Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa
File:                     3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa (raw, json)
Hash identifier:          e3CZoPVNH7djR3NAixLHZJeKftjzRPCCW+OgsenqAJQ=
Subject key identifier:   9E:35:59:94:A6:09:6B:6C:C5:79:11:AB:04:EA:70:BA:44:EC:36:02
Certificate issuer:       /CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
Certificate serial:       307CF2706DD8DDA249B8A9BC64795035EA370A2D
Authority key identifier: 64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa
Signing time:             Fri 11 Oct 2024 19:42:31 +0000
ROA not before:           Fri 11 Oct 2024 19:37:31 +0000
ROA not after:            Fri 10 Oct 2025 19:42:31 +0000
asID:                     61876
IP address blocks:        201.150.127.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7c:f2:70:6d:d8:dd:a2:49:b8:a9:bc:64:79:50:35:ea:37:0a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1
        Validity
            Not Before: Oct 11 19:37:31 2024 GMT
            Not After : Oct 10 19:42:31 2025 GMT
        Subject: CN=9E355994A6096B6CC57911AB04EA70BA44EC3602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:b1:56:7e:7d:f5:7c:a8:2b:8e:e5:87:d4:
                    08:ba:9a:b4:b0:e7:0f:79:ef:57:56:6c:5e:97:79:
                    05:1a:98:ba:e6:04:da:d8:43:d1:58:f1:50:69:12:
                    70:75:17:41:0d:3b:5a:cf:4c:89:45:9b:9e:12:50:
                    cd:10:85:e2:7f:6b:a7:46:a1:84:62:82:09:e2:0c:
                    ce:09:d6:74:6a:9e:c3:0c:04:cd:1c:e1:9d:d7:57:
                    98:f7:43:f5:77:87:08:f1:1c:ac:94:7c:0f:0d:eb:
                    a7:78:32:91:8d:32:62:a4:eb:8c:7a:7f:bf:ae:ed:
                    a6:fe:4d:51:ec:a8:4b:20:82:23:3e:14:76:d2:92:
                    4c:1e:d3:ad:49:89:48:a9:8d:dd:3d:df:5c:3c:bd:
                    6a:a4:cd:0a:62:30:49:a5:a2:b0:3b:9f:28:aa:ce:
                    11:a4:16:2b:f7:1d:6f:3f:a1:55:2a:d3:e3:ee:e1:
                    de:b9:14:aa:97:3a:d9:be:65:b9:4e:83:ca:42:e9:
                    a8:5a:a5:d7:01:34:c1:87:85:d1:46:ed:57:44:19:
                    75:fd:02:c2:d8:0f:e3:a6:c8:2d:f8:c6:fc:cf:48:
                    21:b2:ee:6a:82:68:32:1d:d0:d3:12:59:cf:f4:9d:
                    8d:c2:66:38:08:14:77:52:0f:fb:65:d8:6b:7e:40:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:59:94:A6:09:6B:6C:C5:79:11:AB:04:EA:70:BA:44:EC:36:02
            X509v3 Authority Key Identifier:
                keyid:64:F4:E6:E9:FE:0B:A7:D9:DE:B0:17:D8:D8:8D:AB:AF:DC:73:29:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64F4E6E9FE0BA7D9DEB017D8D88DABAFDC7329F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/3230312e3135302e3132372e302f32342d3234203d3e203631383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:8c:55:85:45:4f:88:f3:56:35:c5:68:04:15:84:cc:8c:
         fc:3e:5a:b0:f4:98:fe:f1:83:fd:db:73:0a:14:0e:9f:77:11:
         cd:51:8b:2a:8b:bb:7e:92:e4:dc:3f:ed:5f:b0:ad:a7:f9:65:
         4d:d0:c5:e6:71:76:e0:10:a6:64:3f:40:01:ae:8c:a2:18:10:
         21:fc:f7:8d:6d:50:5c:b8:51:60:c7:7d:ee:fe:7f:53:17:1c:
         5b:f0:77:9b:f4:1a:15:3f:f2:90:45:e6:b4:28:b3:8b:8c:12:
         d3:83:fa:14:37:a5:8a:63:34:63:56:35:01:63:49:18:2c:59:
         22:95:c6:47:d5:a5:a5:6b:97:ce:d8:35:fe:fd:92:8a:5f:01:
         29:9c:b4:8f:8d:44:fc:40:4d:46:a1:21:19:25:4c:f2:be:f0:
         ff:5c:b8:b2:06:8d:77:db:26:79:1c:c0:59:eb:f5:56:68:f8:
         8f:20:fd:fe:ed:7d:a5:7f:48:53:a2:50:b3:c2:1f:b0:42:5b:
         0d:8c:89:3d:e8:25:2e:c2:78:34:05:9f:c3:a2:ed:04:d6:23:
         75:5c:a1:10:da:f8:41:e9:c5:c9:af:8a:80:34:74:dc:b9:f3:
         fa:78:f7:00:c4:62:0c:d9:01:e0:f3:14:eb:87:ec:13:f9:bd:
         4d:01:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 07:10:43 2024 by rpki-client on console-ams.rpki-client.org