Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/3230302e35332e342e302f32322d3234203d3e20323730323633.roa
File:                     3230302e35332e342e302f32322d3234203d3e20323730323633.roa (raw, json)
Hash identifier:          aAhEWbvIDyY3uwetYIRctlaICRUlx8TJq6ucpeKjmrk=
Subject key identifier:   F3:F1:3F:B7:E0:30:D0:2A:86:99:3B:C4:8F:9D:99:D3:BA:18:0D:CD
Certificate issuer:       /CN=CC08DC41D500DFB56DD55261F3D06CA5C6495ED4
Certificate serial:       2836146508E121F1DC480FF7D97E15E8BA04D271
Authority key identifier: CC:08:DC:41:D5:00:DF:B5:6D:D5:52:61:F3:D0:6C:A5:C6:49:5E:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/3230302e35332e342e302f32322d3234203d3e20323730323633.roa
Signing time:             Thu 04 Apr 2024 15:04:54 +0000
ROA not before:           Thu 04 Apr 2024 14:59:54 +0000
ROA not after:            Thu 03 Apr 2025 15:04:54 +0000
asID:                     270263
IP address blocks:        200.53.4.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:36:14:65:08:e1:21:f1:dc:48:0f:f7:d9:7e:15:e8:ba:04:d2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC08DC41D500DFB56DD55261F3D06CA5C6495ED4
        Validity
            Not Before: Apr  4 14:59:54 2024 GMT
            Not After : Apr  3 15:04:54 2025 GMT
        Subject: CN=F3F13FB7E030D02A86993BC48F9D99D3BA180DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:27:f9:a2:a5:f8:8d:a0:12:f3:43:50:7f:
                    ed:d4:ad:d6:51:fc:4e:ea:88:4e:dd:a2:da:35:df:
                    46:4f:1e:38:e2:7f:b2:c8:72:f6:df:54:9c:30:39:
                    4f:63:92:a3:bf:3c:42:48:0a:3e:44:42:7c:52:ae:
                    58:90:05:ad:13:93:b2:de:dd:fa:01:e7:78:94:b2:
                    0d:89:52:24:bf:ff:fd:a2:c8:e5:4f:6b:9b:8f:ae:
                    58:63:fd:d9:f7:69:bf:ff:79:bc:34:dd:6f:39:ec:
                    87:50:fb:32:5f:bc:24:47:ef:98:09:4f:f4:26:36:
                    d3:8a:f9:37:a7:8a:8f:2b:02:de:99:9d:bd:22:6d:
                    58:6e:5c:8c:c6:e6:08:6d:60:fe:75:5e:99:02:7f:
                    33:62:61:82:2f:ee:17:0a:f5:c8:73:d0:82:22:92:
                    c2:83:bb:bd:e7:0d:59:14:58:50:23:19:ba:4a:58:
                    f1:d0:70:d1:74:55:9e:b5:ea:db:41:20:49:59:e4:
                    29:14:6b:19:83:b2:44:07:fb:12:21:91:87:5a:12:
                    2e:e9:ed:f1:d5:81:9c:df:cd:1e:24:7d:bd:04:96:
                    7d:37:71:24:2e:1c:45:96:0a:6d:ca:0f:de:2a:97:
                    bd:6c:3d:41:a8:5b:1c:7f:cd:ff:e1:82:0b:32:5c:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:3F:B7:E0:30:D0:2A:86:99:3B:C4:8F:9D:99:D3:BA:18:0D:CD
            X509v3 Authority Key Identifier:
                keyid:CC:08:DC:41:D5:00:DF:B5:6D:D5:52:61:F3:D0:6C:A5:C6:49:5E:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC08DC41D500DFB56DD55261F3D06CA5C6495ED4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/838cDPwYJEZKbGjLSoA88xwRC7Y9NutRtnLvV1ZUJmzx/1/3230302e35332e342e302f32322d3234203d3e20323730323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:fd:87:52:03:2f:18:1b:c2:bf:98:40:b1:56:21:75:d0:25:
         33:e2:fc:35:40:88:37:f4:60:25:28:6c:45:a6:3e:20:a9:42:
         c4:f0:58:70:0e:b3:75:b7:4d:bf:24:0f:23:01:36:cc:2d:07:
         75:18:04:d3:8b:f8:45:6a:19:73:ed:5e:b4:4c:17:4b:27:5c:
         b7:bb:c0:6b:32:a3:d7:9e:aa:ec:35:19:bd:6a:f0:4f:77:c3:
         e9:71:6c:fd:cf:6c:13:cd:1f:94:c8:a5:57:af:b7:0f:36:91:
         59:0e:de:e6:1d:07:44:ad:ed:b2:f7:5a:59:d6:4f:8c:c2:76:
         2b:80:14:6c:fd:0c:eb:8a:7e:7c:a0:ef:bc:0e:80:66:a1:a8:
         24:a9:a0:08:9b:6e:22:9d:66:87:90:41:42:01:ac:50:20:5b:
         08:37:91:b3:aa:38:b0:0f:72:b8:7c:6a:0d:ba:9d:41:a5:75:
         11:09:48:5c:b0:d0:ae:c6:c1:94:7f:6a:05:ea:54:b1:ad:22:
         90:3c:8d:93:6e:fc:17:5e:e2:05:6b:72:50:76:97:01:96:f4:
         90:ae:81:75:a4:82:46:a9:8b:61:98:1c:ab:e5:75:93:2d:96:
         8d:bc:81:d3:a8:48:cb:a5:db:15:69:6b:fd:1b:47:13:47:f9:
         81:41:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 13:50:22 2024 by rpki-client on console-fra.rpki-client.org