Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          xiLbip2otqWww+HItVma9hYXVfJCDoQpl5K4ixGcY9I=
Subject key identifier:   24:A0:36:DC:97:DE:CD:CF:6B:C4:67:3A:3B:AF:95:5E:1A:8A:75:84
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       5EECE668B63B097F3BB14E15FBB3CA95C3A4C4A9
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:24 +0000
ROA not before:           Thu 04 Apr 2024 16:02:24 +0000
ROA not after:            Thu 03 Apr 2025 16:07:24 +0000
asID:                     270615
IP address blocks:        200.215.254.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ec:e6:68:b6:3b:09:7f:3b:b1:4e:15:fb:b3:ca:95:c3:a4:c4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:24 2024 GMT
            Not After : Apr  3 16:07:24 2025 GMT
        Subject: CN=24A036DC97DECDCF6BC4673A3BAF955E1A8A7584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:3e:bf:51:92:7a:fd:d8:03:b7:74:51:8d:
                    8f:f0:04:da:06:f4:17:5a:c6:bc:c7:18:d7:a7:0e:
                    49:0f:c7:18:f7:d6:17:00:f3:ab:9d:39:c7:dc:1d:
                    8b:01:99:c8:01:62:22:67:d7:72:3d:67:c9:bd:85:
                    2e:11:a3:75:f9:8a:62:9d:22:e8:2f:53:4b:6c:e0:
                    0a:03:a8:37:c6:5d:07:db:83:45:a9:3a:bf:7f:34:
                    53:e1:c0:b2:bc:df:12:65:99:1d:2f:a4:d6:56:42:
                    52:96:f7:9c:a3:47:29:d5:cc:5a:3c:00:9c:2c:78:
                    ce:6d:21:e6:ed:0a:c2:0a:74:ed:d0:6f:94:be:2c:
                    34:b4:c8:64:3c:a8:84:03:a6:98:6f:b0:a9:0e:74:
                    4e:8e:2a:65:31:28:b7:aa:04:95:a9:74:8d:ff:cc:
                    c3:95:65:46:81:98:ac:8f:df:71:c5:7f:0d:14:e7:
                    1d:11:52:20:ab:a5:46:a8:c3:2f:cb:ec:d1:dd:08:
                    85:cd:35:c2:0f:c5:a7:33:d1:a7:1e:d4:d6:ad:ca:
                    d5:a7:d4:68:f6:bb:65:12:ae:fb:0a:84:5f:0d:67:
                    67:29:71:64:1a:56:c3:10:92:af:f0:b2:d4:77:14:
                    36:d7:e5:3b:b5:5b:a2:15:aa:98:33:d9:f2:48:e8:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A0:36:DC:97:DE:CD:CF:6B:C4:67:3A:3B:AF:95:5E:1A:8A:75:84
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235342e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:4a:5a:e9:24:e7:2f:c4:54:bf:cf:28:c0:f7:b3:63:3c:
         39:8c:81:41:00:67:3e:39:55:46:d9:b1:35:18:2e:ab:2d:e5:
         0e:0f:18:a3:77:bd:8b:8b:de:fa:d1:8d:01:5c:88:ee:97:3d:
         50:d7:0a:9e:b3:54:bb:8e:2a:30:f8:b8:67:17:64:80:ac:cc:
         99:2b:5d:ca:3b:dc:67:fd:e4:cc:a1:14:23:63:4d:19:6d:c4:
         9a:73:cd:b7:e4:ca:58:9f:bf:f8:e8:c0:80:10:ba:19:b5:d7:
         4b:de:3c:71:ce:32:b0:ae:74:05:2b:5c:22:a2:e5:57:0d:7c:
         52:b4:06:9f:4a:1a:28:5b:4f:88:be:21:68:e0:62:9d:6e:d0:
         ec:f9:63:76:2e:39:fd:3a:ef:8f:93:dc:e8:9f:c6:d2:ac:b1:
         47:28:21:83:e9:a5:15:b0:f3:28:77:2b:74:90:f2:51:b4:00:
         5c:04:6a:b0:84:6e:9b:65:7c:72:e6:39:61:b7:20:ad:c7:58:
         f1:4e:df:e7:7d:42:c6:af:fa:a1:87:e1:63:f1:70:50:8b:bc:
         87:b3:a8:8f:ff:a8:ff:3a:e4:00:e5:80:16:f4:2b:8e:b1:e7:
         36:f2:58:4b:43:e7:df:e3:81:f4:91:36:53:51:a5:31:08:98:
         6b:5a:77:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org