Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130302e302f32342d3234203d3e203631383332.roa
File:                     3230312e3134382e3130302e302f32342d3234203d3e203631383332.roa (raw, json)
Hash identifier:          GHlKY5irHRNkAlYSnTD5GejvkiReRUMyLDSduamJsBw=
Subject key identifier:   E4:83:80:26:34:76:6B:85:21:C0:97:74:55:21:10:D4:61:AF:D2:AF
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       7AD6DF32DB4851C219A8886EC63ABBD6E644A893
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130302e302f32342d3234203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:47 +0000
ROA not before:           Thu 05 Oct 2023 17:46:47 +0000
ROA not after:            Thu 03 Oct 2024 17:51:47 +0000
asID:                     61832
IP address blocks:        201.148.100.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d6:df:32:db:48:51:c2:19:a8:88:6e:c6:3a:bb:d6:e6:44:a8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:47 2023 GMT
            Not After : Oct  3 17:51:47 2024 GMT
        Subject: CN=E483802634766B8521C09774552110D461AFD2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:29:ef:bc:68:1c:75:d5:b1:bc:22:dc:a8:
                    97:88:ac:96:af:d4:48:e8:69:bd:cd:b7:f9:d1:b9:
                    54:b5:dc:0b:72:72:b8:a5:b9:82:27:7b:fe:a9:2d:
                    ef:60:33:dc:fa:63:8e:ec:95:83:d3:0b:dd:3d:e5:
                    bb:74:df:fd:93:4b:ae:bc:a3:8d:51:4a:d0:7f:61:
                    64:66:b9:ab:30:2d:ce:d2:16:bc:14:f8:9a:98:1e:
                    3b:eb:16:b0:92:cc:28:19:a2:da:4c:ec:3d:97:e9:
                    e4:ab:dc:d9:ac:22:0c:1f:a4:0a:de:23:3e:33:79:
                    f0:01:ae:5b:86:a1:3a:31:9f:df:ec:29:4c:99:a9:
                    7d:96:d3:90:5b:5e:4b:0c:8c:14:ef:45:83:dc:bb:
                    c2:6b:da:04:21:c1:3a:7e:9d:62:1c:20:35:c5:4c:
                    49:ac:c9:d1:25:62:99:11:f3:3c:e8:a0:5d:63:af:
                    f6:b9:a6:89:37:e5:01:01:e8:69:38:c7:9b:a1:84:
                    27:4b:a4:30:bc:a4:cf:90:a7:bd:86:ab:ce:01:f4:
                    79:68:6f:39:49:9f:58:3b:bc:a9:8e:2b:9d:e6:92:
                    0e:77:62:22:5e:5e:f3:d3:5d:a1:9b:97:8e:c9:4b:
                    85:b2:87:e6:ef:da:be:0d:fe:73:56:ed:1a:28:2f:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:80:26:34:76:6B:85:21:C0:97:74:55:21:10:D4:61:AF:D2:AF
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130302e302f32342d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:b8:19:91:a6:ba:01:81:dc:ac:f7:40:66:bf:ef:5b:24:
         47:bb:b5:ca:04:0a:ac:7a:3f:8b:66:1a:cd:f8:4f:84:f1:42:
         4d:f8:7a:f2:58:eb:c5:5f:84:4e:68:14:75:65:a7:70:df:39:
         2d:90:71:c8:bc:8a:76:72:f4:4c:f2:c4:5d:07:99:2e:ad:42:
         76:5f:0c:2b:4a:c9:39:15:93:e1:37:17:f1:a8:ca:62:4a:30:
         48:da:e1:dc:b4:41:9c:6f:48:91:28:ec:21:a4:8b:92:4b:9e:
         be:cf:27:28:b4:40:2d:de:d8:e9:71:b2:e7:ee:cc:99:36:a4:
         4a:f0:50:48:65:15:4c:db:e3:30:16:bf:fc:96:39:fc:48:83:
         66:87:d5:e8:ea:0d:7e:d9:cd:0a:7f:67:89:5a:cf:6d:8a:a3:
         5f:58:7b:d7:8f:d6:9f:00:9f:dd:fe:32:39:3a:9c:bc:4b:3a:
         22:81:3c:40:6d:46:6f:db:7c:d7:b6:f4:fa:1e:c4:41:16:6d:
         56:a3:d5:1f:82:37:10:ba:ba:a5:18:a4:9b:41:be:b7:77:e3:
         6e:15:ee:fb:08:81:e0:18:b1:65:ab:07:0e:62:52:61:0d:c8:
         54:b9:a0:fa:e7:fb:6c:8f:ad:d5:37:14:0b:65:58:69:ce:ec:
         96:0b:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 19:05:31 2024 by rpki-client on console-ams.rpki-client.org