Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32342e302f32342d3234203d3e203134363138.roa
File:                     3230302e31382e32342e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          yqWNurMvB7+ugmWsK1ChHZnTHKfLLCKu3UkXYvspoRA=
Subject key identifier:   F5:4A:25:1E:2D:1D:5B:18:E9:1F:DC:05:54:6D:69:8E:1A:48:99:14
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       30BA45676F125CDA31902DF650236421CCE9CE78
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32342e302f32342d3234203d3e203134363138.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     14618
IP address blocks:        200.18.24.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ba:45:67:6f:12:5c:da:31:90:2d:f6:50:23:64:21:cc:e9:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=F54A251E2D1D5B18E91FDC05546D698E1A489914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:aa:54:da:31:31:65:3e:3a:d6:b8:6b:a4:
                    a4:57:ce:46:ae:1b:9f:f0:f3:5b:25:36:91:b3:4a:
                    53:1e:df:97:83:ec:3b:72:74:ce:4e:3c:87:2e:84:
                    17:19:04:80:38:83:ec:7a:e7:23:31:f6:a4:3c:33:
                    1f:63:60:1f:d1:d1:31:d2:82:e4:eb:fd:e4:38:ec:
                    e4:11:ac:fc:25:82:6c:0d:3c:72:a6:a8:41:f4:ac:
                    10:4a:8d:bd:77:70:a3:99:cc:a8:8b:9d:44:09:c2:
                    80:3f:22:4a:45:ce:59:ee:10:50:86:f8:18:9b:e4:
                    3b:4f:53:29:dd:4b:67:25:3d:f1:6c:97:e9:79:07:
                    2e:a8:6e:4c:97:69:2a:6e:77:82:7e:04:ae:38:f5:
                    1b:75:c2:81:4e:8b:a5:2c:ef:a8:9c:2e:6e:36:12:
                    70:a9:bb:46:96:04:26:7f:dd:da:a6:8c:8e:c4:20:
                    4a:f2:7f:97:59:a4:1b:96:64:0f:33:bc:15:4c:8b:
                    a9:77:17:75:b5:1e:61:5d:15:1f:dc:2e:76:a2:72:
                    dc:96:6f:7b:36:b0:eb:69:48:4c:84:b6:34:53:04:
                    de:2c:80:27:56:3a:14:a1:e8:08:50:c6:77:40:c5:
                    9c:2f:6c:98:ed:59:92:5b:8a:44:48:6f:f2:56:b3:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4A:25:1E:2D:1D:5B:18:E9:1F:DC:05:54:6D:69:8E:1A:48:99:14
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e32342e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:71:d1:8e:05:83:4e:61:4a:a1:3b:4c:d6:a6:04:2a:d9:
         d1:a9:2e:f5:2b:c6:f6:3e:47:f4:bb:4b:93:e1:ac:ec:2d:58:
         ab:d9:b2:11:4f:f0:0d:ca:8f:f6:2f:19:e7:b3:66:24:76:80:
         68:7f:18:f0:57:6f:d5:bd:4b:b2:9b:63:4f:e2:84:d7:6a:da:
         b8:c6:39:d9:e2:9b:89:54:c8:01:b2:1f:99:14:2b:4e:77:3c:
         eb:ba:3b:a7:9f:1b:4c:58:4b:ad:f3:fe:8d:6d:6b:64:81:2b:
         09:59:05:c0:32:31:67:df:22:47:1e:cd:41:48:4d:15:50:88:
         3d:8b:9c:d6:1e:4c:fc:84:23:f6:28:4f:09:25:75:94:2c:18:
         4e:60:72:9c:42:21:6d:3e:f7:5d:91:d2:d4:b3:52:ed:d0:fc:
         88:7b:34:df:1f:f7:9c:76:22:0e:47:35:60:e1:a2:d9:ab:6b:
         b5:49:c9:1f:76:a2:61:67:fc:19:4c:67:7e:a7:5c:a6:ac:20:
         ca:b7:fc:37:70:2a:45:d1:88:54:32:87:fb:97:ae:44:eb:ab:
         bf:5f:0c:8c:b3:05:f7:b0:f3:a0:29:01:33:1e:0d:24:ae:ba:
         e6:4c:e2:ab:3a:37:68:49:4d:7f:a8:db:07:7d:9f:31:c0:9e:
         62:45:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org