Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e36382e302f32342d3234203d3e20323730383835.roa
File:                     3230302e3131352e36382e302f32342d3234203d3e20323730383835.roa (raw, json)
Hash identifier:          U5957eG/sICIZ1xu5N8d31lyLb8p/gl/43Y1a5XvDiE=
Subject key identifier:   D7:7A:5C:66:50:0B:79:7B:77:A9:10:35:4D:49:6D:4A:46:00:29:4C
Certificate issuer:       /CN=DC049CCDCC417B7071369106C6F115AD908A6D43
Certificate serial:       491E3F005928BBDEDDF46B11BD5A481A1B52189B
Authority key identifier: DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e36382e302f32342d3234203d3e20323730383835.roa
Signing time:             Fri 06 Sep 2024 18:56:08 +0000
ROA not before:           Fri 06 Sep 2024 18:51:08 +0000
ROA not after:            Fri 05 Sep 2025 18:56:08 +0000
asID:                     270885
IP address blocks:        200.115.68.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1e:3f:00:59:28:bb:de:dd:f4:6b:11:bd:5a:48:1a:1b:52:18:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC049CCDCC417B7071369106C6F115AD908A6D43
        Validity
            Not Before: Sep  6 18:51:08 2024 GMT
            Not After : Sep  5 18:56:08 2025 GMT
        Subject: CN=D77A5C66500B797B77A910354D496D4A4600294C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:5d:e2:83:15:c8:1d:bc:17:70:87:e4:50:
                    b6:84:96:0a:8a:0e:b1:59:43:fb:71:52:72:e6:06:
                    ea:1d:ca:e6:1f:bd:6b:d4:c5:ad:24:55:1c:63:39:
                    26:56:a6:ad:85:47:07:3c:74:32:29:4c:9f:b5:d3:
                    f5:22:f5:b3:e0:1b:47:ba:83:00:a0:cd:ec:ae:a8:
                    f2:4c:4a:30:7a:7f:3c:c2:b1:84:1b:71:38:ca:c4:
                    98:0d:f3:39:ff:58:f6:78:25:26:a4:c9:a2:53:b3:
                    1e:46:2f:e4:e7:1e:07:1e:d3:4d:b2:fc:64:14:5f:
                    77:97:70:c5:39:2a:02:5e:35:7a:42:ed:d6:eb:eb:
                    c9:05:b7:02:ba:46:b9:b9:96:c7:2d:f1:74:ee:d6:
                    63:99:4c:9a:fb:32:59:78:e9:4d:ff:01:00:a5:e1:
                    dd:96:47:43:c4:a9:d8:52:77:ed:f0:4d:b9:26:dc:
                    3a:f6:95:d3:1f:b4:3d:8b:32:41:c7:2c:9d:bb:6b:
                    07:ad:ad:d7:66:73:16:d9:54:84:3f:da:2d:5e:5b:
                    46:4b:74:e4:1a:94:01:69:b6:da:9a:be:a3:5e:e4:
                    2f:d2:56:8a:97:d6:be:c8:92:af:c7:11:2e:1b:b9:
                    5b:86:dc:00:6c:37:f4:65:7d:e0:8a:ec:a8:bb:90:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:5C:66:50:0B:79:7B:77:A9:10:35:4D:49:6D:4A:46:00:29:4C
            X509v3 Authority Key Identifier:
                keyid:DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/DC049CCDCC417B7071369106C6F115AD908A6D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e36382e302f32342d3234203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:2b:22:32:86:6e:81:ad:27:f0:25:08:78:3c:81:a7:62:
         9b:20:2a:f3:16:6d:ca:66:27:13:72:7b:2d:80:f4:21:e7:0c:
         4d:4b:43:61:29:59:84:dc:d8:0d:58:33:72:9b:8c:dd:9d:c8:
         17:97:1d:c0:cc:59:bc:65:48:03:5d:dc:9a:4e:5a:28:6d:87:
         ee:26:10:04:49:3b:3d:6f:55:87:7f:ec:2b:84:4f:ee:7c:0b:
         50:bb:e5:a6:92:11:61:89:57:fb:f5:2f:f7:73:26:7c:c6:3e:
         e8:da:fd:ce:ca:55:d1:f3:fc:c3:83:23:14:4d:4a:bb:da:df:
         96:1b:95:d0:31:b8:87:85:f2:67:8f:14:fe:b1:06:58:d1:87:
         b3:5d:dc:da:51:72:ee:5d:e3:7b:64:c7:ab:c0:0d:19:8b:ae:
         a9:60:e7:c4:d9:d3:2d:34:7f:23:f3:de:82:2d:3f:79:99:c3:
         bb:8c:87:55:cf:ba:dd:5c:4f:2a:13:63:39:69:b2:6b:90:e8:
         3f:f6:81:30:91:b6:a4:4f:f9:ab:6a:7e:c2:29:2a:84:9a:23:
         e0:8a:26:c4:7e:22:31:4f:a9:0c:6c:c5:48:82:83:1f:98:69:
         1c:3b:a3:fd:29:00:6a:3b:04:3f:14:0d:2a:78:c4:13:e8:ab:
         3f:48:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 18:31:04 2024 by rpki-client on console-ams.rpki-client.org