Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa
File:                     3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa (raw, json)
Hash identifier:          W57DzTSoglLj3T3i3gPDjjZlVn6zKq3l+1OuTMuCZp0=
Subject key identifier:   BF:B6:8C:34:A5:40:0D:78:87:A9:DF:DD:B7:8E:67:EB:D9:F8:10:DE
Certificate issuer:       /CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
Certificate serial:       6BAA1526F0050A698FFF74690C0BA955A918414B
Authority key identifier: B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270931
IP address blocks:        200.142.224.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:aa:15:26:f0:05:0a:69:8f:ff:74:69:0c:0b:a9:55:a9:18:41:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08ED87D0232B32F4B301B81417EB9BEAF579B9F
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:65:6b:2b:73:2d:db:67:24:aa:76:89:e3:
                    d6:7d:a0:bc:1a:34:19:7a:e3:6c:c8:6d:b2:b8:fb:
                    0f:d4:f0:41:c7:50:d2:2b:57:11:15:93:19:91:7b:
                    0e:fc:22:c0:f8:16:91:a4:37:87:b2:76:58:df:19:
                    61:bc:e0:01:cd:71:4e:2a:c3:8d:ab:61:d2:9f:a4:
                    c9:df:66:2f:cf:4b:b7:7d:9e:c8:38:55:06:f1:5a:
                    0b:ee:0d:9b:6b:aa:6c:0c:45:dc:77:e8:9c:27:82:
                    87:f9:b2:ed:44:8a:7a:1d:eb:8a:eb:7b:40:b7:ed:
                    05:b1:7a:e4:31:64:a4:e9:f5:c1:1e:c0:b3:b8:43:
                    b0:80:9f:1f:33:64:0c:74:5b:cf:15:4b:4b:99:fc:
                    f0:66:cf:21:7e:47:e0:5b:e7:af:67:4c:37:e9:52:
                    ad:b0:9d:c9:97:a3:5b:b9:3b:14:19:3e:e1:1f:7a:
                    ae:68:11:cf:97:b1:8e:9c:10:f4:ce:70:7f:f2:fc:
                    86:53:ec:8f:25:85:ab:6b:04:f0:62:f1:d4:35:16:
                    6d:50:9c:d0:15:14:ca:b0:b2:d2:aa:7e:60:90:b2:
                    ab:c6:a5:36:e5:ae:5d:54:6c:c0:e2:f6:4f:60:58:
                    b0:4a:00:ef:99:fe:ae:5a:ce:2d:7f:b8:6a:16:86:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B6:8C:34:A5:40:0D:78:87:A9:DF:DD:B7:8E:67:EB:D9:F8:10:DE
            X509v3 Authority Key Identifier:
                keyid:B0:8E:D8:7D:02:32:B3:2F:4B:30:1B:81:41:7E:B9:BE:AF:57:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B08ED87D0232B32F4B301B81417EB9BEAF579B9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/1/3230302e3134322e3232342e302f32322d3234203d3e20323730393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:2c:af:42:3a:35:37:a5:d7:b5:1c:ec:5c:a4:2f:1b:aa:
         1c:6a:f0:4d:e1:14:bf:2b:19:fe:36:cb:4f:4b:84:b5:65:0f:
         26:45:4a:df:59:0b:d9:3f:af:af:19:86:04:40:30:58:01:52:
         13:69:59:01:cc:f7:16:b2:8c:31:7c:fb:7d:92:2f:6a:12:b0:
         92:13:c6:52:b4:77:30:e2:02:20:8f:12:c4:f3:ad:e8:bb:dc:
         87:25:61:1c:94:76:74:e9:88:fb:2b:2a:08:f9:99:b9:e8:59:
         ef:b8:37:d2:a2:ac:cc:cb:db:3a:a1:4d:f2:c9:a0:90:54:df:
         49:02:d4:70:78:65:a3:b5:6a:43:d2:cc:e0:81:c2:57:e4:24:
         0e:5d:b0:2f:a0:45:4e:2a:cf:c4:dc:e1:3d:f7:37:30:2f:93:
         83:cc:13:db:ae:0d:df:de:7d:1e:fc:6f:7e:99:16:3d:9c:e4:
         da:5c:e3:79:4b:0f:bf:5b:10:51:28:10:4c:3c:b4:6d:6d:3a:
         22:be:f4:36:d2:97:ae:c8:64:64:23:82:13:5f:1d:37:20:94:
         76:bc:4d:60:86:70:69:ff:5f:ac:82:c7:89:37:b1:3e:7f:c2:
         77:1a:c8:eb:21:68:f6:bd:70:2d:81:88:17:71:99:3e:db:23:
         77:1e:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 11:58:32 2024 by rpki-client on console-ams.rpki-client.org