Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/3230312e3138322e39362e302f32322d3234203d3e20323637353037.roa
File:                     3230312e3138322e39362e302f32322d3234203d3e20323637353037.roa (raw, json)
Hash identifier:          6nqr6ltxw7rnrIu6o5OlnnqKcTopDMv4H7rs5gyn2IU=
Subject key identifier:   A1:EE:61:66:7A:B0:5E:94:69:1D:45:91:28:C9:72:86:75:86:BA:B5
Certificate issuer:       /CN=48E7521FBE2B2A15B1FF27FF7828C2E0997DF652
Certificate serial:       7D56A045EEFB311F437432C5C5B00FA487486BC6
Authority key identifier: 48:E7:52:1F:BE:2B:2A:15:B1:FF:27:FF:78:28:C2:E0:99:7D:F6:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48E7521FBE2B2A15B1FF27FF7828C2E0997DF652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/3230312e3138322e39362e302f32322d3234203d3e20323637353037.roa
Signing time:             Thu 04 Apr 2024 17:26:23 +0000
ROA not before:           Thu 04 Apr 2024 17:21:23 +0000
ROA not after:            Thu 03 Apr 2025 17:26:23 +0000
asID:                     267507
IP address blocks:        201.182.96.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:a0:45:ee:fb:31:1f:43:74:32:c5:c5:b0:0f:a4:87:48:6b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48E7521FBE2B2A15B1FF27FF7828C2E0997DF652
        Validity
            Not Before: Apr  4 17:21:23 2024 GMT
            Not After : Apr  3 17:26:23 2025 GMT
        Subject: CN=A1EE61667AB05E94691D459128C972867586BAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:21:56:e2:70:39:7e:25:c5:2c:43:72:05:
                    8e:1f:7a:b6:37:d5:32:d2:a5:81:5b:b5:6c:cc:aa:
                    89:5e:45:aa:48:98:4c:84:ae:6e:f5:24:6d:a0:98:
                    b6:97:d2:15:24:89:28:1d:6d:23:ac:fb:4f:c5:a2:
                    2f:6a:63:02:c3:51:12:30:12:9f:41:d5:b9:98:42:
                    c8:be:9f:c4:4e:ea:f2:62:ea:12:41:7e:96:d4:25:
                    23:11:0a:2a:16:05:b1:34:13:71:15:a9:ab:6d:14:
                    4b:7e:64:ae:21:42:78:95:72:04:c3:c6:d3:cc:3a:
                    e2:d3:03:91:30:5a:be:35:26:d6:bf:d6:75:aa:c6:
                    a6:10:80:a2:c0:65:31:0e:35:1b:db:74:cf:36:ce:
                    0e:f7:6e:83:6b:2e:c5:df:c8:0f:c2:55:69:6f:99:
                    0a:db:ad:ba:e6:25:b3:78:dc:86:9b:67:c5:9b:35:
                    ca:56:3c:4e:19:9c:ce:17:92:12:d7:08:e7:3f:40:
                    45:d9:7b:d1:9a:50:4f:02:c2:f3:7e:cd:02:53:81:
                    0f:17:77:76:a4:65:55:df:dc:47:0a:70:1c:f9:86:
                    69:e3:29:36:37:06:72:31:05:0b:6b:ed:80:54:c3:
                    bd:ca:a8:80:48:2e:d8:46:e5:51:e8:8e:29:fd:20:
                    bb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EE:61:66:7A:B0:5E:94:69:1D:45:91:28:C9:72:86:75:86:BA:B5
            X509v3 Authority Key Identifier:
                keyid:48:E7:52:1F:BE:2B:2A:15:B1:FF:27:FF:78:28:C2:E0:99:7D:F6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/48E7521FBE2B2A15B1FF27FF7828C2E0997DF652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48E7521FBE2B2A15B1FF27FF7828C2E0997DF652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88HLLXXDradCwoi6R4uSYenoKEv1rXBxmJu8HQnGnZ7C/3/3230312e3138322e39362e302f32322d3234203d3e20323637353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:5c:cc:e8:c4:6c:be:ed:db:9d:26:a4:9b:6d:de:37:f5:
         d7:b9:5f:1a:3a:52:9e:58:31:8d:bf:8e:98:2f:69:00:ba:68:
         07:1e:7f:48:67:06:89:94:5f:75:64:28:74:6e:4f:0f:87:54:
         1d:0c:db:bc:79:78:d2:3d:5c:a8:d6:46:cd:ca:1d:50:48:d7:
         34:78:e0:db:fd:d4:81:72:75:12:50:0c:ea:c2:c1:e6:87:d5:
         cc:47:7f:6f:6a:f2:05:dd:29:dc:1c:3c:65:64:da:64:3d:a8:
         b6:1b:20:98:7b:42:e5:2b:05:a1:ab:53:1c:25:32:5f:e7:24:
         f3:1a:06:3d:de:3d:f6:38:bf:56:f4:a8:03:84:d4:ff:94:25:
         f7:93:6d:a1:72:d7:7f:bb:37:fa:e5:8f:84:5c:d9:3a:29:ae:
         2a:aa:5f:e4:d6:33:bf:46:30:1f:86:69:e0:f3:c3:e4:e2:6c:
         9d:83:54:a8:45:f2:40:f3:02:c9:38:6e:d9:ae:c9:8e:ed:59:
         24:24:9e:c8:29:73:40:c7:47:ef:b4:d0:a4:ea:90:39:f9:a1:
         02:2e:7a:f1:05:b1:57:66:f6:f5:6d:c8:27:57:1b:f2:fa:2f:
         9c:0d:fc:43:a7:f1:90:23:38:27:87:ba:d1:06:8e:98:0d:2c:
         1e:92:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 09:54:05 2024 by rpki-client on console-fra.rpki-client.org