Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130302e302f32322d3232203d3e203631383332.roa
File:                     3230312e3134382e3130302e302f32322d3232203d3e203631383332.roa (raw, json)
Hash identifier:          XHf9IgBQtiL6kx5xJ8/J8fO9NoGwK7PVChW6Db00r+w=
Subject key identifier:   F9:67:A7:25:FD:E8:33:65:82:5C:65:00:F2:75:95:D4:0A:1C:36:9C
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       060330406A6C3A229C401997E3C9E446EBDFE46E
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130302e302f32322d3232203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:47 +0000
ROA not before:           Thu 05 Oct 2023 17:46:47 +0000
ROA not after:            Thu 03 Oct 2024 17:51:47 +0000
asID:                     61832
IP address blocks:        201.148.100.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:03:30:40:6a:6c:3a:22:9c:40:19:97:e3:c9:e4:46:eb:df:e4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:47 2023 GMT
            Not After : Oct  3 17:51:47 2024 GMT
        Subject: CN=F967A725FDE83365825C6500F27595D40A1C369C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:6c:5f:cf:3e:84:a3:ea:6d:bf:17:d9:4e:
                    ae:24:14:8e:26:1a:d0:47:19:81:67:1e:9c:9c:08:
                    02:c2:21:8d:c2:b6:2f:6c:a4:56:0e:25:86:92:c2:
                    cf:9d:6e:4c:92:0c:bd:ee:93:a5:fd:a9:3b:b3:07:
                    b5:12:cb:66:fc:f5:09:48:f2:15:c5:c2:9f:5a:70:
                    f1:04:f2:ca:9e:37:c6:a6:8d:65:75:2e:21:74:71:
                    e7:df:b0:63:62:89:8c:c9:b1:14:df:b7:57:3f:04:
                    aa:ff:af:22:f7:44:ae:03:64:c2:7e:c5:42:bf:9e:
                    c5:98:1f:69:c4:3c:9e:5a:d8:98:fc:78:a9:0a:1a:
                    57:ef:de:36:ac:1a:08:85:21:bc:c4:4d:92:48:d5:
                    ba:86:a3:99:89:05:d6:57:8b:25:9d:29:28:be:dc:
                    dc:79:f8:58:4b:f4:53:e5:0e:2b:18:ea:4a:98:38:
                    99:84:ee:05:f4:e7:1f:cc:99:46:d6:ef:58:86:f0:
                    de:99:8a:c0:61:f8:76:df:be:fb:aa:de:ab:64:0d:
                    42:df:33:ae:cc:8e:84:e6:4a:e6:84:6f:b8:a8:f5:
                    e6:ca:a1:5e:18:21:7e:d7:6a:d6:d8:22:35:6c:b4:
                    10:e1:63:61:46:c2:f7:ee:42:93:52:b1:c8:cd:21:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:A7:25:FD:E8:33:65:82:5C:65:00:F2:75:95:D4:0A:1C:36:9C
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130302e302f32322d3232203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:75:9a:e4:c2:1d:6f:08:4c:d1:fb:73:7a:dc:12:73:ce:
         d2:67:bf:90:ae:ce:e8:40:b6:b7:eb:0e:df:07:bd:42:e4:75:
         fd:13:6a:f8:88:6b:c3:16:85:37:49:e8:5b:9b:5f:46:54:da:
         4a:30:2c:61:7a:e8:81:c5:47:48:2f:4c:82:7b:7d:0b:19:d2:
         74:67:88:08:d3:ad:b9:20:1e:02:b4:3b:24:9e:a8:08:b8:3d:
         04:30:6e:86:bd:30:dc:82:ba:66:67:d9:07:77:25:8e:d2:29:
         66:62:6a:15:51:7a:1f:42:0d:ad:66:51:c4:c9:c8:a3:d1:9b:
         07:c3:e0:d5:96:d7:8e:d4:4d:dc:a0:da:8e:61:13:9f:6e:a4:
         bf:8f:54:5c:5f:21:d8:77:92:c0:d8:70:53:ab:ae:42:76:fc:
         5d:fd:ef:c8:1a:d0:d2:81:5c:17:42:80:9f:4a:65:ad:c8:79:
         30:b1:e7:2e:c1:e7:f3:71:9a:1c:58:f5:f1:45:a4:ac:ba:dd:
         b4:2a:0b:d2:4d:16:e2:85:75:98:bc:60:32:3d:3c:37:55:f8:
         1f:fe:60:46:cf:a8:c6:d1:91:1c:c7:ee:c1:54:4b:70:7a:cd:
         dc:75:bd:25:eb:ee:90:66:21:3c:7f:12:39:3d:c4:2f:96:8a:
         fd:f4:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org