Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa
File:                     3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa (raw, json)
Hash identifier:          JRse3gGANmukl8bqJcYROAZ2X1WXjC8SpbjuF4aOl28=
Subject key identifier:   AF:85:18:73:4C:26:41:3F:72:9A:BE:FB:C4:88:7B:FC:0C:B9:D5:7E
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       39356BD6DEEC6A74BB53C35969FE1A142D63698C
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:18 +0000
ROA not before:           Thu 04 Apr 2024 16:02:18 +0000
ROA not after:            Thu 03 Apr 2025 16:07:18 +0000
asID:                     270615
IP address blocks:        200.215.252.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:35:6b:d6:de:ec:6a:74:bb:53:c3:59:69:fe:1a:14:2d:63:69:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:18 2024 GMT
            Not After : Apr  3 16:07:18 2025 GMT
        Subject: CN=AF8518734C26413F729ABEFBC4887BFC0CB9D57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:53:24:a8:b0:32:86:8b:c5:3d:39:ec:94:
                    9a:e1:16:9f:c1:23:79:ad:99:a5:a8:d9:06:94:a1:
                    44:92:f8:c0:b8:81:c7:b7:11:2e:ab:22:65:e6:38:
                    d2:dd:3f:57:98:cb:6d:c3:7a:b4:fe:d8:10:4c:5b:
                    f1:1d:06:57:d0:76:94:48:77:e4:36:df:ec:0f:38:
                    03:6f:71:f0:3d:91:a1:75:f6:f9:3e:df:e3:a6:a4:
                    07:9a:a9:94:71:54:61:1c:1b:34:df:6d:ff:c4:a3:
                    c2:11:5a:4a:83:84:75:89:90:ed:53:dc:81:f6:05:
                    a3:54:d8:0c:36:e0:34:0b:f6:58:d5:87:2d:6f:b9:
                    1c:c7:1f:1e:91:f3:9f:4c:51:30:71:ea:82:40:dc:
                    1d:71:01:60:0e:51:9f:fd:69:93:12:f4:c9:2e:32:
                    5c:9e:6b:f7:d9:e4:ef:35:cd:60:32:fe:e7:0d:13:
                    b7:fb:94:4f:88:e6:82:a8:94:9c:6e:a7:28:c0:f9:
                    c4:15:15:ea:95:7a:02:97:b5:e8:27:2f:f7:ad:21:
                    ea:30:fc:d3:31:60:a1:77:eb:c0:a4:37:8c:0c:f6:
                    ef:50:92:75:88:fc:80:ce:2d:15:bb:b5:06:e3:72:
                    f6:ab:62:86:d2:6b:13:20:54:a8:89:fc:ab:0d:d9:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:18:73:4C:26:41:3F:72:9A:BE:FB:C4:88:7B:FC:0C:B9:D5:7E
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235322e302f32332d3233203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:94:c5:dd:40:cf:17:81:a3:6d:b9:b8:d3:bf:6c:11:86:b4:
         37:49:9e:f2:fc:d6:ef:33:97:21:1b:03:ff:55:e9:ac:ff:35:
         51:11:75:16:db:88:36:72:1a:20:0e:b9:90:74:f5:9d:c6:42:
         2b:74:98:a6:bc:97:23:76:ff:d6:75:2d:35:0b:0d:ba:aa:c2:
         6f:d8:a4:2e:d3:bc:1a:94:70:ed:f5:06:e8:b1:e2:6b:7e:19:
         ce:b4:f0:ba:15:08:c1:9d:69:f2:02:26:b8:60:fb:80:7d:d9:
         58:5a:61:c3:53:3f:56:06:9f:f7:bf:e2:2f:67:4c:e3:cf:11:
         03:1d:d8:7b:aa:f0:cd:7d:d5:79:3a:36:d9:58:b7:de:d5:5b:
         5d:d1:fb:36:d3:0d:ca:88:a3:7f:57:02:09:84:0a:27:a3:67:
         cd:ca:07:4c:dc:66:7e:da:4e:51:8e:4b:d7:88:19:f2:a2:fb:
         49:57:c7:a7:85:8f:8f:6e:50:22:5c:5a:e5:fb:9b:f0:5f:4a:
         bf:dc:f1:ce:0b:dc:46:be:8c:d8:e4:66:53:ba:93:90:b8:c3:
         d6:f4:ae:ff:47:eb:72:a0:b9:33:62:0e:c3:f7:0a:fb:98:23:
         63:d7:80:a0:bd:93:38:b8:0a:bc:44:85:61:59:53:b3:11:e2:
         cf:a6:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org