Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130332e302f32342d3234203d3e203631383332.roa
File:                     3230312e3134382e3130332e302f32342d3234203d3e203631383332.roa (raw, json)
Hash identifier:          QtsajAXN51Z8IAsIorWhy/Gy/CoGujKf6ApUn33K+7I=
Subject key identifier:   09:F1:B8:3B:09:6B:BE:74:78:21:D7:FE:EF:C8:94:6B:FE:BB:61:11
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       084F33E2EDE0DF4DFCF775523E5D68DCDCA503BA
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130332e302f32342d3234203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:46 +0000
ROA not before:           Thu 05 Oct 2023 17:46:46 +0000
ROA not after:            Thu 03 Oct 2024 17:51:46 +0000
asID:                     61832
IP address blocks:        201.148.103.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4f:33:e2:ed:e0:df:4d:fc:f7:75:52:3e:5d:68:dc:dc:a5:03:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:46 2023 GMT
            Not After : Oct  3 17:51:46 2024 GMT
        Subject: CN=09F1B83B096BBE747821D7FEEFC8946BFEBB6111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:cd:36:90:ae:72:ea:cb:6b:7b:91:97:3e:
                    60:29:f7:b9:9b:34:c2:f7:4f:13:f9:df:b2:59:a9:
                    95:6d:55:8c:05:30:73:8e:ba:5d:5c:28:8e:86:0a:
                    95:11:32:b5:5b:b8:7f:02:df:f4:c3:98:29:59:27:
                    c7:46:9a:c2:fc:4c:9b:f3:72:d9:98:fa:01:90:7a:
                    78:54:32:05:39:26:af:c4:e9:a2:31:89:58:f0:e5:
                    ed:bf:d6:0a:75:5d:e5:f5:90:bd:2e:ca:68:30:b2:
                    b0:9a:49:bc:5e:90:f5:71:1c:74:ac:5b:0c:92:c7:
                    2c:e0:5f:32:95:b3:b0:40:6e:5e:be:37:38:e5:90:
                    c2:a0:54:e7:e3:29:db:b1:b2:53:70:a4:26:d5:04:
                    7b:0d:94:28:ee:2e:b7:47:94:88:6a:44:ea:1a:90:
                    63:e6:76:35:5e:41:f2:6e:03:0e:81:52:23:b6:b8:
                    10:0d:3a:f5:f4:50:88:0a:12:d3:34:48:8d:f4:06:
                    b9:ff:fd:d4:f5:85:1e:40:eb:2b:b1:79:ce:8f:66:
                    32:11:64:39:43:b2:0b:28:4b:2a:fb:ce:0d:e5:82:
                    56:b1:d0:c0:4f:34:de:88:e4:21:fb:16:6a:3c:9b:
                    76:98:c8:5b:71:49:33:9d:c8:e4:a7:21:f2:de:ef:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F1:B8:3B:09:6B:BE:74:78:21:D7:FE:EF:C8:94:6B:FE:BB:61:11
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3230312e3134382e3130332e302f32342d3234203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fc:20:e3:8c:c6:5d:db:b7:bb:c3:3d:7c:3a:6c:a1:8a:cc:
         e1:69:86:8d:02:63:2a:b9:fd:bf:55:04:28:30:ee:9f:8b:94:
         4e:90:68:3e:9f:63:40:b7:aa:2a:34:c1:74:8c:ed:9a:77:57:
         b2:18:27:24:70:0a:0e:23:a4:2c:46:ce:07:14:da:c1:8b:d5:
         57:2a:5f:ad:8e:c4:c2:4f:1e:a1:47:88:fa:ea:76:b6:3b:2b:
         09:f0:63:77:d4:57:14:1a:98:a5:8b:1b:c7:ae:8e:f0:1f:a5:
         a2:ae:34:3d:7f:57:a7:b6:11:97:f1:e3:ac:68:f9:71:6d:ea:
         39:66:59:f4:0c:5a:ea:f0:01:69:8e:72:93:d8:e4:e1:37:53:
         9d:87:63:1c:24:f2:27:10:c2:65:61:4c:a3:7f:31:f0:7f:8e:
         6d:26:88:aa:22:8e:94:ab:f1:51:2f:22:1f:13:c3:78:78:91:
         c6:5a:32:1f:a0:f2:50:ac:72:2b:dc:c9:df:86:1a:0e:ba:89:
         bd:12:ad:44:f7:76:38:07:2f:49:bd:ff:81:4d:83:00:90:a6:
         b9:f6:57:74:22:3f:4a:67:dc:8a:10:da:09:24:7f:4a:dc:e5:
         18:6c:4b:dd:67:2e:02:73:a9:91:bb:8b:bb:a8:e8:31:37:66:
         d1:b5:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org