Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          8kG5nwmPuEkn/swzasJSkXJIl74yRAzWoduROgzsVHA=
Subject key identifier:   20:F4:6B:AD:3A:59:B0:E0:13:B6:C4:E2:91:27:60:EF:DE:42:C3:FD
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       69D8A344A3E8D5A98A17D716FEEA347A0C062F11
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa
Signing time:             Thu 04 Apr 2024 00:34:29 +0000
ROA not before:           Thu 04 Apr 2024 00:29:29 +0000
ROA not after:            Thu 03 Apr 2025 00:34:29 +0000
asID:                     61776
IP address blocks:        200.196.136.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d8:a3:44:a3:e8:d5:a9:8a:17:d7:16:fe:ea:34:7a:0c:06:2f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Apr  4 00:29:29 2024 GMT
            Not After : Apr  3 00:34:29 2025 GMT
        Subject: CN=20F46BAD3A59B0E013B6C4E2912760EFDE42C3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:ad:60:f2:13:71:65:a5:03:73:72:95:56:
                    eb:3c:5d:c9:c8:ff:d1:35:b0:be:53:71:41:b3:e5:
                    88:b4:d7:2a:5d:59:b1:04:55:fa:3b:bb:28:b4:6a:
                    14:e0:76:94:d5:e8:15:3d:a3:5f:1e:a1:73:e0:0a:
                    2d:dc:13:28:08:85:df:5f:4a:19:7d:83:af:e3:b2:
                    47:66:17:d2:9f:69:fc:08:03:6e:cd:40:64:cf:da:
                    f1:bc:6b:70:ee:28:0b:f4:b1:fe:a6:53:f6:8f:48:
                    0f:8a:ab:09:b2:d0:7a:cb:9f:00:60:d7:12:88:97:
                    00:5b:0d:d3:0b:84:0e:05:a6:5c:cf:29:12:1c:97:
                    18:80:c3:69:ac:11:fd:04:5b:39:0d:bb:77:3d:db:
                    9b:9b:13:96:72:89:25:87:00:cc:5c:48:76:bd:b6:
                    6b:0b:66:0d:86:fa:a8:28:35:44:d7:63:df:2f:5d:
                    04:8a:ef:47:34:8b:a9:a7:d6:aa:08:a1:54:39:ab:
                    d7:48:c6:27:4a:53:56:30:be:44:9a:6a:da:80:68:
                    4e:6b:78:c6:e4:47:5a:22:34:bd:d6:09:b2:44:b0:
                    8b:0e:00:5c:94:dd:3f:94:5b:fe:f9:df:73:c0:24:
                    35:6e:48:f1:38:3c:db:2d:49:31:d8:08:e7:e3:0f:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:6B:AD:3A:59:B0:E0:13:B6:C4:E2:91:27:60:EF:DE:42:C3:FD
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:d0:a0:c7:c8:6e:38:72:e8:07:7a:ba:e0:03:a5:c5:49:
         1c:ed:8e:a5:1f:e1:7c:12:aa:d3:dc:bc:0a:1b:f0:6b:a5:75:
         3c:26:14:87:23:19:48:b1:9b:d5:9f:bf:98:4a:a9:3b:6d:80:
         e8:ef:7a:8e:ee:58:11:6e:0f:da:30:4e:ad:ec:6c:9a:62:38:
         c8:4e:43:81:61:f3:a2:e9:d5:d8:43:96:58:53:20:c5:69:55:
         64:3c:27:d0:be:79:03:a3:db:c4:eb:bc:15:40:85:0e:93:4e:
         9e:56:1d:a5:97:11:ad:18:6f:b3:18:55:4f:54:da:84:5d:70:
         e2:02:a4:ec:6d:6f:24:c1:46:12:f8:ac:1f:5a:ae:30:16:af:
         c9:fd:80:b2:64:ba:14:86:23:01:d7:2e:c6:12:dc:46:31:39:
         1d:08:b6:a9:3b:04:eb:21:3e:3d:3f:9d:0a:3b:4a:41:4e:79:
         6f:41:d7:55:ae:80:46:77:50:98:e2:18:7d:87:13:5f:a3:0e:
         bf:96:8d:c6:7b:46:55:49:d8:e6:e7:93:ec:dd:64:61:9c:33:
         aa:82:09:22:4e:ea:ad:47:b5:78:4c:a7:6c:d5:45:8d:6b:36:
         a3:6e:11:8f:2d:0e:2b:59:8f:14:6b:76:c6:4d:05:f3:e7:a6:
         3e:02:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 17:50:30 2024 by rpki-client on console-fra.rpki-client.org