Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32342e302f32332d3233203d3e20323731333039.roa
File:                     3230372e3234382e32342e302f32332d3233203d3e20323731333039.roa (raw, json)
Hash identifier:          EesJbZouOfyB42d5ViPaveynu2b2Kb5QUjqA9O0hBbk=
Subject key identifier:   35:76:2D:72:03:31:14:D1:B0:A6:27:9A:4F:E6:92:59:50:8B:16:EA
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       385EACE6BFAE394735478DCB0F2E8C1B8FFA95BF
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32342e302f32332d3233203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:35 +0000
ROA not before:           Thu 04 Apr 2024 08:10:35 +0000
ROA not after:            Thu 03 Apr 2025 08:15:35 +0000
asID:                     271309
IP address blocks:        207.248.24.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5e:ac:e6:bf:ae:39:47:35:47:8d:cb:0f:2e:8c:1b:8f:fa:95:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:35 2024 GMT
            Not After : Apr  3 08:15:35 2025 GMT
        Subject: CN=35762D72033114D1B0A6279A4FE69259508B16EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:28:62:97:2b:04:1e:19:36:84:3b:54:05:
                    68:d0:cf:eb:35:1b:c0:5e:fb:18:b2:f9:94:e4:e1:
                    92:12:41:10:14:15:00:54:50:3e:fd:d4:df:a7:e1:
                    1f:da:31:5d:55:64:28:ea:b9:39:cb:fa:3e:39:14:
                    cc:05:dd:2b:78:27:b9:b0:88:6c:8d:16:19:24:8c:
                    29:06:89:35:63:28:d3:f6:b2:d8:86:da:21:51:44:
                    5d:57:e3:49:ce:58:5a:6c:40:08:14:21:ec:32:43:
                    47:6f:d3:24:46:ff:2c:cc:bc:3c:5f:43:b8:5f:55:
                    cf:99:a0:ec:86:af:08:79:8f:0f:5b:6e:b2:38:41:
                    ca:f6:be:3e:21:d4:26:e9:41:26:7a:57:08:a8:e7:
                    a0:5a:94:ae:bb:36:ae:a0:32:ec:f1:03:dd:c4:07:
                    ab:b2:44:75:31:c7:53:37:ca:f1:53:98:9b:66:b7:
                    62:d6:84:09:43:a8:3a:1a:9a:8d:6f:a2:61:ba:34:
                    90:8a:31:ec:10:a3:de:4a:bb:b4:a3:79:fe:64:ea:
                    30:a9:49:df:0c:2b:9f:98:fc:a8:14:7a:66:95:34:
                    c2:22:4b:ee:5a:2a:59:07:fd:6a:b3:d9:e9:aa:32:
                    28:e9:fb:21:0d:16:d8:15:af:23:30:43:5b:3d:b4:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:76:2D:72:03:31:14:D1:B0:A6:27:9A:4F:E6:92:59:50:8B:16:EA
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32342e302f32332d3233203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:b5:98:6f:4c:64:70:d3:02:0b:7a:6c:a2:ff:f5:35:c4:
         f7:10:ef:f9:b0:aa:5e:50:13:1b:2c:e4:22:97:2b:c9:58:11:
         02:d1:01:45:b3:11:07:7d:e9:96:ff:85:f4:01:68:50:e7:32:
         d3:bc:1e:d1:3a:9a:26:10:54:87:8d:52:7a:13:1a:db:dc:4b:
         a5:f9:e4:e6:bb:01:0c:d7:e9:1c:65:0f:e9:84:dd:2d:1f:6a:
         1a:9e:15:29:22:fe:fa:05:99:db:b3:6e:35:a1:65:32:87:e0:
         49:e6:8d:ce:57:cf:a3:b5:e7:e1:b8:11:2c:81:6a:0c:60:3b:
         20:2a:ca:20:13:9c:7b:21:24:db:e8:5a:f2:1a:7a:1f:27:64:
         6b:27:04:d4:c5:2e:83:4d:79:25:e9:c8:77:88:5f:38:81:1d:
         cb:06:c2:5e:97:ee:b7:7d:26:e6:7d:b6:06:84:34:fb:da:94:
         ae:3d:9b:8a:48:0e:04:cf:a0:59:ae:b6:89:c2:79:10:41:3a:
         1f:9e:53:89:03:10:7b:ef:65:7e:ee:c1:2a:a8:8f:41:d6:f3:
         fe:2d:3c:4b:3e:93:15:c0:fe:5c:07:60:0b:a4:a6:43:e2:12:
         8d:b5:3d:04:4a:9b:e8:1f:e5:8a:99:c1:e0:96:90:5a:7d:2c:
         e0:38:6f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 03:27:18 2024 by rpki-client on console-ams.rpki-client.org