Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32332d3233203d3e20323730323636.roa
File:                     3230302e3131352e3130362e302f32332d3233203d3e20323730323636.roa (raw, json)
Hash identifier:          Iuogb9fbMVynumhXSfCG5qD+OeThZsj+v5kJv1Ns73Q=
Subject key identifier:   F6:D8:0D:B1:6F:F2:F0:55:DF:84:18:56:9E:27:23:F4:16:15:30:0F
Certificate issuer:       /CN=45F747618D7571B192189E9EE75F2D047A71B705
Certificate serial:       77B31189E30D142F04A17E6A42BB45B6914E8AE3
Authority key identifier: 45:F7:47:61:8D:75:71:B1:92:18:9E:9E:E7:5F:2D:04:7A:71:B7:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45F747618D7571B192189E9EE75F2D047A71B705.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32332d3233203d3e20323730323636.roa
Signing time:             Wed 12 Jul 2023 18:48:36 +0000
ROA not before:           Wed 12 Jul 2023 18:43:36 +0000
ROA not after:            Wed 10 Jul 2024 18:48:36 +0000
asID:                     270266
IP address blocks:        200.115.106.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b3:11:89:e3:0d:14:2f:04:a1:7e:6a:42:bb:45:b6:91:4e:8a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45F747618D7571B192189E9EE75F2D047A71B705
        Validity
            Not Before: Jul 12 18:43:36 2023 GMT
            Not After : Jul 10 18:48:36 2024 GMT
        Subject: CN=F6D80DB16FF2F055DF8418569E2723F41615300F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:3a:87:81:fb:1e:e3:5b:5f:6b:d2:0b:6b:
                    42:09:bc:bb:c4:65:3d:46:60:e2:61:ea:0f:a6:cb:
                    65:4f:9b:8b:91:09:2f:17:30:7c:15:21:39:af:a5:
                    9c:e5:fc:d7:10:9a:ab:72:8b:48:b3:1c:a2:4b:ca:
                    80:fa:2d:4c:6f:b1:67:a2:56:60:a3:39:07:2d:9f:
                    2a:fb:e5:a5:3a:1c:6d:e6:67:39:d2:36:2e:bf:d4:
                    ae:d3:b3:96:36:7a:16:ca:94:c6:cd:e7:31:bd:ea:
                    06:ab:d4:b0:a9:b4:ba:51:35:3f:9e:d8:9f:c6:77:
                    14:f2:23:5c:cb:b1:62:44:71:69:c2:a2:54:dc:f6:
                    48:13:79:96:cc:a6:bc:a4:84:a7:ff:07:e6:a6:31:
                    9e:b6:78:8c:67:79:06:dc:71:62:ff:f6:69:8c:3b:
                    30:16:c5:2a:59:ed:f3:a1:4c:b1:69:02:e0:c3:da:
                    c6:c5:92:dc:d6:d3:24:e3:f0:b2:c0:37:eb:7d:13:
                    01:fd:9b:a6:e1:87:ee:e0:54:27:79:e5:fa:75:03:
                    1d:63:b6:52:8b:ed:f1:2f:a0:ea:3e:71:29:d0:88:
                    c1:07:f6:00:b2:8c:43:ba:5b:fb:6a:46:de:e5:b4:
                    ac:83:01:3a:28:ee:52:5d:2c:6a:b7:c7:ed:e9:33:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D8:0D:B1:6F:F2:F0:55:DF:84:18:56:9E:27:23:F4:16:15:30:0F
            X509v3 Authority Key Identifier:
                keyid:45:F7:47:61:8D:75:71:B1:92:18:9E:9E:E7:5F:2D:04:7A:71:B7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/45F747618D7571B192189E9EE75F2D047A71B705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/45F747618D7571B192189E9EE75F2D047A71B705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/0/3230302e3131352e3130362e302f32332d3233203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:d7:3c:a9:98:aa:8e:02:2b:52:d9:5f:21:b6:ac:44:ac:
         13:ac:37:dc:63:6e:89:b3:f8:04:46:51:fe:1e:1a:2d:2f:97:
         4e:a0:61:48:12:e6:90:8e:3a:65:dc:8d:cb:05:66:6b:17:34:
         81:a4:e4:8e:5b:e1:e8:0a:a0:d7:9e:c3:d8:e4:79:04:52:6e:
         bd:a8:93:32:5a:f9:12:e4:b1:24:b2:7a:20:a5:d8:5a:be:bb:
         a4:ab:39:21:86:4f:35:6f:04:50:9b:8e:d2:d7:a3:61:97:d8:
         4f:c3:c3:20:f1:e5:d4:72:3d:79:d5:58:f8:22:98:d3:b9:76:
         6d:07:f1:e6:34:d5:d4:03:d4:dd:71:d1:66:9d:a3:f0:7b:71:
         69:04:00:50:01:b5:80:c2:93:e4:ef:a8:39:41:ac:7f:92:90:
         d9:c1:f3:db:ae:32:2b:1e:34:5d:9e:aa:af:86:b6:2c:42:e0:
         7e:08:61:c1:23:36:ef:0e:ab:df:78:66:1e:04:7b:28:61:ec:
         76:8a:36:4c:f4:9d:55:6d:52:7a:ed:2c:ed:67:b6:b1:38:17:
         59:7a:28:05:04:e7:3a:a0:b8:2a:9e:d2:28:f1:ee:a6:78:f4:
         02:58:08:c8:bb:e8:5d:4d:4b:ba:e8:f1:9b:fa:51:f8:a0:ae:
         eb:8f:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 16:34:26 2023 by rpki-client on console-fra.rpki-client.org