Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa
File:                     3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa (raw, json)
Hash identifier:          LhhVMFqUPoNduKHL17tQv3AyDSIC0aKVj35Uan/eBXI=
Subject key identifier:   D4:AF:71:45:A5:D3:A9:34:5F:E3:1E:73:CC:86:38:86:30:73:E1:A1
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       11A55A445B2A312FBE9D39364C132209BE73CBA2
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:25 +0000
ROA not before:           Thu 04 Apr 2024 16:02:25 +0000
ROA not after:            Thu 03 Apr 2025 16:07:25 +0000
asID:                     270615
IP address blocks:        200.215.254.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a5:5a:44:5b:2a:31:2f:be:9d:39:36:4c:13:22:09:be:73:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:25 2024 GMT
            Not After : Apr  3 16:07:25 2025 GMT
        Subject: CN=D4AF7145A5D3A9345FE31E73CC8638863073E1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:1a:85:e8:42:75:37:c1:ea:6d:0a:70:44:
                    04:31:0f:28:35:11:a2:71:59:e2:ec:de:af:ab:34:
                    3f:43:de:96:45:ec:6f:5b:b9:f4:9a:38:20:83:d7:
                    84:d9:ba:06:3a:3c:ab:87:64:9c:8a:b2:b5:36:f0:
                    a1:49:75:ef:b1:63:06:c6:97:10:ca:31:09:6e:84:
                    43:a3:10:85:31:7a:aa:42:5d:db:82:59:73:01:ad:
                    87:83:9f:57:ed:b1:88:f4:d7:bd:de:2d:06:14:92:
                    cf:04:68:e7:fc:dc:a5:b2:40:6c:bd:4c:fe:db:bd:
                    7d:2f:a5:7a:a1:80:53:e3:26:84:2f:fd:04:86:8b:
                    16:3e:8c:6b:50:dc:86:96:de:8f:07:f0:e8:48:43:
                    c1:d5:bc:55:fb:6c:a1:ef:09:8d:bd:fd:f7:b0:83:
                    8a:f1:4f:4f:86:22:50:9d:44:dc:2b:e1:e3:99:36:
                    b5:3f:1d:dc:b7:23:ce:ef:5f:71:61:f7:0e:db:34:
                    7b:72:1b:e7:30:b0:9e:98:ba:c2:72:e3:eb:32:a6:
                    2a:d0:35:3a:3f:c5:c5:0d:7d:88:15:5b:7e:cd:75:
                    67:ca:88:58:9b:71:76:96:f4:5b:58:ef:9b:ad:73:
                    80:65:31:30:ed:e8:0b:f3:ca:17:48:be:d9:b2:c1:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:71:45:A5:D3:A9:34:5F:E3:1E:73:CC:86:38:86:30:73:E1:A1
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235342e302f32332d3233203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:0b:6e:71:af:5f:1f:86:46:76:20:d2:99:21:4e:b2:27:f1:
         fd:48:75:00:cc:64:24:a2:ef:fa:3c:81:ca:26:ed:d1:5d:62:
         54:c7:d9:92:21:11:17:ff:ad:f5:9e:5f:7c:76:4b:42:3a:40:
         0a:69:96:60:6e:32:a5:f6:f7:78:3b:ef:38:ba:5e:06:a2:78:
         e0:4c:a6:03:45:66:ce:ce:61:1a:76:0d:ab:d3:a3:20:89:7a:
         d4:5e:0c:8c:4b:b3:61:8e:41:ea:99:a4:19:0e:77:ea:2d:b0:
         be:fb:83:b2:50:81:59:20:13:2a:86:6b:bb:50:df:fd:8c:c6:
         79:85:6a:9e:c2:6d:4f:89:26:c9:4d:c0:55:be:97:0b:10:8b:
         a9:5a:68:10:b2:f4:85:46:f9:6e:e4:16:4b:93:66:9e:24:bd:
         eb:30:74:d6:ca:63:05:f3:4f:96:3b:5b:5e:6a:e3:48:84:ca:
         fa:b9:9b:4a:53:a8:17:4a:60:23:c7:28:0f:8b:bd:9a:93:fe:
         7c:7a:2c:f7:60:f0:dd:c4:17:d9:87:90:dd:c3:cb:e5:96:0a:
         fd:63:b8:1a:cc:67:18:6f:39:1d:da:46:60:c6:26:ad:ae:af:
         a9:62:28:e8:4c:dd:06:0f:b1:e0:3b:0d:63:63:04:bd:11:4b:
         b9:bb:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org