Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32352e302f32342d3234203d3e20323731333039.roa
File:                     3230372e3234382e32352e302f32342d3234203d3e20323731333039.roa (raw, json)
Hash identifier:          SKlL6b7cXAsavpEfofY4QelA/YhTfspHGbIyabTeX7A=
Subject key identifier:   4F:BB:5F:08:4E:6D:A4:49:CA:0A:A2:DB:E1:EB:CE:4B:AD:CF:9F:94
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       5D31DCE6CF6AFC07C21164C8C6000ACF726A713C
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32352e302f32342d3234203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:34 +0000
ROA not before:           Thu 04 Apr 2024 08:10:34 +0000
ROA not after:            Thu 03 Apr 2025 08:15:34 +0000
asID:                     271309
IP address blocks:        207.248.25.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:31:dc:e6:cf:6a:fc:07:c2:11:64:c8:c6:00:0a:cf:72:6a:71:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:34 2024 GMT
            Not After : Apr  3 08:15:34 2025 GMT
        Subject: CN=4FBB5F084E6DA449CA0AA2DBE1EBCE4BADCF9F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:d5:e0:59:9e:a7:0e:29:41:84:66:09:e8:
                    b7:2f:11:ec:5c:ad:e6:05:d3:fd:5d:e0:a3:71:98:
                    8d:fd:e4:b4:89:69:fa:b3:28:3d:a4:d6:f2:47:c6:
                    a6:ee:89:b3:7b:07:e5:52:d6:25:77:d2:fa:bb:73:
                    42:0a:01:45:03:19:99:07:25:2c:5f:a8:eb:24:9e:
                    b4:55:30:6a:55:09:8d:e9:c3:60:56:d9:15:1b:d0:
                    06:80:ff:be:91:58:47:b3:3a:6f:e2:a0:5f:1c:e5:
                    ac:c4:0d:33:b5:5e:b7:94:32:33:39:f7:43:00:5c:
                    b4:c3:ed:34:ba:b1:32:ea:b0:d1:e0:81:c2:19:a7:
                    1e:d6:bc:75:5d:8f:3a:af:32:5a:e6:f1:3a:8a:07:
                    cc:6c:6e:33:59:35:14:5c:2a:4e:c8:b5:1f:b3:74:
                    d9:4d:6e:c6:ef:17:75:9b:9f:58:5d:bf:2e:3d:2c:
                    5a:4a:bf:23:7e:ed:47:53:1f:f8:a5:8a:a9:f3:ba:
                    92:8a:56:ff:e8:5a:77:40:ec:d0:d7:58:ee:8d:c9:
                    3f:6e:0d:05:d4:33:ca:6d:bc:ca:ff:66:52:83:da:
                    a8:4d:79:5a:9f:59:5d:4e:51:ea:7d:33:94:eb:e9:
                    ca:6f:a7:a9:94:4c:21:fd:de:dd:d2:1e:48:02:35:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:5F:08:4E:6D:A4:49:CA:0A:A2:DB:E1:EB:CE:4B:AD:CF:9F:94
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32352e302f32342d3234203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:60:d9:76:38:36:89:aa:1f:8e:47:a6:39:dd:fb:d9:c5:22:
         4b:96:af:78:81:0e:2e:c2:a8:b9:a4:97:6f:02:3b:2b:d8:13:
         6d:21:c0:3e:df:8f:31:71:03:f7:60:d2:29:98:33:43:10:b6:
         59:ec:4a:82:19:8c:d6:fa:d7:b7:ef:92:f9:a4:3b:95:08:09:
         8b:2b:7f:17:ec:ca:f9:d5:39:a9:80:c7:89:f1:b9:80:36:2a:
         2f:43:dd:a4:ec:e7:09:d6:94:5d:78:e2:f3:81:5f:de:bd:49:
         3a:0b:dd:26:6c:f3:92:9b:c4:89:ec:ca:ab:7f:47:2e:33:8c:
         a7:85:b2:03:23:c5:3f:1a:1a:6c:67:89:8f:bb:bd:f5:5a:0b:
         35:43:f4:c2:bf:29:27:87:dc:eb:d3:f5:42:58:d1:08:d6:9e:
         f6:6f:9b:2f:63:e1:ec:49:68:69:c9:b8:d1:6a:bb:03:c2:31:
         c8:ed:3d:62:eb:31:a4:57:d1:00:44:a1:08:9b:95:f4:08:a9:
         b7:d3:5b:98:b5:39:9c:63:5f:18:c7:07:41:dc:bb:c1:fd:7d:
         ce:e1:36:6e:58:70:3b:e6:c0:c2:14:4f:1b:b1:c5:a1:4c:44:
         8b:8f:95:89:fe:55:f3:a3:4f:10:7a:6e:78:24:0f:ea:6d:b1:
         aa:3a:e7:6f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXTHc5s9q/AfCEWTIxgAKz3JqcTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNGQjlGMkQ2REQ5M0NFRkJCMURGODNGN0UyRUVDN0Yx
QUJGRkY1QzAeFw0yNDA0MDQwODEwMzRaFw0yNTA0MDMwODE1MzRaMDMxMTAvBgNV
BAMTKDRGQkI1RjA4NEU2REE0NDlDQTBBQTJEQkUxRUJDRTRCQURDRjlGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4NXgWZ6nDilBhGYJ6LcvEexc
reYF0/1d4KNxmI395LSJafqzKD2k1vJHxqbuibN7B+VS1iV30vq7c0IKAUUDGZkH
JSxfqOsknrRVMGpVCY3pw2BW2RUb0AaA/76RWEezOm/ioF8c5azEDTO1XreUMjM5
90MAXLTD7TS6sTLqsNHggcIZpx7WvHVdjzqvMlrm8TqKB8xsbjNZNRRcKk7ItR+z
dNlNbsbvF3Wbn1hdvy49LFpKvyN+7UdTH/iliqnzupKKVv/oWndA7NDXWO6NyT9u
DQXUM8ptvMr/ZlKD2qhNeVqfWV1OUep9M5Tr6cpvp6mUTCH93t3SHkgCNddJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUT7tfCE5tpEnKCqLb4evOS63Pn5QwHwYDVR0j
BBgwFoAUk/ufLW3ZPO+7Hfg/fi7sfxq//1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQyWUJtYVR6enhFR2VRQ1BHdzRpczhjc2RLSDlvN3NORXBCd290Nk1u
YmYvMS85M0ZCOUYyRDZERDkzQ0VGQkIxREY4M0Y3RTJFRUM3RjFBQkZGRjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzRkI5RjJENkREOTNDRUZC
QjFERjgzRjdFMkVFQzdGMUFCRkZGNUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUMllCbWFUenp4RUdlUUNQR3c0aXM4Y3NkS0g5bzdzTkVwQndvdDZNbmJmLzEv
MzIzMDM3MmUzMjM0MzgyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADP+BkwDQYJKoZIhvcNAQELBQADggEBAAdg2XY4
NomqH45Hpjnd+9nFIkuWr3iBDi7CqLmkl28COyvYE20hwD7fjzFxA/dg0imYM0MQ
tlnsSoIZjNb617fvkvmkO5UICYsrfxfsyvnVOamAx4nxuYA2Ki9D3aTs5wnWlF14
4vOBX969SToL3SZs85KbxInsyqt/Ry4zjKeFsgMjxT8aGmxniY+7vfVaCzVD9MK/
KSeH3OvT9UJY0QjWnvZvmy9j4exJaGnJuNFquwPCMcjtPWLrMaRX0QBEoQiblfQI
qbfTW5i1OZxjXxjHB0Hcu8H9fc7hNm5YcDvmwMIUTxuxxaFMRIuPlYn+VfOjTxB6
bngkD+ptsao6528=
-----END CERTIFICATE-----
Generated at Sun Jul 14 02:07:11 2024 by rpki-client on console-fra.rpki-client.org