Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/3230302e35332e38342e302f32332d3234203d3e20323731323938.roa
File:                     3230302e35332e38342e302f32332d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          c2eC+ltG09t+4JbWqIR8t3d7fGB8yjiJN0PKumrg+zY=
Subject key identifier:   0F:35:93:77:7D:79:AA:1B:A0:E7:7B:1B:68:16:36:F9:9D:85:6C:6C
Certificate issuer:       /CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
Certificate serial:       535FC2FA6F2CACE68A957660E08CAFD6ED8F7D78
Authority key identifier: 41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/3230302e35332e38342e302f32332d3234203d3e20323731323938.roa
Signing time:             Wed 03 Apr 2024 23:04:42 +0000
ROA not before:           Wed 03 Apr 2024 22:59:42 +0000
ROA not after:            Wed 02 Apr 2025 23:04:42 +0000
asID:                     271298
IP address blocks:        200.53.84.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5f:c2:fa:6f:2c:ac:e6:8a:95:76:60:e0:8c:af:d6:ed:8f:7d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4151665D0EB84AB3092E3766EA6EA61155041F3D
        Validity
            Not Before: Apr  3 22:59:42 2024 GMT
            Not After : Apr  2 23:04:42 2025 GMT
        Subject: CN=0F3593777D79AA1BA0E77B1B681636F99D856C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:b9:2f:0d:32:bd:b4:00:02:b2:ff:15:0b:
                    3e:61:89:76:3c:0c:75:b3:20:ad:31:92:d3:5e:fe:
                    18:57:5c:7b:e2:6d:4a:d1:a8:be:f8:44:77:5c:13:
                    44:08:bd:ab:0c:cf:bd:cf:f4:4a:bd:19:77:95:fe:
                    11:13:1b:99:8e:5d:43:dc:2c:1b:fc:e8:c2:e3:48:
                    23:06:78:85:c5:b9:0f:09:9b:0c:b6:9f:2c:23:8f:
                    51:ea:16:98:0a:5a:dd:11:82:4c:d6:8f:25:f1:c2:
                    2d:ee:5e:31:79:a1:fe:84:da:91:8d:fe:0d:ea:bd:
                    00:bd:53:7a:ef:7e:0f:95:69:33:7c:25:03:83:7c:
                    98:39:3b:43:e4:a1:81:c6:a8:e4:bb:48:75:0d:f1:
                    2d:1c:cf:c3:1d:b3:25:12:8e:df:0e:8c:f9:0d:c9:
                    8f:69:c9:b3:8a:d4:ea:58:f8:3d:c7:48:24:c6:da:
                    94:40:ff:e2:b7:ad:fe:7e:bf:d7:04:5d:c6:c3:40:
                    57:8a:db:14:8f:98:fa:09:5f:dd:0b:a3:4a:9f:8a:
                    f2:5d:25:11:77:56:78:7a:fd:3f:03:ad:1d:38:29:
                    cb:2d:6d:b5:1d:dc:ad:19:7a:de:07:c3:86:51:67:
                    c1:5e:6e:27:42:dc:b8:42:e2:d6:4d:83:f1:cc:e8:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:93:77:7D:79:AA:1B:A0:E7:7B:1B:68:16:36:F9:9D:85:6C:6C
            X509v3 Authority Key Identifier:
                keyid:41:51:66:5D:0E:B8:4A:B3:09:2E:37:66:EA:6E:A6:11:55:04:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4151665D0EB84AB3092E3766EA6EA61155041F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/1/3230302e35332e38342e302f32332d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:54:6f:07:89:1c:8a:fa:7c:ee:9e:51:89:02:f8:c3:dd:87:
         69:68:58:32:7d:44:ad:a6:be:e2:ab:10:94:d3:ac:19:f6:f9:
         40:52:dc:cf:69:e7:39:5b:7d:2e:0e:04:04:af:e3:30:a1:91:
         08:8f:72:0d:e4:5b:a5:15:3a:7f:eb:b0:43:75:11:66:8e:6e:
         2c:a7:ae:c2:0b:47:a4:54:18:36:f0:c4:f3:46:39:87:4a:75:
         02:38:3b:cf:8e:58:ff:18:b5:65:a8:5d:f9:05:3c:14:86:d9:
         95:8f:f7:e7:48:6b:e4:d2:67:e1:5d:70:bb:72:c4:14:22:77:
         08:75:e6:9a:49:9c:d7:f2:4b:22:ef:11:c7:6d:2b:b0:b1:bd:
         e5:91:96:fa:06:93:c0:71:27:fd:c3:62:27:2d:36:22:a5:c4:
         8a:6e:58:18:14:cf:2a:0c:df:8c:ad:42:2d:b3:51:06:54:d1:
         a2:5a:c0:98:61:a6:b4:6f:46:e1:f6:93:c8:23:2a:66:86:67:
         ac:61:df:28:65:2c:28:f5:12:01:76:66:a4:24:e3:42:50:e8:
         0f:4b:66:1a:47:05:5f:e9:0f:b3:7a:c7:2b:f4:52:1c:bc:c2:
         b4:e3:df:cf:92:2c:77:8c:af:92:70:83:54:9c:b6:c4:79:fa:
         5f:f4:9d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 14:08:36 2024 by rpki-client on console-fra.rpki-client.org