Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235352e302f32342d3234203d3e20323730363135.roa
File:                     3230302e3231352e3235352e302f32342d3234203d3e20323730363135.roa (raw, json)
Hash identifier:          yqBH1iqJ8L/xgxEurwqZCG/oNn5vBLaZsxz9ezKFL44=
Subject key identifier:   A8:1A:06:7B:14:10:FD:32:A6:1E:1C:89:CE:17:00:D0:9B:D3:4D:74
Certificate issuer:       /CN=128B17FABA22689FAA4769B68394A401659496A7
Certificate serial:       03F7A6C42387B129D4B450AF30578EF38F6BC2A5
Authority key identifier: 12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235352e302f32342d3234203d3e20323730363135.roa
Signing time:             Thu 04 Apr 2024 16:07:21 +0000
ROA not before:           Thu 04 Apr 2024 16:02:21 +0000
ROA not after:            Thu 03 Apr 2025 16:07:21 +0000
asID:                     270615
IP address blocks:        200.215.255.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:a6:c4:23:87:b1:29:d4:b4:50:af:30:57:8e:f3:8f:6b:c2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128B17FABA22689FAA4769B68394A401659496A7
        Validity
            Not Before: Apr  4 16:02:21 2024 GMT
            Not After : Apr  3 16:07:21 2025 GMT
        Subject: CN=A81A067B1410FD32A61E1C89CE1700D09BD34D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:c9:17:a3:88:0c:b1:d7:7e:22:a2:f9:02:
                    5b:80:c4:1e:3b:ff:29:57:31:3e:d2:32:5f:c8:bb:
                    23:ce:e7:3c:06:cb:5b:35:c0:1c:1a:75:d8:d7:fc:
                    ab:f1:b3:f0:ef:8f:f6:95:11:82:f0:f6:db:5a:83:
                    3c:70:22:0e:ec:63:ab:49:ec:43:ce:61:fd:f8:25:
                    31:49:fb:c2:37:4f:17:5c:04:ac:72:35:6e:0d:c1:
                    b4:ab:73:67:d8:2a:e2:7d:44:f8:0b:b4:0d:60:8c:
                    d2:49:64:ee:81:e2:d4:4b:f2:27:88:0b:aa:56:09:
                    ac:17:7a:06:ba:96:8a:fb:5a:1a:df:4c:65:3c:d2:
                    23:c6:73:ac:08:a5:45:c7:c7:6b:c7:bf:1a:f5:01:
                    26:06:a3:db:d2:21:56:b7:73:4e:00:40:5a:d3:ab:
                    cf:ba:15:85:40:f4:be:62:53:fc:d6:33:3f:93:86:
                    86:44:d4:88:06:63:e0:1d:10:d6:40:90:d6:ac:ff:
                    b4:62:cf:ff:b7:c8:46:c8:4e:72:84:21:bd:68:3a:
                    b1:ae:63:be:d7:79:2d:22:e9:e4:ed:b1:9a:c2:1e:
                    0a:af:6d:4a:df:d5:23:ac:91:28:ca:99:89:47:74:
                    06:0f:61:07:c4:d4:70:cc:55:88:ea:5d:04:2b:c4:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:06:7B:14:10:FD:32:A6:1E:1C:89:CE:17:00:D0:9B:D3:4D:74
            X509v3 Authority Key Identifier:
                keyid:12:8B:17:FA:BA:22:68:9F:AA:47:69:B6:83:94:A4:01:65:94:96:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/128B17FABA22689FAA4769B68394A401659496A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128B17FABA22689FAA4769B68394A401659496A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/1/3230302e3231352e3235352e302f32342d3234203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.215.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:81:31:c9:f7:4d:49:96:92:d2:81:ae:97:8d:d7:1c:16:
         4b:af:87:be:1f:ae:61:be:6d:af:5b:e6:3f:97:57:fb:5f:df:
         dd:e6:c6:ba:37:db:59:70:81:d3:a0:8c:a6:e0:ab:6f:9c:18:
         15:ed:08:f3:4f:ec:34:5c:43:43:95:78:2d:fc:e8:51:9b:e2:
         c3:c6:a8:f6:6c:a9:0d:cb:b6:56:ef:f5:14:39:19:3f:27:c9:
         24:1d:c2:ad:2d:ee:f6:b4:98:22:e7:54:2f:a1:79:9a:79:04:
         c4:59:85:f9:94:41:88:72:5e:62:3d:bc:28:13:eb:02:1f:42:
         36:2e:e8:01:e5:e8:c0:de:2c:9c:1a:88:8c:e2:f9:b0:da:e7:
         9d:d4:0f:dc:cc:61:8a:af:17:be:37:73:36:f3:b1:0e:26:68:
         99:9f:c2:fb:79:96:6f:ed:64:9b:0d:4a:e1:4c:d9:1f:6f:a9:
         69:ed:bf:cb:16:dd:8d:40:35:8a:db:cf:ee:da:0a:cc:ba:87:
         1f:25:d9:83:3f:05:2b:06:ea:8b:5c:2b:1a:6a:03:4f:3f:a0:
         5d:c1:49:76:5c:e9:69:54:d5:7c:18:be:76:98:39:44:63:c7:
         a8:24:1a:7c:13:bf:96:93:ff:40:12:17:48:f7:e5:19:a0:fc:
         de:f1:65:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUA/emxCOHsSnUtFCvMFeO849rwqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4QjE3RkFCQTIyNjg5RkFBNDc2OUI2ODM5NEE0MDE2
NTk0OTZBNzAeFw0yNDA0MDQxNjAyMjFaFw0yNTA0MDMxNjA3MjFaMDMxMTAvBgNV
BAMTKEE4MUEwNjdCMTQxMEZEMzJBNjFFMUM4OUNFMTcwMEQwOUJEMzRENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWskXo4gMsdd+IqL5AluAxB47
/ylXMT7SMl/IuyPO5zwGy1s1wBwaddjX/Kvxs/Dvj/aVEYLw9ttagzxwIg7sY6tJ
7EPOYf34JTFJ+8I3TxdcBKxyNW4NwbSrc2fYKuJ9RPgLtA1gjNJJZO6B4tRL8ieI
C6pWCawXega6lor7WhrfTGU80iPGc6wIpUXHx2vHvxr1ASYGo9vSIVa3c04AQFrT
q8+6FYVA9L5iU/zWMz+ThoZE1IgGY+AdENZAkNas/7Riz/+3yEbITnKEIb1oOrGu
Y77XeS0i6eTtsZrCHgqvbUrf1SOskSjKmYlHdAYPYQfE1HDMVYjqXQQrxBjtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqBoGexQQ/TKmHhyJzhcA0JvTTXQwHwYDVR0j
BBgwFoAUEosX+roiaJ+qR2m2g5SkAWWUlqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmRQMjJ6QTlZMmdqcmg0WGJVVFJFenF1aEREY0dVY05iQnJIQ0M2amNy
cjYvMS8xMjhCMTdGQUJBMjI2ODlGQUE0NzY5QjY4Mzk0QTQwMTY1OTQ5NkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyOEIxN0ZBQkEyMjY4OUZB
QTQ3NjlCNjgzOTRBNDAxNjU5NDk2QTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkUDIyekE5WTJnanJoNFhiVVRSRXpxdWhERGNHVWNOYkJySENDNmpjcnI2LzEv
MzIzMDMwMmUzMjMxMzUyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjX/zANBgkqhkiG9w0BAQsFAAOCAQEALsSB
Mcn3TUmWktKBrpeN1xwWS6+Hvh+uYb5tr1vmP5dX+1/f3ebGujfbWXCB06CMpuCr
b5wYFe0I80/sNFxDQ5V4LfzoUZviw8ao9mypDcu2Vu/1FDkZPyfJJB3CrS3u9rSY
IudUL6F5mnkExFmF+ZRBiHJeYj28KBPrAh9CNi7oAeXowN4snBqIjOL5sNrnndQP
3Mxhiq8XvjdzNvOxDiZomZ/C+3mWb+1kmw1K4UzZH2+pae2/yxbdjUA1itvP7toK
zLqHHyXZgz8FKwbqi1wrGmoDTz+gXcFJdlzpaVTVfBi+dpg5RGPHqCQafBO/lpP/
QBIXSPflGaD83vFl+w==
-----END CERTIFICATE-----
Generated at Thu Jun 20 19:28:48 2024 by rpki-client on console-fra.rpki-client.org