Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          eYjfwJPJMgYX7d8lVegfXENqXWErUXj9X9dzfHTqC4Y=
Subject key identifier:   BD:C3:9B:0B:8A:0D:6B:28:05:28:50:5F:28:96:06:C1:E1:F4:99:5A
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       046E8D00605483CA520CB77D668496F4527A4F60
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:22 +0000
ROA not before:           Thu 04 Apr 2024 16:02:22 +0000
ROA not after:            Thu 03 Apr 2025 16:07:22 +0000
asID:                     270615
IP address blocks:        200.215.253.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6e:8d:00:60:54:83:ca:52:0c:b7:7d:66:84:96:f4:52:7a:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:22 2024 GMT
            Not After : Apr  3 16:07:22 2025 GMT
        Subject: CN=BDC39B0B8A0D6B280528505F289606C1E1F4995A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:70:44:ed:e7:d5:05:ab:89:3a:9e:a5:61:
                    c8:4e:6d:8e:33:7a:e6:54:3f:d9:ca:bb:9f:0f:87:
                    09:0f:3a:e4:6f:b4:df:21:6f:b2:47:51:6f:e6:bb:
                    97:58:b9:98:07:83:91:0b:a4:1e:3a:ca:a7:37:a1:
                    ce:6d:34:3c:40:11:c4:a4:58:5a:29:10:c0:b2:ea:
                    1a:b7:63:0b:9d:b6:a6:1f:4a:82:7f:16:51:91:0d:
                    50:35:c5:46:e1:14:6b:65:78:66:52:a1:af:57:67:
                    27:d8:44:b2:ac:61:3c:d8:60:bf:43:66:0a:c1:f3:
                    40:ed:42:f1:c7:e8:94:dc:76:43:1f:e0:8c:db:c0:
                    db:16:07:d2:6f:86:7e:9b:34:39:3b:fa:6b:ab:b3:
                    41:73:75:b0:72:23:f4:f5:bc:1b:57:18:dd:5b:d5:
                    a1:79:21:10:1d:b2:48:1a:74:5c:f6:38:7a:87:13:
                    d5:19:63:83:02:e0:f1:48:a7:64:f8:42:52:9a:69:
                    1c:ad:a1:37:e9:0f:ad:d2:7f:34:8b:f1:28:05:a8:
                    10:86:b9:24:79:d3:e1:5e:af:0f:36:0e:30:07:ff:
                    85:db:83:9d:68:bb:d5:76:1d:60:f3:bc:a9:7e:47:
                    10:f0:e4:c0:4f:24:75:7c:06:c2:72:fd:91:5b:b6:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:9B:0B:8A:0D:6B:28:05:28:50:5F:28:96:06:C1:E1:F4:99:5A
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235332e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:77:ce:9b:e8:ef:d7:27:b6:a5:17:e1:48:8f:ba:da:73:a1:
         8d:18:09:2f:aa:f5:4b:54:fb:8c:05:9d:0c:36:1a:ce:6a:e5:
         b6:0f:65:23:bf:a6:88:ca:d7:80:2e:31:82:b9:3b:dd:25:0c:
         d5:a5:6d:1c:b3:8a:8c:d6:80:4c:1f:09:17:6d:87:2d:4f:1e:
         c1:b2:5d:f4:f3:50:20:35:4b:f5:64:31:00:99:4a:01:52:6e:
         81:eb:04:3a:d1:73:a5:a4:8d:db:f4:d0:99:79:e2:93:28:26:
         03:bc:83:58:7a:83:a6:c5:02:67:f1:93:d1:1d:40:42:24:2a:
         e7:a7:3e:22:26:9f:53:81:da:59:2e:7d:92:cf:2a:5d:34:8b:
         ca:0b:c1:5d:df:87:3a:36:0a:e7:e0:82:0f:45:a9:f0:4e:9f:
         f7:78:d2:07:9f:a6:bf:32:ab:b7:b7:fe:9d:d5:8f:80:fc:d7:
         68:8b:2b:d8:5e:ce:2d:1f:55:14:91:26:4a:8c:23:a1:14:fb:
         91:79:14:ef:9d:25:e5:bc:20:36:07:c2:7a:47:0b:5e:2b:f4:
         28:c5:ec:77:96:37:17:53:fe:da:d0:35:ef:af:e5:eb:3a:cb:
         3e:e7:f5:75:29:f1:d3:f5:c5:4d:32:21:1a:79:6c:cd:0c:ba:
         e7:43:7a:ba
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBG6NAGBUg8pSDLd9ZoSW9FJ6T2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4QjE3RkFCQTIyNjg5RkFBNDc2OUI2ODM5NEE0MDE2
NTk0OTZBNzAeFw0yNDA0MDQxNjAyMjJaFw0yNTA0MDMxNjA3MjJaMDMxMTAvBgNV
BAMTKEJEQzM5QjBCOEEwRDZCMjgwNTI4NTA1RjI4OTYwNkMxRTFGNDk5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjnBE7efVBauJOp6lYchObY4z
euZUP9nKu58PhwkPOuRvtN8hb7JHUW/mu5dYuZgHg5ELpB46yqc3oc5tNDxAEcSk
WFopEMCy6hq3YwudtqYfSoJ/FlGRDVA1xUbhFGtleGZSoa9XZyfYRLKsYTzYYL9D
ZgrB80DtQvHH6JTcdkMf4IzbwNsWB9Jvhn6bNDk7+murs0FzdbByI/T1vBtXGN1b
1aF5IRAdskgadFz2OHqHE9UZY4MC4PFIp2T4QlKaaRytoTfpD63SfzSL8SgFqBCG
uSR50+Ferw82DjAH/4Xbg51ou9V2HWDzvKl+RxDw5MBPJHV8BsJy/ZFbttU1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvcObC4oNaygFKFBfKJYGweH0mVowHwYDVR0j
BBgwFoAUEosX+roiaJ+qR2m2g5SkAWWUlqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRQMjJ6QTlZMmdqcmg0WGJVVFJFenF1aEREY0dVY05iQnJIQ0M2amNy
cjYvMS8xMjhCMTdGQUJBMjI2ODlGQUE0NzY5QjY4Mzk0QTQwMTY1OTQ5NkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyOEIxN0ZBQkEyMjY4OUZB
QTQ3NjlCNjgzOTRBNDAxNjU5NDk2QTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkUDIyekE5WTJnanJoNFhiVVRSRXpxdWhERGNHVWNOYkJySENDNmpjcnI2LzEv
MzIzMDMwMmUzMjMxMzUyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjX/TANBgkqhkiG9w0BAQsFAAOCAQEAIXfO
m+jv1ye2pRfhSI+62nOhjRgJL6r1S1T7jAWdDDYazmrltg9lI7+miMrXgC4xgrk7
3SUM1aVtHLOKjNaATB8JF22HLU8ewbJd9PNQIDVL9WQxAJlKAVJugesEOtFzpaSN
2/TQmXnikygmA7yDWHqDpsUCZ/GT0R1AQiQq56c+IiafU4HaWS59ks8qXTSLygvB
Xd+HOjYK5+CCD0Wp8E6f93jSB5+mvzKrt7f+ndWPgPzXaIsr2F7OLR9VFJEmSowj
oRT7kXkU750l5bwgNgfCekcLXiv0KMXsd5Y3F1P+2tA176/l6zrLPuf1dSnx0/XF
TTIhGnlszQy650N6ug==
-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org