Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
File:                     3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa (raw, json)
Hash identifier:          UWfdH8MbcHfE6EWK3jMB0JbY5iev+ZqxvX0ggMVuL88=
Subject key identifier:   F4:CA:EA:D2:19:88:F0:CA:05:3D:86:49:A3:02:36:4C:1A:CC:D8:76
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       36F9E7944E30FA0EF75C939756FC8E71222D67CF
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:30 +0000
ROA not before:           Thu 04 Apr 2024 23:04:30 +0000
ROA not after:            Thu 03 Apr 2025 23:09:30 +0000
asID:                     270266
IP address blocks:        200.115.107.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f9:e7:94:4e:30:fa:0e:f7:5c:93:97:56:fc:8e:71:22:2d:67:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:30 2024 GMT
            Not After : Apr  3 23:09:30 2025 GMT
        Subject: CN=F4CAEAD21988F0CA053D8649A302364C1ACCD876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:70:1f:7f:30:f0:87:a6:70:c7:bb:1f:c1:
                    6b:39:ab:f2:0b:ff:6d:c6:2c:ab:33:2e:2f:cf:a0:
                    e4:5b:42:65:ec:dc:4d:a2:56:f2:39:f4:51:c1:79:
                    33:b4:89:9f:b1:8e:2a:58:98:92:29:01:3f:80:12:
                    a6:7d:2c:ee:a8:d2:6c:36:a2:83:97:7e:47:02:6d:
                    93:9e:52:af:10:7f:ba:bc:fd:46:15:72:0d:ac:eb:
                    06:cf:3a:84:50:14:6c:fd:63:fa:80:47:ee:43:2a:
                    29:3c:be:38:2a:ce:95:ef:1a:69:2d:a9:b1:73:46:
                    4b:fd:3a:b1:b1:23:75:24:cc:c6:fc:64:13:aa:34:
                    b7:b3:c6:a7:06:6a:fb:89:0c:c5:ca:ad:26:c8:a1:
                    b5:3b:9b:d5:76:44:74:98:7b:01:7c:de:d5:64:29:
                    34:9e:c3:1e:e0:69:6e:5a:0e:2c:7e:83:a8:83:33:
                    52:d0:66:12:11:b3:22:50:b4:0c:5e:dd:29:8c:12:
                    f2:f0:c9:a3:af:30:85:78:31:63:a5:24:fd:eb:e1:
                    6e:7b:c7:99:22:73:10:46:c5:53:d0:e8:a0:38:53:
                    82:2e:91:e2:50:cd:d9:40:30:9a:ef:5b:1e:00:bc:
                    db:54:bf:36:5d:8c:8e:50:9f:a1:9a:13:86:f8:35:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CA:EA:D2:19:88:F0:CA:05:3D:86:49:A3:02:36:4C:1A:CC:D8:76
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130372e302f32342d3234203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:fb:34:a8:27:92:65:9e:52:b0:f0:e7:cd:de:16:23:f5:
         8f:88:40:c0:88:9c:e5:bd:0a:53:f1:ac:52:ef:a6:46:49:25:
         27:6c:9b:c3:a6:b7:fc:f5:65:b4:5e:bd:9e:9c:33:38:74:50:
         98:d6:33:d7:37:f9:4c:18:6b:58:41:80:63:a1:62:40:64:86:
         a7:e0:97:9b:22:4b:11:2d:05:c8:b0:69:4a:c2:05:ea:5f:9d:
         ca:d7:03:65:31:6f:17:5b:68:62:73:b9:e3:f0:18:bf:cb:e4:
         a2:72:f4:fe:cb:24:7b:92:21:71:17:42:cd:e5:19:53:d8:ce:
         50:4a:77:b7:ea:bd:91:b5:78:22:1e:c2:a1:49:7b:82:d0:90:
         b9:42:ae:c1:4a:d6:04:39:b6:ec:d4:2c:9d:1e:0c:2f:0f:a6:
         6b:87:02:1a:b5:14:00:21:a8:28:fb:fc:21:be:f9:d2:7a:5a:
         ff:97:18:79:ad:6c:a3:80:5f:56:6c:ea:18:fc:dd:e4:ba:5b:
         72:a5:6b:f6:23:18:3d:6d:be:9e:cc:c2:36:f0:b0:dc:c0:24:
         bf:3b:d5:a6:fa:1e:6c:8e:52:e9:c6:37:a2:e8:f5:a7:01:61:
         d8:91:83:6f:87:9e:20:7d:86:8a:a9:3f:72:30:42:79:b0:16:
         7a:c6:49:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 07:01:29 2024 by rpki-client on console-fra.rpki-client.org