Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138302e302f32322d3332203d3e20323731363433.roa
File:                     3230302e3139342e3138302e302f32322d3332203d3e20323731363433.roa (raw, json)
Hash identifier:          xgzKPpQio5L58VtomctXKmCJuYhvJWgCfY6rxUaCQj8=
Subject key identifier:   E6:FC:23:C0:EB:C7:B5:A9:E1:BA:EA:FB:89:79:30:E3:A3:C1:BE:C3
Certificate issuer:       /CN=88CEE51396FC7EA2E1797C3145706CC31E530813
Certificate serial:       62D18DF65861A25FDDF6F7EB30020E3EFAE017D8
Authority key identifier: 88:CE:E5:13:96:FC:7E:A2:E1:79:7C:31:45:70:6C:C3:1E:53:08:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88CEE51396FC7EA2E1797C3145706CC31E530813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138302e302f32322d3332203d3e20323731363433.roa
Signing time:             Thu 16 May 2024 04:43:55 +0000
ROA not before:           Thu 16 May 2024 04:38:55 +0000
ROA not after:            Thu 15 May 2025 04:43:55 +0000
asID:                     271643
IP address blocks:        200.194.180.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d1:8d:f6:58:61:a2:5f:dd:f6:f7:eb:30:02:0e:3e:fa:e0:17:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88CEE51396FC7EA2E1797C3145706CC31E530813
        Validity
            Not Before: May 16 04:38:55 2024 GMT
            Not After : May 15 04:43:55 2025 GMT
        Subject: CN=E6FC23C0EBC7B5A9E1BAEAFB897930E3A3C1BEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:d8:08:f6:8c:26:ca:7a:17:d8:08:86:8e:
                    38:12:5e:68:d0:2d:d5:77:15:12:11:13:3b:78:b1:
                    5c:bd:47:60:65:a5:2a:7a:e0:ba:67:07:fc:ba:a0:
                    b7:61:86:fb:91:b1:cc:d4:74:7a:9f:84:8f:0d:4e:
                    89:a9:b4:38:70:db:cb:f1:c2:c7:64:63:17:e6:91:
                    42:86:76:f7:8f:22:f9:f2:ab:e8:f7:d5:fa:88:dc:
                    31:15:cf:78:99:6e:b6:97:95:23:21:c0:ed:fa:05:
                    da:19:38:31:7c:54:ae:a8:c7:2a:1e:27:5e:a4:75:
                    33:a1:de:ea:cc:73:55:9d:75:d7:ef:6a:75:7f:be:
                    f3:87:2b:29:b4:db:cb:ce:ac:ad:3e:89:98:db:f7:
                    49:35:1b:57:2b:97:9c:8d:2d:43:6d:4a:09:12:18:
                    8a:95:42:ff:18:56:c7:aa:f7:21:84:88:d3:9e:07:
                    22:0c:f8:e7:21:56:3f:34:c7:b9:e4:a1:4d:f6:a9:
                    ec:2f:ec:10:3a:d4:7b:ca:bf:e9:c2:b5:b3:70:bb:
                    7e:27:38:d3:9a:87:6a:52:94:ac:1a:57:a7:0e:b2:
                    90:e0:02:96:9b:75:26:ce:a8:2c:5e:2e:fa:56:f3:
                    00:b5:ac:4f:e3:73:af:4a:12:1c:6f:c8:ac:4e:68:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FC:23:C0:EB:C7:B5:A9:E1:BA:EA:FB:89:79:30:E3:A3:C1:BE:C3
            X509v3 Authority Key Identifier:
                keyid:88:CE:E5:13:96:FC:7E:A2:E1:79:7C:31:45:70:6C:C3:1E:53:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/88CEE51396FC7EA2E1797C3145706CC31E530813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88CEE51396FC7EA2E1797C3145706CC31E530813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vxbPjVs5RkHJ6PV2LBHGzhmUaBYjrCptPKRHrJCMEJu/0/3230302e3139342e3138302e302f32322d3332203d3e20323731363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:c5:97:9d:43:81:0e:ad:54:4c:70:24:f5:b5:ae:a8:f5:
         69:6d:a7:c3:76:30:c8:bc:1c:84:36:b4:18:fb:23:64:9b:d2:
         d4:28:a6:61:f7:9e:3a:a1:e1:45:76:38:cb:06:77:ad:32:1d:
         5a:ef:1f:55:e5:c6:bd:68:9d:ec:71:67:90:f6:18:06:7c:c5:
         f6:1e:82:f3:ae:ad:fd:4d:2c:48:e5:ff:08:8b:b2:44:3d:f2:
         53:e2:4d:19:fe:ce:1a:f5:02:b8:cc:ca:53:6d:28:34:70:63:
         b3:eb:f9:18:a8:8c:ea:00:7a:d5:54:e0:b1:29:21:f8:40:9f:
         85:9d:79:17:d5:7e:2e:47:80:69:41:04:c0:61:c2:42:83:20:
         fc:c3:b3:03:f9:80:84:39:82:2c:6e:53:bc:3e:4b:8f:bc:48:
         6e:e8:42:19:3d:96:21:0d:a2:09:f6:62:8c:93:43:aa:98:f9:
         45:a7:c7:3d:87:8b:9a:31:25:d6:8b:0d:d9:db:68:a8:8f:19:
         3c:93:1c:ff:9d:e7:a0:76:97:39:b3:dd:c9:0b:3b:74:d8:bb:
         3e:70:ff:f3:5c:0e:7e:e6:af:b2:22:17:2a:9a:5a:bf:df:f5:
         7a:ac:00:30:1a:70:20:56:c3:e4:8f:08:23:c9:33:37:58:2e:
         28:9f:76:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:13:18 2024 by rpki-client on console-ams.rpki-client.org