Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
File:                     3230302e31382e38302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          5W2kxMkBq74HkE3ftcAtGQjHW18vwLwwxC9Ge1UoKXg=
Subject key identifier:   3A:29:91:BC:A1:47:A6:E2:BD:42:BC:1A:0B:FA:72:09:ED:A8:2F:10
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       73CEEF0D67808A98C1350FC091AD71A621901657
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.18.80.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ce:ef:0d:67:80:8a:98:c1:35:0f:c0:91:ad:71:a6:21:90:16:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=3A2991BCA147A6E2BD42BC1A0BFA7209EDA82F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:19:46:18:4a:04:7c:86:ec:11:45:c2:d0:
                    dd:48:ad:24:b7:32:8c:95:2b:92:c0:08:8a:b5:24:
                    bd:3f:03:c7:b1:58:2e:16:d8:b3:7a:d2:a1:c2:37:
                    57:a6:28:70:be:9d:63:4f:58:59:b3:f3:56:3c:79:
                    52:cd:c5:eb:f5:69:6d:dd:67:bc:7b:39:ea:cb:e6:
                    58:81:47:59:68:ec:2a:03:dc:ef:dd:94:9b:53:46:
                    79:32:f9:ad:a9:fe:f3:25:7e:22:ab:d4:27:96:81:
                    89:40:41:4b:65:5a:b6:5f:85:9b:1a:42:34:d2:6e:
                    e8:7a:68:de:26:75:25:e1:f7:30:6b:ac:49:a7:b8:
                    a6:cf:61:5a:e0:4e:c6:2e:c8:5f:be:80:02:ae:ce:
                    c2:5e:ef:1b:31:11:85:1d:f4:cb:a6:9b:d1:59:3f:
                    93:e5:b9:d7:ff:52:c6:4d:ce:3f:2e:47:67:a5:33:
                    e6:82:25:c9:e7:33:bf:64:e2:e4:00:c0:c6:37:6b:
                    47:3b:bf:db:fb:8d:cb:a2:63:29:41:e0:59:80:e2:
                    cd:47:cf:4a:4e:57:b4:fc:83:63:21:72:c5:87:9d:
                    f2:b9:29:6d:ab:75:22:b8:e0:5f:6e:bf:66:47:98:
                    ea:e1:13:01:e7:1c:4b:55:b1:6a:fd:20:76:5a:da:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:91:BC:A1:47:A6:E2:BD:42:BC:1A:0B:FA:72:09:ED:A8:2F:10
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31382e38302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:11:be:a9:6f:2b:d4:3e:a7:90:4a:3b:a2:c1:c3:a2:91:
         6b:b3:44:02:16:de:06:f4:f6:47:18:fc:ed:94:98:2b:3f:e9:
         f1:08:d6:4e:f8:a4:da:4e:1e:22:37:63:bc:02:b5:02:16:33:
         ed:7d:6e:73:36:d3:fd:18:f1:51:71:fe:0a:7c:08:77:13:b8:
         0b:63:ce:cb:7e:30:a5:c8:c6:c5:cf:40:20:b9:33:88:94:c3:
         aa:f4:d9:93:93:1c:3f:9f:44:2d:35:af:53:b2:7a:a2:bc:1c:
         11:7e:08:70:3c:a4:a1:f2:c1:4a:c3:3d:97:58:6d:70:4c:e4:
         e9:d5:79:f3:83:8e:75:df:83:3a:db:ed:2d:a9:f3:01:4d:53:
         09:48:ba:5b:32:ef:fb:a2:57:e0:d7:3c:0e:89:1b:cc:ed:e9:
         ed:1f:5e:c9:01:f0:2d:0e:b1:20:1b:2b:02:19:1c:d6:2f:f8:
         11:de:18:96:78:b1:27:6d:2f:a9:90:13:55:5e:f8:77:35:ba:
         35:16:15:4b:1c:64:7c:c9:cd:46:62:66:1a:90:3d:1a:84:c2:
         20:f8:2e:62:ba:3b:c4:ec:51:9c:56:3e:cf:c2:20:9d:a9:f1:
         22:dc:cf:a1:3d:f4:4e:81:84:aa:6f:19:41:46:6c:a0:92:36:
         12:a5:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org