Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3230312e33332e33322e302f31392d3332203d3e203238363234.roa
File:                     3230312e33332e33322e302f31392d3332203d3e203238363234.roa (raw, json)
Hash identifier:          88/4rmZpmfGRSgo0YDXGRDrJiJXzFtKGehC45cpcshY=
Subject key identifier:   29:4F:FD:72:0D:7D:4C:9B:3F:78:C3:44:B8:6E:71:5B:55:12:F6:2E
Certificate issuer:       /CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
Certificate serial:       41359C977E084E1F7A55FDC3B0C7D734E340CD50
Authority key identifier: 81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3230312e33332e33322e302f31392d3332203d3e203238363234.roa
Signing time:             Wed 03 Apr 2024 19:58:58 +0000
ROA not before:           Wed 03 Apr 2024 19:53:58 +0000
ROA not after:            Wed 02 Apr 2025 19:58:58 +0000
asID:                     28624
IP address blocks:        201.33.32.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:35:9c:97:7e:08:4e:1f:7a:55:fd:c3:b0:c7:d7:34:e3:40:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
        Validity
            Not Before: Apr  3 19:53:58 2024 GMT
            Not After : Apr  2 19:58:58 2025 GMT
        Subject: CN=294FFD720D7D4C9B3F78C344B86E715B5512F62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:36:40:a3:c7:fe:7e:fd:59:8f:8e:a7:bf:07:
                    33:e7:99:c8:96:71:4a:96:b2:be:eb:e0:4a:a0:ba:
                    1c:03:60:08:5f:0e:64:d0:e0:58:67:32:6b:d0:06:
                    14:38:85:b4:a8:52:cd:9f:35:e4:79:6e:c2:a6:31:
                    49:11:f6:40:3c:06:6a:92:34:de:ef:2b:2a:08:14:
                    13:71:66:a5:9c:94:45:ff:c2:58:10:b3:f4:ce:13:
                    42:b5:7a:93:83:ba:7e:9d:e0:8a:f7:b2:2b:47:02:
                    c2:83:53:54:ce:2f:a5:47:d2:ab:00:90:79:81:80:
                    05:c0:9d:09:7f:7d:bc:9a:c6:ac:d8:53:6c:b4:58:
                    7e:f8:df:56:87:b7:69:66:1e:f9:eb:0c:37:5b:ae:
                    6a:cd:f8:6b:aa:86:90:8b:48:f3:6e:cc:08:13:31:
                    44:90:72:97:c7:16:86:20:89:63:7c:a3:50:17:2e:
                    2e:50:d3:f4:b5:5c:e0:e7:ab:a0:84:b9:c3:2a:11:
                    be:0c:65:80:13:81:6d:89:19:6b:52:c3:5e:e6:64:
                    26:f2:9d:84:bb:02:86:4c:4a:fa:c8:88:78:45:ce:
                    87:c0:85:27:46:52:bd:11:ca:ff:af:b0:aa:ec:3d:
                    cd:42:ab:61:18:dd:55:9c:ce:be:9f:3c:37:b8:0b:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4F:FD:72:0D:7D:4C:9B:3F:78:C3:44:B8:6E:71:5B:55:12:F6:2E
            X509v3 Authority Key Identifier:
                keyid:81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3230312e33332e33322e302f31392d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:13:55:a4:c0:e2:86:bd:53:31:a6:f3:42:77:47:8f:7b:
         cc:fe:ce:33:7b:9b:81:14:07:a9:66:86:c6:47:b0:e1:7a:7a:
         34:40:c6:ec:82:da:6d:16:60:4b:86:2f:68:9b:58:f9:10:bb:
         7b:06:3b:7b:f7:d6:88:13:ea:6f:28:eb:7c:3f:cf:ac:90:43:
         b7:c1:ad:34:71:80:f6:94:b9:8a:b7:1f:8e:1b:fc:09:1f:c4:
         80:ad:a3:16:9e:9f:a5:8f:e7:cf:df:eb:cf:b5:0c:84:35:1c:
         d9:59:57:dc:55:2a:88:49:26:4e:a1:c0:41:cc:cf:fc:f1:4a:
         c4:2f:da:71:11:47:cb:b0:30:c1:df:0c:fc:7a:d8:bb:15:a8:
         c3:22:8d:e7:1c:3d:4f:10:39:2f:d6:e7:94:e1:72:7f:e0:9f:
         a9:9d:45:18:c5:3c:b0:dc:1e:8c:93:90:be:d9:f0:44:c7:cd:
         6b:42:5d:ff:49:74:5b:8d:5a:1b:c5:8e:72:48:0d:29:d1:a5:
         c9:2e:2f:21:6c:8c:4d:1d:56:84:d9:86:84:36:7d:34:b3:7d:
         fd:97:3f:15:d6:b3:54:d6:79:89:75:73:94:17:8a:7a:d1:47:
         87:d4:8c:85:fd:3d:27:b7:6d:a9:b9:36:1f:e1:c7:b3:c6:34:
         5d:40:6e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:50:12 2024 by rpki-client on console-fra.rpki-client.org