Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa
File:                     3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa (raw, json)
Hash identifier:          M3r11civX1jLcOryCdwybBGIXIlU2MooVc8OUjb+fhM=
Subject key identifier:   48:13:F9:C1:77:A0:2A:6A:1F:16:41:03:70:27:70:A3:18:47:2A:31
Certificate issuer:       /CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
Certificate serial:       2F8257ADC8FDC4E8BF830039AEE779B3EE5372
Authority key identifier: 40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa
Signing time:             Thu 04 Apr 2024 06:19:53 +0000
ROA not before:           Thu 04 Apr 2024 06:14:53 +0000
ROA not after:            Thu 03 Apr 2025 06:19:53 +0000
asID:                     273412
IP address blocks:        200.196.42.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:82:57:ad:c8:fd:c4:e8:bf:83:00:39:ae:e7:79:b3:ee:53:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4055DA0ACB382D3CF1F290979963231C8BAB34C2
        Validity
            Not Before: Apr  4 06:14:53 2024 GMT
            Not After : Apr  3 06:19:53 2025 GMT
        Subject: CN=4813F9C177A02A6A1F164103702770A318472A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:16:22:37:18:e8:71:01:9b:c8:5c:41:31:
                    dc:b7:0f:25:35:f0:0f:7c:4c:e6:78:79:6d:8b:eb:
                    39:be:e5:69:ae:44:f4:58:57:33:4c:20:fe:4f:17:
                    ff:9e:d2:27:cd:9f:5e:60:10:a9:26:fc:bf:1e:5f:
                    41:79:fb:4d:33:1d:01:0b:df:8b:44:de:43:f0:8e:
                    fc:bc:75:84:8b:7d:9b:3f:d8:21:1f:d1:58:23:f8:
                    2c:7c:b1:be:4a:e1:54:ff:42:26:4a:03:6e:4e:17:
                    4a:3b:06:b6:5f:ce:4e:1e:33:22:85:57:eb:03:ba:
                    2b:28:11:de:92:81:64:94:67:98:89:dc:28:ec:8d:
                    17:30:79:00:ef:ba:ea:13:f6:fd:71:13:a1:c6:9a:
                    42:c6:49:97:99:43:46:b3:0c:7e:5c:48:9a:be:09:
                    43:b2:4d:bb:0b:70:ea:0e:7f:5a:03:c0:4c:11:2e:
                    4c:ab:3c:27:95:9c:dd:c2:b0:89:51:ce:11:5b:95:
                    9b:ee:da:49:3f:1e:f5:36:d1:97:9a:c1:39:43:c7:
                    2c:85:e7:b1:cf:9a:15:9d:84:02:4f:aa:46:9b:57:
                    2f:be:41:f9:bb:d4:ea:6b:04:57:84:ce:2b:eb:53:
                    b8:1f:32:67:18:1f:ce:ca:7f:c1:68:41:2e:11:e9:
                    e8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:F9:C1:77:A0:2A:6A:1F:16:41:03:70:27:70:A3:18:47:2A:31
            X509v3 Authority Key Identifier:
                keyid:40:55:DA:0A:CB:38:2D:3C:F1:F2:90:97:99:63:23:1C:8B:AB:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4055DA0ACB382D3CF1F290979963231C8BAB34C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/1/3230302e3139362e34322e302f32332d3233203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:85:cb:d5:07:5c:0d:3a:b4:4e:ed:87:01:82:6f:9d:0a:
         3f:3b:96:c3:a1:d7:e5:f0:c7:cd:4e:2e:c7:2e:95:10:42:06:
         16:6b:73:7a:06:a3:ee:2b:d8:82:e7:2b:7b:71:e7:2f:e0:c6:
         13:53:e4:13:0e:24:01:9f:c4:bb:b2:2c:a5:ef:80:1d:99:cb:
         4e:90:b1:c3:5a:2e:db:a9:51:9f:c7:bb:43:59:d3:d5:7e:e5:
         af:09:32:16:57:a7:81:e2:d0:56:4a:5b:bf:4c:a7:56:b0:50:
         ce:c5:a7:46:df:ca:bb:3f:6f:0d:70:53:3a:0c:6a:99:ea:19:
         cf:71:94:f4:d3:ce:5a:e8:0c:2d:4b:08:cc:7e:fa:05:27:06:
         f9:39:11:3e:f0:0f:84:4e:41:d8:a2:6a:1e:60:b1:a7:4b:1a:
         41:06:90:d7:47:92:17:cf:db:5c:d0:6f:90:99:53:b4:10:94:
         bd:f4:0b:86:96:50:20:d2:60:0b:ab:c4:cc:0a:25:35:c2:19:
         09:6f:9d:fb:a7:01:c9:7f:f7:6c:ea:c2:13:64:3a:e7:d3:64:
         f0:e9:d3:ff:a1:27:6a:95:30:cb:78:a0:6b:78:4a:3f:b4:9d:
         d5:d4:d9:8e:02:7b:4b:34:6d:6d:c1:a6:7b:e9:f2:ba:af:ce:
         13:a9:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:07:43 2024 by rpki-client on console-ams.rpki-client.org