df:78:f0:01:0d:
                    64:9e:e5:b0:8f:57:7c:95:75:e5:f9:7e:67:5d:85:
                    18:3e:d7:c9:10:4f:5d:33:cb:7e:1e:e7:3f:ef:cc:
                    93:28:8b:46:47:db:96:d4:ce:90:a7:02:75:9c:db:
                    6a:0c:b2:96:a2:54:98:28:71:5a:c5:4c:3a:51:c9:
                    d7:58:31:95:38:b0:58:74:2c:40:e6:c1:f8:23:a6:
                    19:17:92:e0:fc:17:d5:af:5d:01:19:ba:88:e6:98:
                    d3:66:37:34:2d:a8:1d:1e:d9:ff:0d:e9:e0:c8:a2:
                    45:68:7b:9d:53:82:06:b8:9f:5e:f0:0f:b8:fd:74:
                    cf:45:a1:ef:18:0c:60:52:fc:00:ae:82:54:2a:88:
                    b8:53:9d:55:ba:50:45:5b:4f:30:aa:c5:da:33:28:
                    af:de:27:9d:b1:63:24:f7:52:06:31:3c:28:37:fb:
                    aa:3d:fe:c7:00:21:fb:39:73:11:71:f1:ba:3f:3f:
                    e6:9b:10:d6:40:2f:13:2a:b7:9b:d5:ae:aa:1f:df:
                    39:2d:ad:3f:20:08:43:6b:f5:cc:1d:ea:0c:ed:f5:
                    47:66:31:c0:8e:30:75:f7:c1:09:77:21:b1:c8:4a:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AA:5B:1E:A9:46:49:7F:77:4B:82:B0:AC:A6:F9:6F:49:9E:63:79
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:44:9f:1f:df:e5:67:e2:b5:53:ca:f8:80:2b:fe:ab:9a:e1:
         51:a7:0d:38:f6:3e:d1:d7:aa:5b:84:44:c1:7a:34:7b:c1:c5:
         6a:46:8a:f9:e7:8e:b6:79:4f:c7:56:69:93:d2:d4:43:24:3f:
         4d:05:79:7c:3e:7e:e2:7a:0e:4d:d1:ff:1e:ae:82:c5:63:1b:
         2d:e4:19:5d:2d:7b:dc:73:3e:0c:5a:10:f1:1c:5d:b7:9d:27:
         08:01:cd:28:a2:34:20:fc:06:53:fe:1e:97:76:75:1d:09:4d:
         07:0b:00:43:2c:f9:ba:d4:ec:10:b4:ef:50:5a:39:cb:10:a9:
         a8:35:3d:be:27:be:78:77:5d:ee:c1:5b:ad:e0:27:82:7f:68:
         6c:e1:35:21:2c:40:71:f1:1a:3f:75:a3:83:5b:21:49:e2:d1:
         8b:5f:d8:9e:d0:af:75:12:e7:ab:6d:9d:94:7b:07:50:84:be:
         32:47:e5:49:03:51:a7:70:9b:7c:f8:3f:38:ae:cb:38:4b:f2:
         5e:13:8e:f3:fe:dc:17:e7:23:2e:5d:84:98:e6:b3:04:cd:f1:
         5f:df:ca:4f:4d:f1:44:8b:18:d7:ba:04:30:27:7e:10:75:3e:
         3a:e2:95:38:9f:ae:4d:2f:70:be:5c:95:46:f2:1c:ed:e3:80:
         e9:63:89:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org