Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa
File:                     3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa (raw, json)
Hash identifier:          Fo+o707GpIyJAF5RwnqAtEv4xagr48H9xNXkMhdMHGM=
Subject key identifier:   78:9D:5D:69:7A:1A:23:A7:5D:4B:4E:50:28:09:2E:FF:A5:3C:87:1A
Certificate issuer:       /CN=DC049CCDCC417B7071369106C6F115AD908A6D43
Certificate serial:       5011558646286403F08DDB37FD34AA83C001B03E
Authority key identifier: DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa
Signing time:             Fri 06 Sep 2024 18:56:21 +0000
ROA not before:           Fri 06 Sep 2024 18:51:21 +0000
ROA not after:            Fri 05 Sep 2025 18:56:21 +0000
asID:                     270885
IP address blocks:        200.115.70.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:11:55:86:46:28:64:03:f0:8d:db:37:fd:34:aa:83:c0:01:b0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC049CCDCC417B7071369106C6F115AD908A6D43
        Validity
            Not Before: Sep  6 18:51:21 2024 GMT
            Not After : Sep  5 18:56:21 2025 GMT
        Subject: CN=789D5D697A1A23A75D4B4E5028092EFFA53C871A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3d:8a:2f:c0:92:c8:02:4d:74:cc:ef:f6:1e:
                    60:2f:da:1e:d7:76:f9:27:84:a5:59:1e:88:a2:cd:
                    fa:d2:36:61:5a:3b:43:8a:95:ed:28:87:e3:36:06:
                    6c:09:39:44:45:0c:b9:e4:f5:95:72:20:aa:7e:73:
                    e1:be:cb:01:56:e3:34:59:e9:04:d9:04:e3:41:79:
                    4b:ab:27:7e:32:01:56:f1:30:cf:22:fc:e3:8b:a1:
                    32:1b:c9:41:cf:88:3d:d7:bb:a2:b6:c4:3d:ce:69:
                    c1:f2:5b:c5:b4:8c:b0:9d:ee:5a:87:16:2c:fc:94:
                    f5:39:68:f4:75:02:a0:fe:5e:a7:19:d0:c0:3b:9d:
                    3b:8a:43:81:df:2b:b0:10:ed:e0:39:8b:91:36:72:
                    59:c1:65:d2:42:a8:a9:b4:a2:1e:86:74:1a:62:3b:
                    d4:c9:dc:28:95:6a:b0:4e:4b:2c:fb:8f:8b:56:ae:
                    92:2d:ee:7b:3f:b5:3a:4a:4c:93:bc:5c:13:6e:98:
                    c5:64:a5:49:b5:01:21:05:0b:ed:1b:24:8f:31:17:
                    72:b4:ec:a0:92:56:04:86:bb:b9:7c:96:a9:91:4d:
                    b3:be:9d:1b:ea:79:e7:98:19:5a:5e:2d:73:b0:1b:
                    33:5f:ee:41:ee:76:03:96:29:c1:53:2e:9a:54:42:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:5D:69:7A:1A:23:A7:5D:4B:4E:50:28:09:2E:FF:A5:3C:87:1A
            X509v3 Authority Key Identifier:
                keyid:DC:04:9C:CD:CC:41:7B:70:71:36:91:06:C6:F1:15:AD:90:8A:6D:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/DC049CCDCC417B7071369106C6F115AD908A6D43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC049CCDCC417B7071369106C6F115AD908A6D43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/3230302e3131352e37302e302f32342d3234203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:c1:b7:4c:98:88:31:ab:5f:dd:b5:f6:63:86:17:22:2b:
         98:07:87:10:1b:29:40:dd:95:55:38:b6:78:62:d5:02:10:53:
         49:8f:df:2d:14:c0:b5:6b:07:ea:3e:04:72:78:9a:30:ad:33:
         7f:00:53:f0:c9:2b:9f:cb:a4:fb:4e:df:57:40:b5:83:c5:5a:
         1f:23:b9:99:b3:e1:7e:df:e9:4a:9b:de:cd:cb:a8:cf:20:00:
         3f:b7:32:5c:65:54:fb:16:79:01:0b:17:df:98:4b:68:82:ac:
         a4:03:b2:19:7e:58:38:6a:69:b7:5d:91:19:b0:c9:8b:a8:f4:
         eb:9a:d2:ec:c6:ca:73:09:a0:d0:c1:4b:1d:c1:6d:fd:9f:e9:
         8b:85:a9:b8:d3:85:a1:39:56:f1:81:84:46:d6:c4:03:d1:1b:
         92:af:74:0d:49:73:59:66:e2:b4:74:cb:94:bb:e8:e4:7c:33:
         64:20:c1:af:61:c1:dd:90:b2:9a:b5:11:6d:ef:b5:fd:ba:a7:
         4c:63:34:84:6d:ca:1c:b3:d4:fc:ec:7f:07:77:75:df:6f:aa:
         f0:a4:df:b0:7d:fd:7e:41:77:f8:b4:e5:63:4f:21:cf:b9:ab:
         15:37:93:2f:f2:e0:fe:e0:a5:2f:b2:b7:43:23:18:0a:0f:8d:
         a4:c1:61:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org