Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
File:                     3230302e35322e31362e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          VWJdiqtc66kq4yVpX6dhhM6GW6V2/B8a4uOAu/q2huA=
Subject key identifier:   10:80:22:BA:16:27:78:41:C4:3A:50:0F:95:AD:F2:DF:DB:4A:4F:A0
Certificate issuer:       /CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
Certificate serial:       3CE960A163F4DB88482137B3BE2586561ECB37BE
Authority key identifier: EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
Signing time:             Fri 03 May 2024 20:01:13 +0000
ROA not before:           Fri 03 May 2024 19:56:13 +0000
ROA not after:            Fri 02 May 2025 20:01:13 +0000
asID:                     262659
IP address blocks:        200.52.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e9:60:a1:63:f4:db:88:48:21:37:b3:be:25:86:56:1e:cb:37:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
        Validity
            Not Before: May  3 19:56:13 2024 GMT
            Not After : May  2 20:01:13 2025 GMT
        Subject: CN=108022BA16277841C43A500F95ADF2DFDB4A4FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:e9:b8:82:c2:20:db:c2:37:83:56:43:14:
                    bf:26:aa:ad:29:09:20:a5:cf:ea:5c:6f:7a:82:29:
                    c5:bd:0a:0c:65:0d:40:2c:0b:1c:6a:d0:c3:00:3f:
                    77:be:36:fe:fc:51:e0:c6:72:0f:82:cc:bc:25:6d:
                    02:86:de:06:c9:b9:22:b7:46:11:f1:f2:66:3a:df:
                    4f:07:62:7f:43:3a:e3:f6:49:f8:18:c6:86:d3:de:
                    16:77:f5:3b:72:f4:25:8a:51:ef:cc:76:de:e1:0c:
                    4a:69:09:24:b0:cb:99:02:0a:ac:6a:51:25:2f:99:
                    3a:14:72:8b:33:fe:11:49:87:0e:a3:a3:c4:80:dc:
                    4f:ac:ff:5e:c8:f0:6e:6e:84:8d:87:84:e1:02:8a:
                    55:d8:fa:f4:01:48:de:04:e3:82:37:01:32:f9:56:
                    82:ae:d8:4a:d7:d9:ad:c3:3b:b3:ea:a4:c2:eb:93:
                    6b:c7:26:3d:7a:bf:6f:c1:09:2e:d5:28:0d:9e:83:
                    06:0a:25:1c:34:e1:4f:54:3b:b0:93:cd:4e:85:e5:
                    24:86:6b:84:53:81:d0:e1:a9:0f:ee:c7:46:d8:6d:
                    4a:04:4a:9a:78:c4:a6:b9:5b:60:d2:c0:0e:b2:ca:
                    6b:ad:ba:c4:b2:1f:d6:17:50:da:a4:c4:65:3b:e4:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:22:BA:16:27:78:41:C4:3A:50:0F:95:AD:F2:DF:DB:4A:4F:A0
            X509v3 Authority Key Identifier:
                keyid:EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:5e:d6:24:c2:cd:d0:40:af:2b:c0:bf:a2:df:95:01:db:
         d6:8f:95:dc:df:af:8e:2f:6e:fb:b5:5d:e1:79:78:38:d7:a5:
         a8:0e:f2:5b:e2:3f:d3:78:1a:0a:e7:20:c3:53:54:da:b5:64:
         d0:38:07:9b:a6:c6:05:31:30:d6:c5:6d:53:cd:0f:d8:24:cb:
         40:e7:c8:16:86:89:ca:23:0d:f5:42:14:09:f5:f7:cb:9b:f0:
         87:9e:f6:24:51:52:42:aa:3c:79:e8:3f:ff:80:c7:05:b1:03:
         8f:37:68:62:d6:d7:31:d4:0d:24:e1:65:cd:0f:66:04:d5:18:
         ce:0b:43:b8:b9:f2:c5:2f:2a:b3:cc:d2:42:8a:2e:65:c5:8f:
         e4:c1:cd:1c:33:07:69:9f:43:67:f6:ab:77:5f:89:83:e2:f5:
         7c:38:6f:7d:a1:a6:75:2e:94:a2:63:66:ba:c8:a7:7a:21:6c:
         59:1d:42:9e:ce:5a:a7:79:7a:e9:d6:88:87:eb:72:57:cd:75:
         31:08:b4:d2:b1:8a:e4:20:52:24:12:5b:9e:72:3a:7b:5c:3a:
         89:bd:87:85:54:0d:4b:4a:ce:37:12:54:ad:e4:df:d3:44:13:
         81:67:9d:31:c2:7a:4c:4b:66:05:f9:a5:d7:90:11:f1:c9:7f:
         25:2d:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 02:29:31 2024 by rpki-client on console-fra.rpki-client.org