Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32342d3234203d3e20323730393331.roa
File:                     3230302e3134322e3232342e302f32342d3234203d3e20323730393331.roa (raw, json)
Hash identifier:          jCcyOhcQxmMGbDyvROWowaKIAoDLVc+thIQQRYoWGs0=
Subject key identifier:   BD:33:3A:1C:4C:E5:00:C4:62:77:67:D8:5C:BA:5B:7B:99:A1:FC:F8
Certificate issuer:       /CN=DBB73F660469C2567ABB9FC0CA341D1CFD435875
Certificate serial:       64570C2F1FBAAAD3B493F427C7C2C503E8250990
Authority key identifier: DB:B7:3F:66:04:69:C2:56:7A:BB:9F:C0:CA:34:1D:1C:FD:43:58:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB73F660469C2567ABB9FC0CA341D1CFD435875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32342d3234203d3e20323730393331.roa
Signing time:             Fri 04 Oct 2024 11:07:55 +0000
ROA not before:           Fri 04 Oct 2024 11:02:55 +0000
ROA not after:            Fri 03 Oct 2025 11:07:55 +0000
asID:                     270931
IP address blocks:        200.142.224.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:57:0c:2f:1f:ba:aa:d3:b4:93:f4:27:c7:c2:c5:03:e8:25:09:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB73F660469C2567ABB9FC0CA341D1CFD435875
        Validity
            Not Before: Oct  4 11:02:55 2024 GMT
            Not After : Oct  3 11:07:55 2025 GMT
        Subject: CN=BD333A1C4CE500C4627767D85CBA5B7B99A1FCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:e7:fd:de:c0:9f:23:fb:6f:fb:f4:f0:dc:
                    0a:5a:12:ac:4c:52:fe:df:87:dd:32:d5:70:ce:96:
                    2b:05:61:ee:71:2e:7f:fc:2a:b9:13:b3:69:1a:62:
                    71:1a:31:36:20:b0:4f:2b:45:b1:29:da:a2:42:d0:
                    ac:a4:ad:6d:5d:1b:27:e4:cd:54:29:fb:a9:8e:0c:
                    75:57:db:51:21:aa:72:fe:8e:c7:0a:f5:5e:89:52:
                    59:af:5b:5f:c4:64:bd:cf:bc:e3:ae:99:50:cb:01:
                    ff:9b:db:c8:a6:03:f8:aa:e2:90:2b:95:7c:b5:57:
                    23:d1:d5:15:6f:28:03:ca:6b:7e:85:70:fc:2f:67:
                    a2:e6:99:e6:dc:b1:c8:f5:1a:12:2a:6d:3b:54:ae:
                    4b:b9:7d:a4:da:15:3a:9e:7f:cd:c0:a5:55:ab:f4:
                    ed:9b:05:fe:21:97:57:42:82:fb:40:07:91:8f:bf:
                    69:57:f1:cb:1d:ea:a7:39:ea:10:d0:f8:cd:45:b1:
                    80:21:04:3e:c0:8d:2b:fa:b1:52:d3:cb:2b:51:70:
                    49:ce:c5:4f:4f:97:3d:fe:79:ec:58:5c:b4:70:9d:
                    36:ec:25:ee:48:ed:6f:5a:f3:d5:b8:9b:41:1e:39:
                    ec:33:d9:75:a7:8b:51:2d:5e:46:f5:8f:c1:1d:1a:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:3A:1C:4C:E5:00:C4:62:77:67:D8:5C:BA:5B:7B:99:A1:FC:F8
            X509v3 Authority Key Identifier:
                keyid:DB:B7:3F:66:04:69:C2:56:7A:BB:9F:C0:CA:34:1D:1C:FD:43:58:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/DBB73F660469C2567ABB9FC0CA341D1CFD435875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB73F660469C2567ABB9FC0CA341D1CFD435875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/3230302e3134322e3232342e302f32342d3234203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:10:e1:e4:bb:25:bf:3d:d6:c2:12:b5:ce:ac:6e:3e:9c:
         63:26:d8:88:28:ff:70:3b:cb:2b:b7:bb:2a:11:e1:75:fc:ef:
         1c:80:07:f6:a0:17:b1:62:69:ec:a3:e7:f5:7e:77:62:49:6f:
         2c:92:54:cb:c4:4b:df:46:45:e9:38:3e:cf:d3:85:2f:31:53:
         24:e9:8b:20:29:fd:d5:17:a7:e2:57:aa:39:26:8c:ec:92:81:
         a4:19:bb:ac:50:5e:6d:8c:e3:89:90:da:fc:ff:d5:e6:40:ad:
         b4:34:5d:94:e6:50:97:b1:4c:3c:5c:ff:cd:26:28:32:c3:f0:
         72:59:86:ea:4c:5e:d4:a4:97:bd:7b:cc:bf:2f:56:72:23:f3:
         26:43:58:04:a6:6c:28:61:33:55:37:1a:63:89:3f:97:ee:17:
         41:57:63:69:d2:e6:19:ed:a7:71:85:40:aa:0e:f9:4b:1b:be:
         cd:8b:b7:69:25:76:59:ca:e7:35:c6:21:ec:f4:dc:19:01:19:
         ae:2e:fe:38:44:b3:1e:7e:f4:a0:be:5a:29:4e:d5:53:14:1a:
         d2:2c:e5:a8:86:91:27:e9:5c:5c:98:ed:c1:7f:22:11:5d:20:
         9e:9c:0a:68:49:b3:6d:2f:a9:61:5f:d4:2e:6e:e3:f6:23:6d:
         ec:a3:51:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZFcMLx+6qtO0k/Qnx8LFA+glCZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCNzNGNjYwNDY5QzI1NjdBQkI5RkMwQ0EzNDFEMUNG
RDQzNTg3NTAeFw0yNDEwMDQxMTAyNTVaFw0yNTEwMDMxMTA3NTVaMDMxMTAvBgNV
BAMTKEJEMzMzQTFDNENFNTAwQzQ2Mjc3NjdEODVDQkE1QjdCOTlBMUZDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgef93sCfI/tv+/Tw3ApaEqxM
Uv7fh90y1XDOlisFYe5xLn/8KrkTs2kaYnEaMTYgsE8rRbEp2qJC0KykrW1dGyfk
zVQp+6mODHVX21EhqnL+jscK9V6JUlmvW1/EZL3PvOOumVDLAf+b28imA/iq4pAr
lXy1VyPR1RVvKAPKa36FcPwvZ6Lmmebcscj1GhIqbTtUrku5faTaFTqef83ApVWr
9O2bBf4hl1dCgvtAB5GPv2lX8csd6qc56hDQ+M1FsYAhBD7AjSv6sVLTyytRcEnO
xU9Plz3+eexYXLRwnTbsJe5I7W9a89W4m0EeOewz2XWni1EtXkb1j8EdGr2nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvTM6HEzlAMRid2fYXLpbe5mh/PgwHwYDVR0j
BBgwFoAU27c/ZgRpwlZ6u5/AyjQdHP1DWHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUpENXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZl
WG4vMC9EQkI3M0Y2NjA0NjlDMjU2N0FCQjlGQzBDQTM0MUQxQ0ZENDM1ODc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQjczRjY2MDQ2OUMyNTY3
QUJCOUZDMENBMzQxRDFDRkQ0MzU4NzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVKRDVyVGFKQTQ5alFTZkxhOGZYQ2c2dnJuMlJpY05HVnVDcDl0Rnp2ZVhuLzAv
MzIzMDMwMmUzMTM0MzIyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMiO4DANBgkqhkiG9w0BAQsFAAOCAQEAbUoQ
4eS7Jb891sIStc6sbj6cYybYiCj/cDvLK7e7KhHhdfzvHIAH9qAXsWJp7KPn9X53
YklvLJJUy8RL30ZF6Tg+z9OFLzFTJOmLICn91Ren4leqOSaM7JKBpBm7rFBebYzj
iZDa/P/V5kCttDRdlOZQl7FMPFz/zSYoMsPwclmG6kxe1KSXvXvMvy9WciPzJkNY
BKZsKGEzVTcaY4k/l+4XQVdjadLmGe2ncYVAqg75Sxu+zYu3aSV2WcrnNcYh7PTc
GQEZri7+OESzHn70oL5aKU7VUxQa0izlqIaRJ+lcXJjtwX8iEV0gnpwKaEmzbS+p
YV/ULm7j9iNt7KNRPw==
-----END CERTIFICATE-----
Generated at Tue Oct 29 14:50:23 2024 by rpki-client on console-fra.rpki-client.org