Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa
File:                     3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa (raw, json)
Hash identifier:          83cjpnzxwYEd6AI/dyzqdxjc+vpXSmJabD3L+TAVfCA=
Subject key identifier:   85:5B:19:A5:4B:6D:CC:0E:3C:C5:63:E1:2D:1A:A9:AA:68:07:4D:B5
Certificate issuer:       /CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
Certificate serial:       0F9851ADB35E6336A4969AF86E9D3F8C17313618
Authority key identifier: 64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa
Signing time:             Fri 11 Oct 2024 19:40:52 +0000
ROA not before:           Fri 11 Oct 2024 19:35:52 +0000
ROA not after:            Fri 10 Oct 2025 19:40:52 +0000
asID:                     61876
IP address blocks:        201.150.126.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:98:51:ad:b3:5e:63:36:a4:96:9a:f8:6e:9d:3f:8c:17:31:36:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
        Validity
            Not Before: Oct 11 19:35:52 2024 GMT
            Not After : Oct 10 19:40:52 2025 GMT
        Subject: CN=855B19A54B6DCC0E3CC563E12D1AA9AA68074DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:14:76:f2:ee:7c:f1:f3:c8:77:71:05:57:
                    e7:ba:7b:70:fd:1b:ca:85:22:48:79:5c:b8:1d:00:
                    67:2e:0b:03:d5:b2:12:37:78:27:43:56:c3:a7:29:
                    3d:7a:e3:df:db:b2:a1:f5:c4:70:65:41:dd:11:fb:
                    23:2c:1b:13:e9:56:b7:e8:c4:b0:66:18:79:e4:e5:
                    f5:ab:b3:f3:a7:77:7a:f1:b0:90:4f:ba:10:e5:4a:
                    c9:1b:cc:32:26:a7:e5:8d:82:24:a0:61:75:64:8c:
                    2e:fd:58:44:cf:46:3b:7e:ec:26:e1:06:6f:ad:a9:
                    c6:ba:16:e5:ff:0f:e7:fa:8c:ad:b7:97:09:a1:1a:
                    c7:32:4d:e1:19:f6:fc:31:2d:dd:b7:ec:02:6e:4d:
                    0f:2e:a8:7f:18:f5:db:5b:aa:15:ff:bc:82:ea:02:
                    fa:db:93:74:c5:8e:b6:ac:d2:7b:e6:12:df:70:b9:
                    95:76:50:fd:d7:fd:24:ce:1e:0b:ad:e4:24:24:a9:
                    ef:4b:57:6a:9e:a3:c5:aa:1d:d0:48:d7:bb:a6:35:
                    e6:95:41:f4:10:80:da:a5:4d:63:b6:b3:f0:b2:c4:
                    40:db:80:49:25:e3:df:97:bb:36:bb:86:5f:a2:2e:
                    07:78:28:27:ea:c1:95:ef:60:59:a9:ce:89:75:39:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5B:19:A5:4B:6D:CC:0E:3C:C5:63:E1:2D:1A:A9:AA:68:07:4D:B5
            X509v3 Authority Key Identifier:
                keyid:64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132362e302f32332d3233203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:03:81:b8:f1:d1:de:ab:d8:79:3a:72:93:de:2c:a5:a6:88:
         1c:d0:77:5e:d8:12:bb:37:29:7d:d0:68:1c:1e:4c:0a:f7:14:
         f9:7b:51:b3:c9:f4:99:9e:6c:01:f9:45:d8:8f:52:59:1f:ae:
         44:85:49:a4:4c:8e:25:ab:bb:4a:ec:53:20:39:d5:26:b8:e8:
         f9:23:fd:d5:d9:d2:d8:c7:ae:cb:d5:a3:ad:33:66:e4:e6:bd:
         81:04:d9:9a:d6:bb:a2:1c:b3:1f:58:b3:fc:2f:78:2f:e8:76:
         2d:73:30:66:de:18:36:78:89:97:c1:9c:13:f9:7f:b5:ac:71:
         fe:d5:e7:b5:87:dc:f5:48:cb:36:ea:f2:12:5b:a6:6c:e5:4c:
         d4:15:00:96:c3:41:9d:a2:6b:ce:af:b2:c5:75:46:fc:a7:b1:
         20:a2:d8:68:cc:b3:09:dc:57:6f:76:c5:a0:05:72:91:0b:52:
         2a:eb:3b:64:23:fc:e1:a8:36:7c:83:b6:d8:68:8f:d0:0a:6b:
         af:73:3c:84:d5:0e:6f:6b:2b:ed:a9:bc:51:8c:47:54:21:38:
         ee:2c:d9:20:07:3f:34:ea:3b:35:1e:49:fb:1b:2c:dc:20:12:
         d6:18:d7:40:20:04:1e:ee:41:39:31:6f:57:37:cd:5b:a0:17:
         af:05:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 07:05:05 2024 by rpki-client on console-fra.rpki-client.org