Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32362e302f32342d3234203d3e20323731333039.roa
File:                     3230372e3234382e32362e302f32342d3234203d3e20323731333039.roa (raw, json)
Hash identifier:          sx77h8HUqcCdFfRDF/McpJ5ctSAJpoL2yQUP2zDHZxM=
Subject key identifier:   76:3F:89:C0:D5:61:89:D6:F3:B9:F3:7B:6C:75:9E:4B:8F:E9:F2:B5
Certificate issuer:       /CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
Certificate serial:       43EBA24DA31A526C49C4E277E37CC24DD1EF028E
Authority key identifier: 93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32362e302f32342d3234203d3e20323731333039.roa
Signing time:             Thu 04 Apr 2024 08:15:35 +0000
ROA not before:           Thu 04 Apr 2024 08:10:35 +0000
ROA not after:            Thu 03 Apr 2025 08:15:35 +0000
asID:                     271309
IP address blocks:        207.248.26.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:a2:4d:a3:1a:52:6c:49:c4:e2:77:e3:7c:c2:4d:d1:ef:02:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C
        Validity
            Not Before: Apr  4 08:10:35 2024 GMT
            Not After : Apr  3 08:15:35 2025 GMT
        Subject: CN=763F89C0D56189D6F3B9F37B6C759E4B8FE9F2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:dd:55:f2:f4:9d:18:93:1d:46:c5:d9:1e:
                    59:f3:9f:b0:f8:89:bb:00:f2:a2:94:cb:04:e2:fd:
                    51:9d:5a:54:d6:70:e2:89:3e:8c:70:73:0e:ed:6b:
                    73:3b:26:95:6d:49:07:b1:e3:95:ae:e0:78:72:25:
                    56:af:50:82:30:8a:ca:27:88:5b:25:4a:1e:ec:0b:
                    2f:0d:2d:46:57:4b:24:b6:b7:f8:b6:08:c1:bb:70:
                    0c:76:ed:f0:41:b0:43:f9:c7:e5:5b:80:b4:38:bc:
                    b2:69:c9:e4:e3:c9:77:4f:f3:e4:c5:1f:bc:74:d3:
                    a3:05:9a:94:0d:a5:50:9f:a8:f4:37:0b:bd:23:db:
                    b1:fd:43:6c:92:50:dc:e2:8a:52:11:2f:6e:70:e6:
                    b7:f6:04:6e:33:04:8a:8f:df:ed:6d:27:37:b6:3e:
                    dc:d3:10:0d:a3:e9:53:90:74:42:b8:d9:16:cf:41:
                    01:b5:47:33:e5:57:a3:51:12:25:16:d5:88:d7:19:
                    77:1b:ca:1b:e9:a3:bd:0e:ba:83:cb:33:4c:64:dd:
                    dd:24:de:4c:2c:4d:b7:dd:32:7f:dd:6d:f0:50:31:
                    66:f6:b1:c7:be:f5:07:99:f8:41:62:7d:60:10:9d:
                    1b:cb:95:3a:33:02:53:c2:04:40:66:5a:9f:d2:48:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:89:C0:D5:61:89:D6:F3:B9:F3:7B:6C:75:9E:4B:8F:E9:F2:B5
            X509v3 Authority Key Identifier:
                keyid:93:FB:9F:2D:6D:D9:3C:EF:BB:1D:F8:3F:7E:2E:EC:7F:1A:BF:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FB9F2D6DD93CEFBB1DF83F7E2EEC7F1ABFFF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/1/3230372e3234382e32362e302f32342d3234203d3e20323731333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:7b:e7:f5:21:87:7d:6a:26:60:06:c3:79:93:b6:42:46:4e:
         26:ba:b4:c7:6b:98:47:22:56:bb:6d:00:91:f1:8a:db:8c:60:
         fa:20:1c:69:d0:26:d5:bb:69:5c:ed:d4:82:70:68:f1:bf:94:
         f0:80:e4:bd:12:22:e4:c0:e9:5d:e4:12:2a:31:6f:08:fc:63:
         09:56:30:7c:f5:81:3b:60:8b:b0:93:4f:61:bc:cd:7d:a5:f4:
         e0:3a:e8:9c:f1:7e:41:d2:20:c4:c9:01:95:3f:02:57:e3:4b:
         1e:f9:23:29:f1:f8:23:3c:35:58:e6:2e:56:d9:c8:0a:18:27:
         a5:8a:4c:84:e9:89:d4:b8:82:78:5a:0a:b6:5f:5f:d5:e1:78:
         b5:45:db:de:79:c6:34:b8:ff:bd:3f:c6:f9:a9:a3:cc:db:65:
         02:2a:f1:43:68:1c:a8:a4:5b:12:0c:3c:f2:80:f6:ec:3f:6c:
         ff:b1:75:e3:10:62:cb:4b:92:06:dc:d5:60:b5:52:6c:00:6a:
         0f:db:6e:f1:85:6f:6f:94:78:d4:74:42:63:b2:9e:06:80:6a:
         bf:6f:df:b9:98:52:fc:40:23:f6:7b:3a:32:f3:1c:32:cb:fd:
         37:73:66:de:a0:9d:a7:c6:0d:2f:65:30:84:97:7b:4c:b7:eb:
         44:1a:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 03:27:18 2024 by rpki-client on console-ams.rpki-client.org