Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa
File:                     3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa (raw, json)
Hash identifier:          5QrxrWWDqzc7ZYrS9gH1ysjf2PDjlzy5sv57y5jtgi4=
Subject key identifier:   B1:AA:5B:AE:30:65:89:9D:37:40:AB:EC:A7:E2:59:26:2C:88:8C:B9
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       2BCF2A132F2CD7E5B52842375DE1075286F8E76C
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa
Signing time:             Mon 15 Jan 2024 12:10:10 +0000
ROA not before:           Mon 15 Jan 2024 12:05:10 +0000
ROA not after:            Mon 13 Jan 2025 12:10:10 +0000
asID:                     271420
IP address blocks:        181.233.46.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cf:2a:13:2f:2c:d7:e5:b5:28:42:37:5d:e1:07:52:86:f8:e7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Jan 15 12:05:10 2024 GMT
            Not After : Jan 13 12:10:10 2025 GMT
        Subject: CN=B1AA5BAE3065899D3740ABECA7E259262C888CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:e7:0b:10:d2:63:5b:36:fc:c2:b9:7b:98:
                    27:50:b4:88:c6:35:18:18:8a:be:44:a5:96:79:aa:
                    8f:9a:84:d9:df:d1:32:52:bf:d7:6e:20:68:42:55:
                    c6:98:08:2f:b0:61:b1:65:38:0b:db:68:9b:5a:ea:
                    7f:83:23:ae:17:07:33:f4:3f:0c:1c:03:4a:25:8a:
                    fa:6d:6c:cd:3b:42:3a:81:e2:76:13:ac:cd:7c:ae:
                    0e:91:3a:ea:e9:a0:9e:f2:38:b7:7f:a8:61:c6:ae:
                    75:28:c8:79:12:38:67:1d:70:0a:f4:da:8d:ee:b2:
                    d1:a4:f7:d1:2d:7f:50:0a:1a:79:60:01:49:31:a1:
                    57:dd:f0:49:57:fe:ea:02:c1:c4:55:8e:d1:df:7f:
                    a4:5c:18:fd:7a:11:ec:94:b9:6f:63:24:58:8c:0a:
                    a2:1c:c4:4b:0e:e5:0d:51:a9:f2:74:ee:4c:f1:48:
                    b9:67:84:57:af:8c:10:7d:f5:b5:a8:08:0b:ce:0f:
                    84:63:61:fa:19:30:d7:16:58:c0:74:f1:d7:b7:21:
                    24:f8:8e:9f:99:9b:b4:ad:8d:f8:e4:35:2b:d9:d5:
                    75:ed:88:4c:8e:e7:ec:18:96:93:d0:8f:c1:44:f6:
                    9b:ec:90:29:95:2e:85:f8:02:50:20:a0:1b:a4:52:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:5B:AE:30:65:89:9D:37:40:AB:EC:A7:E2:59:26:2C:88:8C:B9
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34362e302f32332d3233203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:c1:4b:f4:04:f6:9a:60:cf:55:bd:81:48:c5:b8:70:87:
         e0:cd:c1:6e:47:81:c7:ff:13:f4:ab:10:ec:bc:82:82:a4:9c:
         ac:39:b0:4d:72:82:6b:a0:8c:9b:90:57:a6:48:d1:28:08:8b:
         a1:32:4e:c6:94:e2:69:81:bf:a8:1b:0e:89:d5:0e:2c:f5:57:
         1e:fc:32:fb:4d:0a:cf:a3:d6:a3:d6:21:a2:9a:ca:eb:2b:97:
         44:98:b1:8b:b7:61:f0:25:52:d0:7b:52:89:86:4e:b6:23:03:
         e3:92:4b:0a:93:a1:69:74:fd:c1:67:ba:3a:ea:7c:a0:27:b9:
         3d:b2:0e:74:15:8c:66:4f:97:fd:b2:8e:5e:22:0b:44:f1:f9:
         ea:3e:2b:b3:0d:10:7e:cc:49:ce:a2:51:28:83:2c:55:36:4b:
         51:ac:93:11:2d:1f:a4:4b:21:8f:3d:4b:8a:e6:c3:84:40:5a:
         cd:43:a4:b4:cb:2c:50:bf:4e:5b:08:dc:16:0f:56:45:37:d9:
         98:20:59:ef:9a:38:fc:0a:83:bb:d1:89:fc:d4:87:2e:72:ea:
         fa:db:1f:fa:e8:e7:87:fd:c7:fb:22:2f:d8:3b:b9:da:a3:ec:
         2a:0a:9c:ca:c3:40:b0:a9:94:a9:99:a9:32:bd:14:ab:dc:ad:
         fd:72:56:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 02:24:52 2024 by rpki-client on console-fra.rpki-client.org