Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3136382e3232372e3230302e302f32322d3232203d3e203231353734.roa
File:                     3136382e3232372e3230302e302f32322d3232203d3e203231353734.roa (raw, json)
Hash identifier:          3K+HMWUvdZZ7qs3FXTYXCI3b4l5RbIpMTy84ovA2G9U=
Subject key identifier:   AC:84:C2:07:E1:BE:D6:83:9E:EB:A3:68:C9:32:40:90:E4:25:B5:FB
Certificate issuer:       /CN=BD88CE604EA701BD2303A3A26D97C728956C0781
Certificate serial:       23AD54DC54B6DDE0AC8B4B81D1C21514D046A81E
Authority key identifier: BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3136382e3232372e3230302e302f32322d3232203d3e203231353734.roa
Signing time:             Tue 07 May 2024 18:17:18 +0000
ROA not before:           Tue 07 May 2024 18:12:18 +0000
ROA not after:            Tue 06 May 2025 18:17:18 +0000
asID:                     21574
IP address blocks:        168.227.200.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ad:54:dc:54:b6:dd:e0:ac:8b:4b:81:d1:c2:15:14:d0:46:a8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD88CE604EA701BD2303A3A26D97C728956C0781
        Validity
            Not Before: May  7 18:12:18 2024 GMT
            Not After : May  6 18:17:18 2025 GMT
        Subject: CN=AC84C207E1BED6839EEBA368C9324090E425B5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:73:9a:a4:15:a4:28:39:a3:08:ab:23:6d:
                    bb:05:a8:5e:92:5f:d1:3a:9d:3a:2a:c1:b7:b1:d3:
                    8d:21:fe:55:b8:14:a0:b3:45:c4:af:4b:2e:09:3c:
                    91:47:db:d2:cc:45:74:b9:0a:31:0e:d5:da:11:45:
                    87:c8:0a:86:5f:2f:dd:92:30:d0:ff:36:f8:2d:d0:
                    f9:d4:84:1a:76:f0:8f:b8:a0:b2:87:6b:6b:83:5a:
                    13:17:d9:a2:2e:07:89:1a:f2:a3:80:bd:0c:c8:b5:
                    68:75:f4:56:20:53:67:a7:f8:dc:f4:47:f9:43:19:
                    a0:bc:ab:81:e9:47:8d:7e:6f:c4:01:91:cd:0c:6e:
                    73:83:24:f7:69:2e:c1:22:6a:17:42:9e:bd:ff:40:
                    11:70:aa:9a:5e:a8:30:d8:a6:77:2f:ec:cf:56:ff:
                    6e:58:36:ba:92:b6:74:81:db:99:ee:15:e5:0c:22:
                    1d:66:c5:31:3e:f3:53:02:37:30:15:21:6e:9c:75:
                    4f:63:6e:e0:c0:d9:44:cd:03:a1:00:98:b1:00:61:
                    31:2f:99:56:75:1c:12:2c:7c:4c:77:cc:47:af:48:
                    e6:60:ea:38:ed:9a:80:f0:34:53:92:fb:cf:91:63:
                    f1:3b:9b:ea:ad:9f:95:5e:30:ca:59:79:02:6e:10:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:C2:07:E1:BE:D6:83:9E:EB:A3:68:C9:32:40:90:E4:25:B5:FB
            X509v3 Authority Key Identifier:
                keyid:BD:88:CE:60:4E:A7:01:BD:23:03:A3:A2:6D:97:C7:28:95:6C:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/BD88CE604EA701BD2303A3A26D97C728956C0781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD88CE604EA701BD2303A3A26D97C728956C0781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31wz3ao4JqbN93HrqSZZ7J4ULyAF1HWwPYmjeDcna78f/0/3136382e3232372e3230302e302f32322d3232203d3e203231353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:ce:94:2c:c1:c7:7c:f3:92:f4:51:b4:cb:f5:df:73:f5:
         60:f3:2a:c0:13:fb:15:45:cc:e7:f2:4a:a6:a0:b5:a3:22:b2:
         01:c6:c7:2f:9e:81:c5:8b:ad:38:9b:2e:3d:e6:5f:b5:d5:0c:
         a1:6c:e2:f4:f2:ac:fc:37:b8:b9:5b:8e:ed:af:8b:f2:85:d7:
         a2:d8:c0:3c:1f:df:fe:2d:4f:18:1d:70:9b:8a:24:9d:82:e7:
         16:5a:a8:b6:f7:e0:42:87:dc:80:b3:5b:a5:5a:e1:08:60:c7:
         4d:ef:dd:68:60:91:dc:9c:15:92:2a:68:ac:3d:08:94:22:a1:
         4c:d9:f7:55:4b:b9:38:e1:b9:8b:33:89:a8:a7:76:65:d6:15:
         b2:19:5c:6a:5f:c3:a6:69:89:75:c6:57:a2:56:25:19:2c:6e:
         5c:79:c2:23:2d:b2:f2:ba:e7:5a:05:d7:d6:fe:26:c1:14:20:
         62:ff:6d:d2:8f:c3:c0:e2:d4:93:7b:dc:f2:83:e1:53:15:25:
         e1:73:b8:41:be:c8:73:c0:96:4e:8d:81:a5:ad:70:43:5b:2a:
         a2:76:74:c9:11:2b:b1:ef:ed:a0:e7:a0:77:30:c2:23:4f:a0:
         ad:42:2e:09:89:52:3f:78:0c:fc:78:89:ba:a6:21:d0:14:5d:
         f3:a4:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 08:38:14 2024 by rpki-client on console-ams.rpki-client.org