Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
File:                     3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa (raw, json)
Hash identifier:          uV5japg4IZLwudgHtitYB1UyXREwZpftfIwhcmbE7kw=
Subject key identifier:   21:9E:54:F8:FB:72:31:63:E9:14:2B:0D:8F:8D:E4:6A:9B:AF:0A:5A
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       6D3DB1F11C0619E849C755A47B1EDEC0228DEA72
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:34 +0000
ROA not before:           Thu 04 Apr 2024 08:10:34 +0000
ROA not after:            Thu 03 Apr 2025 08:15:34 +0000
asID:                     271309
IP address blocks:        207.248.26.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3d:b1:f1:1c:06:19:e8:49:c7:55:a4:7b:1e:de:c0:22:8d:ea:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:34 2024 GMT
            Not After : Apr  3 08:15:34 2025 GMT
        Subject: CN=219E54F8FB723163E9142B0D8F8DE46A9BAF0A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:70:5c:53:cd:95:16:a5:bf:b2:e9:b6:c2:
                    e5:73:81:c8:d7:3e:83:79:7e:1c:68:19:de:be:2c:
                    ad:05:04:97:b7:cc:69:e4:6d:1a:ee:2e:86:9e:7c:
                    ca:44:04:f5:1c:1e:6d:4c:58:fb:b5:b5:09:7d:36:
                    66:31:7c:92:46:31:3c:03:4d:95:40:75:90:af:38:
                    61:a7:f7:59:03:f1:b3:37:42:ad:6c:d8:bb:c0:1b:
                    79:81:0d:fd:79:73:4c:93:29:da:e3:65:9a:e8:7f:
                    15:ba:44:85:5d:7b:4f:0f:96:0f:1d:e6:55:27:06:
                    eb:9c:b3:8a:62:02:26:2c:67:58:b6:f1:d6:3f:03:
                    3b:31:dd:8b:84:70:76:31:b0:1e:7b:f6:96:b9:62:
                    9e:9d:3e:ab:7a:36:77:d1:29:a2:bc:36:40:c7:4e:
                    0b:29:8e:01:95:a3:2c:f7:63:16:9b:7d:4b:26:cd:
                    29:dc:ad:29:db:fc:8b:63:0c:e8:93:3f:32:fb:cf:
                    ea:0c:19:1b:c3:31:70:ef:43:43:b9:47:43:3e:0f:
                    49:f9:e9:f6:9e:dc:5d:bc:46:de:69:34:35:78:c5:
                    2b:3d:f3:2c:e5:0b:92:d9:c7:cb:49:6a:fa:07:92:
                    34:af:b2:15:ac:67:4a:27:d4:80:42:48:fd:89:7d:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9E:54:F8:FB:72:31:63:E9:14:2B:0D:8F:8D:E4:6A:9B:AF:0A:5A
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32362e302f32332d3233203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:6a:8d:d0:fd:ce:c8:20:e6:2f:5e:c1:11:ed:f2:cc:b0:
         df:b5:9b:7f:af:66:a6:2c:da:e8:02:2b:f4:e0:9b:64:81:aa:
         44:81:5d:e1:bf:b4:75:58:6f:05:98:d1:3c:12:31:66:27:db:
         23:4c:61:6f:08:a9:d6:42:4e:ff:bc:96:8e:4c:37:50:30:66:
         ff:80:c0:4f:84:79:d0:75:c4:a0:d7:48:80:fe:92:98:2e:90:
         84:6b:b5:78:ee:5f:1b:26:37:6e:2e:f9:0b:64:64:ee:ec:13:
         83:df:e1:6b:11:0f:3c:de:9d:ac:5b:9d:03:85:b6:8e:4e:82:
         39:5a:47:4b:13:25:74:ee:b9:10:29:d6:02:c3:b1:40:ec:0b:
         dc:9b:92:5d:20:a5:4d:fc:99:0b:36:a0:ed:52:ea:e3:a1:cd:
         9e:c4:99:49:79:e2:20:f8:a5:1d:87:2b:d6:d2:f3:e1:cf:73:
         66:26:92:53:5b:6b:b8:94:4b:31:b4:13:a5:81:1d:a4:73:3c:
         61:f4:eb:f2:0e:37:50:7e:cd:24:8d:9b:c5:ff:f3:87:a3:ca:
         41:82:3e:14:c3:f0:52:7b:b3:c7:44:71:16:b6:1f:4e:08:4e:
         b5:6a:e1:71:99:13:2c:da:1f:29:ca:f9:7c:3f:b6:c0:56:d5:
         33:c6:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 02:07:11 2024 by rpki-client on console-fra.rpki-client.org