Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          U6Hi7EIwQuCvFzQsO2y+oFQ4cqdEnZ4CFlgi0ZNT7sw=
Subject key identifier:   36:4F:C4:A1:0F:3D:AC:23:6C:E6:AF:8C:1A:F7:6B:B0:DB:58:F4:8F
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       34B1A81B4ED8048B985DB88C9C7CAFD4649876BA
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:20 +0000
ROA not before:           Thu 04 Apr 2024 16:02:20 +0000
ROA not after:            Thu 03 Apr 2025 16:07:20 +0000
asID:                     270615
IP address blocks:        200.215.252.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b1:a8:1b:4e:d8:04:8b:98:5d:b8:8c:9c:7c:af:d4:64:98:76:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:20 2024 GMT
            Not After : Apr  3 16:07:20 2025 GMT
        Subject: CN=364FC4A10F3DAC236CE6AF8C1AF76BB0DB58F48F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:2c:5f:6e:dd:48:13:e6:be:64:1d:62:3f:
                    c7:68:b8:ea:c0:4a:5b:bd:86:e1:35:42:84:5f:f6:
                    13:6e:49:bd:37:1a:c1:4c:51:70:fa:d6:1c:cf:fb:
                    0d:05:e0:76:fb:df:eb:e6:aa:1c:54:dd:42:48:5e:
                    14:45:1a:89:3e:78:27:25:d4:6e:26:01:e7:03:fb:
                    cf:fd:c3:64:e4:39:66:27:29:90:6e:33:19:44:01:
                    ce:0f:c0:ef:9d:a8:ec:2c:97:56:f7:fe:9b:4b:87:
                    ab:1c:33:e0:4c:46:bc:15:2c:6b:29:e1:77:75:e5:
                    7d:43:8a:73:1d:e8:f8:0a:fa:f2:3b:b9:ce:38:e0:
                    5d:5a:74:68:47:94:a2:e2:7b:81:38:61:6e:e4:cb:
                    03:a3:41:ef:d4:bb:a4:64:3a:a1:a9:cc:76:a7:01:
                    63:be:9b:c7:f3:e8:4b:56:9e:3b:58:61:3e:d4:37:
                    59:41:43:a2:d9:0e:27:66:dc:b1:25:63:48:3e:28:
                    bc:ea:69:13:bb:34:59:4f:3a:21:dc:fc:36:f6:0f:
                    a5:15:41:f4:60:cc:4b:e6:23:97:40:b2:47:f9:d3:
                    2c:2c:0d:2a:12:82:b8:8b:f7:d7:ce:af:7b:98:0f:
                    8f:c3:5d:1d:b7:0b:1d:aa:5b:a2:94:a6:83:13:01:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:C4:A1:0F:3D:AC:23:6C:E6:AF:8C:1A:F7:6B:B0:DB:58:F4:8F
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235322e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:a6:02:56:25:33:48:aa:82:fd:b3:98:ea:79:c5:27:7f:
         ce:ce:d2:34:c7:89:9c:f7:6e:3d:87:de:0b:35:b5:96:05:af:
         8b:a0:d7:7e:dd:d2:01:5b:f3:ce:15:52:a4:62:e9:1d:4f:4b:
         25:47:50:38:0f:5f:02:c9:a8:49:77:4d:71:b9:8a:3a:84:c0:
         71:f6:47:44:c2:87:b2:07:d1:f9:e4:f1:fd:89:72:9a:66:f5:
         d2:05:87:c0:3b:9a:4d:c2:f4:bc:26:b2:0e:e2:41:dc:12:d2:
         c5:65:f8:55:de:b6:55:a9:67:a5:60:ab:ca:ec:54:c2:d1:db:
         b9:b8:ce:c4:b2:14:e1:21:83:71:b3:6c:3f:a7:dc:e6:5b:a5:
         bd:0f:54:41:b7:94:03:7f:1a:c0:58:59:51:6d:a6:52:dc:04:
         5e:ce:6f:fb:25:2c:ce:a6:7e:a9:be:6d:7c:ef:17:06:1d:42:
         25:98:14:22:cf:b4:3d:a1:10:ec:a2:f7:ef:f9:45:f1:75:52:
         53:19:33:6a:e5:34:5a:bd:a2:e3:32:36:06:d6:c0:01:de:0f:
         81:fa:84:69:58:1e:e5:cc:a7:78:30:85:6d:9f:e4:8a:99:9f:
         78:84:a4:f9:04:5f:de:c9:be:e2:5c:4c:df:30:16:8f:f2:ed:
         3b:17:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org