Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa
File:                     3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          xR8INzwRXX6vvHD8O7Np+zATLTawXllA8+qoaxNrE44=
Subject key identifier:   80:99:91:4B:15:40:69:D3:53:4F:78:B0:8F:C0:BA:85:CA:57:F5:2A
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       364C9C58D3FEAC8F0FF662039656444DE3072856
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:02 +0000
ROA not before:           Thu 08 Aug 2024 03:04:02 +0000
ROA not after:            Thu 07 Aug 2025 03:09:02 +0000
asID:                     1916
IP address blocks:        200.159.240.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4c:9c:58:d3:fe:ac:8f:0f:f6:62:03:96:56:44:4d:e3:07:28:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:02 2024 GMT
            Not After : Aug  7 03:09:02 2025 GMT
        Subject: CN=8099914B154069D3534F78B08FC0BA85CA57F52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:e3:84:bd:c3:f1:b6:75:e0:97:3d:a6:84:
                    e5:fc:7a:e7:58:1e:d9:b3:6e:cc:02:8d:8a:0d:b6:
                    b8:35:71:f3:9a:e5:a8:31:e3:6b:91:c3:60:d5:11:
                    89:92:1d:4e:81:5f:7c:8f:e5:00:76:44:f1:18:c9:
                    7a:e9:ac:4a:17:a5:9a:c5:cc:24:a0:e3:06:d0:9a:
                    dc:1e:94:e9:78:47:34:d1:c4:0b:72:01:9e:4d:f3:
                    16:91:cd:ea:51:d0:bb:62:cd:05:1f:a2:f6:4b:e7:
                    d8:80:d9:ae:c3:80:1e:cf:a6:c8:52:86:63:41:7a:
                    db:fe:9c:0f:30:6d:e5:c7:18:64:a3:c1:40:4d:27:
                    10:eb:87:32:2b:99:49:7d:0a:27:b7:b6:e5:a4:39:
                    37:f6:f7:39:a5:9c:e7:2f:43:a4:0d:5e:f2:97:2e:
                    66:b9:2f:3a:60:39:7e:ec:7f:40:c7:50:0b:f1:02:
                    b6:1f:6f:28:f8:49:ac:6d:56:5c:49:26:8e:68:9f:
                    70:93:66:7f:3f:de:9f:08:c4:87:08:52:ab:3a:7d:
                    0f:09:3e:da:91:a7:e7:0d:35:e2:60:a0:0b:44:99:
                    3a:17:18:66:95:fd:dc:d8:69:a6:8e:e4:4e:53:59:
                    2a:37:db:18:94:db:d6:c1:e9:89:be:22:2a:0e:b4:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:91:4B:15:40:69:D3:53:4F:78:B0:8F:C0:BA:85:CA:57:F5:2A
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:8b:11:dc:0a:27:02:a6:dd:8f:0c:87:4b:9f:b7:77:af:1d:
         8f:a6:1a:ef:a6:26:48:2e:5d:77:06:92:bb:c8:28:7b:e1:dd:
         32:a7:02:b9:d8:ac:0b:fc:f1:fc:85:3f:f3:95:09:08:17:76:
         03:e3:74:81:dc:24:79:aa:c8:14:00:a6:8f:ba:f3:64:4e:82:
         47:a5:f3:10:41:31:6d:0d:dc:91:99:71:ad:63:77:53:2a:47:
         e9:19:7a:e2:7d:30:03:98:fa:3e:9e:19:f1:76:16:45:88:3f:
         a2:10:59:fb:4b:47:bb:2b:db:de:a8:20:da:6f:ee:90:8e:5e:
         ed:79:b6:fe:84:e3:1e:dd:57:92:de:5b:1a:3b:ef:4f:fc:96:
         39:76:3c:82:56:3e:15:7d:72:48:cf:e1:01:b9:2f:77:e5:16:
         39:23:fd:5a:15:bf:d0:88:84:31:60:1c:b9:57:44:85:f5:99:
         1f:e6:1d:8b:5f:bd:e3:08:04:f3:c6:2e:79:17:10:1f:15:3a:
         2d:88:6b:9b:04:b6:5e:9a:de:3e:39:ac:94:15:ef:52:7d:43:
         34:40:19:00:d1:6e:7d:d8:cb:5d:c5:ae:43:76:e7:61:18:48:
         37:0b:ff:d4:f3:6b:6c:15:34:2c:3f:01:a5:c0:c0:6b:db:2a:
         b6:64:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org