Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e31392e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          cFZbtnJm/oUypQEsMQYuyZRqX4z0eRy0044FcT38Kds=
Subject key identifier:   FA:26:EF:F5:46:D8:98:2E:07:50:EE:FB:7C:D4:F1:24:D6:84:4A:FD
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       48F4B75997A6A3CDBE37438B26DA39D5080EEF76
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:01 +0000
ROA not before:           Thu 08 Aug 2024 03:04:01 +0000
ROA not after:            Thu 07 Aug 2025 03:09:01 +0000
asID:                     1916
IP address blocks:        200.19.128.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f4:b7:59:97:a6:a3:cd:be:37:43:8b:26:da:39:d5:08:0e:ef:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:01 2024 GMT
            Not After : Aug  7 03:09:01 2025 GMT
        Subject: CN=FA26EFF546D8982E0750EEFB7CD4F124D6844AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:57:08:09:4e:66:40:5a:be:87:8b:93:3d:
                    9f:4a:f2:52:6c:05:62:7d:10:a8:19:06:00:41:ea:
                    83:3d:59:b3:03:1f:c4:1b:52:20:f4:c9:7e:c7:eb:
                    4f:4d:8c:10:52:59:e9:6c:fb:13:c7:b2:ca:ec:89:
                    d7:bb:ac:ab:c8:94:c9:6c:e3:2b:c0:6e:46:16:f4:
                    b6:17:d0:4c:05:82:ae:f5:79:dd:cc:8c:20:13:c1:
                    e1:f2:f1:1c:ef:5a:14:f6:e0:83:33:a6:b4:e4:91:
                    99:17:0b:b2:b2:9e:c3:a0:b1:81:b5:ce:e7:09:72:
                    b9:38:1b:a5:5f:d9:5c:dc:91:4d:36:29:26:41:47:
                    3a:3c:25:66:8c:bc:b9:9e:bd:de:95:b8:45:3f:23:
                    03:08:8e:fd:a1:d0:79:7f:c7:a7:77:25:06:51:2d:
                    a7:df:6e:96:a1:09:28:a4:d2:b4:08:ae:b6:ab:20:
                    1e:fc:43:80:1b:9f:7b:f6:d1:98:b0:2f:b2:49:76:
                    98:8c:ae:5b:98:15:e4:da:6d:57:35:dc:4e:32:ed:
                    75:39:71:37:3d:03:ca:1f:d6:54:71:2d:2f:a8:30:
                    5f:3d:10:6f:45:00:b5:eb:37:5d:44:81:d1:55:7f:
                    98:ba:38:77:76:13:12:29:df:6a:bc:2a:d1:b6:5f:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:EF:F5:46:D8:98:2E:07:50:EE:FB:7C:D4:F1:24:D6:84:4A:FD
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3230302e31392e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3f:32:fe:56:41:3e:24:64:02:83:a5:8a:67:f1:bb:7d:16:cb:
         96:d6:49:59:b3:11:e6:cc:39:a5:a7:49:4b:3b:41:1b:91:89:
         1f:de:f3:8c:8b:8b:12:39:33:a1:83:df:82:59:1a:da:d5:1c:
         02:e6:7e:c6:d7:0d:5a:35:e2:bd:b9:af:93:56:32:05:18:db:
         ac:42:ef:7c:0a:75:e2:c6:08:6e:7e:4c:56:da:5e:19:9a:cb:
         3c:ed:44:c6:92:cd:31:2e:9b:6b:97:4c:ff:ea:47:61:22:90:
         9c:6d:05:b7:9f:71:9b:0d:fc:26:0d:96:1d:a7:85:46:cb:95:
         e6:9f:78:c0:57:ce:85:f1:60:de:a0:f2:67:9a:c5:e7:e0:7f:
         e4:c0:a2:e4:98:4c:e6:43:73:19:ff:68:da:c0:a3:a4:c5:a1:
         70:f3:67:23:ee:66:40:ef:91:e7:92:0f:5d:75:0f:b5:d3:7f:
         1a:36:07:2a:ac:5a:6a:4a:d5:42:11:f1:bb:38:75:9a:55:12:
         c0:f7:3e:fa:07:25:37:0f:cb:c0:81:88:09:82:94:1c:96:22:
         37:b5:4d:fe:3a:4b:cf:51:8e:d5:e8:7a:76:b2:6f:04:c7:3c:
         d2:5a:27:21:07:2e:e7:c1:9e:75:0c:ac:c5:b2:b3:0d:ba:36:
         9d:bc:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org