Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa
File:                     3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (raw, json)
Hash identifier:          /+6k/YBa+uV1zIQPOxuBvobHVQamSxt16Rg9GKh+eBQ=
Subject key identifier:   68:32:0D:69:10:5C:CB:0C:9D:36:DE:66:BC:75:0A:D3:94:7E:9C:BD
Certificate issuer:       /CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
Certificate serial:       1E01A9E51CC8F155351216996A20BCC8E6B94BD4
Authority key identifier: 0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa
Signing time:             Fri 12 Apr 2024 13:27:23 +0000
ROA not before:           Fri 12 Apr 2024 13:22:23 +0000
ROA not after:            Sat 12 Apr 2025 13:27:23 +0000
asID:                     263080
IP address blocks:        189.201.208.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:01:a9:e5:1c:c8:f1:55:35:12:16:99:6a:20:bc:c8:e6:b9:4b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A3653A66554FACEFA2302F5A9E595FCE6E697ED
        Validity
            Not Before: Apr 12 13:22:23 2024 GMT
            Not After : Apr 12 13:27:23 2025 GMT
        Subject: CN=3082010A0282010100BDA3B01B0CABF67B7668CD01B60303B3D4E9B25F158C67BEC447397CC3D66A07F91996F04D63A97E998187CFDFCBB0B3C0D2C1D7895270A6A807D752FE786F7D058C6C7C618E01DCAECFCDA8684886ABC8EB27C70F2156A1A0E5FF785A9AF49C2D06DC29AB2E23944D05ABC55CCACE75BD655263B98081B9C80A60E43FD57A2C5A4B41E73CD9D45C3A1918646134C461949EDAB70F7E4F31721A28786BAA2A78D137A78212A36AF9B6E3B8FF4B313CA8C88A29D9E48F6FD6ED4EFCBE6C804C837EE31B32B06F93D68DC7EF2DFD7306B866E04E746250028F7A01D7D8B217D74EF33059138740449EE1771B5F6F8AA72009D26D4318F350E237E6A9D1794F35DD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:b0:1b:0c:ab:f6:7b:76:68:cd:01:b6:03:
                    03:b3:d4:e9:b2:5f:15:8c:67:be:c4:47:39:7c:c3:
                    d6:6a:07:f9:19:96:f0:4d:63:a9:7e:99:81:87:cf:
                    df:cb:b0:b3:c0:d2:c1:d7:89:52:70:a6:a8:07:d7:
                    52:fe:78:6f:7d:05:8c:6c:7c:61:8e:01:dc:ae:cf:
                    cd:a8:68:48:86:ab:c8:eb:27:c7:0f:21:56:a1:a0:
                    e5:ff:78:5a:9a:f4:9c:2d:06:dc:29:ab:2e:23:94:
                    4d:05:ab:c5:5c:ca:ce:75:bd:65:52:63:b9:80:81:
                    b9:c8:0a:60:e4:3f:d5:7a:2c:5a:4b:41:e7:3c:d9:
                    d4:5c:3a:19:18:64:61:34:c4:61:94:9e:da:b7:0f:
                    7e:4f:31:72:1a:28:78:6b:aa:2a:78:d1:37:a7:82:
                    12:a3:6a:f9:b6:e3:b8:ff:4b:31:3c:a8:c8:8a:29:
                    d9:e4:8f:6f:d6:ed:4e:fc:be:6c:80:4c:83:7e:e3:
                    1b:32:b0:6f:93:d6:8d:c7:ef:2d:fd:73:06:b8:66:
                    e0:4e:74:62:50:02:8f:7a:01:d7:d8:b2:17:d7:4e:
                    f3:30:59:13:87:40:44:9e:e1:77:1b:5f:6f:8a:a7:
                    20:09:d2:6d:43:18:f3:50:e2:37:e6:a9:d1:79:4f:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:0D:69:10:5C:CB:0C:9D:36:DE:66:BC:75:0A:D3:94:7E:9C:BD
            X509v3 Authority Key Identifier:
                keyid:0A:36:53:A6:65:54:FA:CE:FA:23:02:F5:A9:E5:95:FC:E6:E6:97:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A3653A66554FACEFA2302F5A9E595FCE6E697ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:13:5b:00:c2:8c:10:4b:c2:40:7f:68:4b:94:ce:62:54:ee:
         86:b0:7f:ad:c8:ac:92:80:a7:54:8f:df:ec:09:1c:86:4a:d0:
         aa:f5:b7:24:92:ff:01:4e:ef:9c:b2:08:d6:90:b7:0b:31:e2:
         0c:8b:15:da:23:e6:5a:1d:ca:bd:d9:bc:c9:9e:40:2d:64:60:
         52:e2:5d:c0:48:32:9e:e1:2b:0f:4c:84:d3:c1:3a:8a:75:14:
         ad:79:d8:8d:e3:41:8a:86:6f:ed:5d:d3:02:7c:01:67:6d:bc:
         73:38:f2:94:3e:6b:a5:d9:3b:fb:2b:5a:77:af:60:28:16:65:
         b7:82:87:ea:b0:9e:03:3f:68:29:7f:8e:5f:78:63:d0:9a:bb:
         ef:a1:3d:3b:ae:2a:3b:f0:f3:a9:8f:d0:b5:7b:46:e5:6e:d5:
         f1:7b:1a:08:26:71:01:ca:40:84:3d:22:39:40:20:fe:4e:6d:
         54:8c:cc:4c:e6:0d:6c:98:6a:b2:50:01:b7:b1:81:d6:b2:cb:
         69:e6:aa:ec:85:4e:26:f5:43:76:5f:c0:0f:73:ca:45:64:e4:
         34:0d:4b:a5:1b:c7:0e:e2:0e:1f:6f:ba:c9:9d:04:e1:39:53:
         b6:8e:8a:88:95:0e:52:2e:1d:8f:83:21:27:27:9f:e5:ca:e5:
         58:b4:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 05:52:53 2024 by rpki-client on console-ams.rpki-client.org