Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
File:                     3230302e35322e31362e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          a4Coat0zDfw+xqctTdC7CZCjM9XW//MC82GCeFS1r2Q=
Subject key identifier:   0C:CC:C9:46:B8:08:46:26:4F:37:50:CC:F8:0A:54:A6:90:A8:21:CF
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       2C8B2A36F307A17CEA862FB2D226C1BF4D5E9D81
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:18 +0000
ROA not before:           Thu 31 Oct 2024 17:09:18 +0000
ROA not after:            Thu 30 Oct 2025 17:14:18 +0000
asID:                     262659
IP address blocks:        200.52.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8b:2a:36:f3:07:a1:7c:ea:86:2f:b2:d2:26:c1:bf:4d:5e:9d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:18 2024 GMT
            Not After : Oct 30 17:14:18 2025 GMT
        Subject: CN=0CCCC946B80846264F3750CCF80A54A690A821CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:17:fd:92:63:f8:d3:1d:ca:5d:5a:90:c0:
                    42:2d:97:8f:4e:6c:02:57:1c:a7:d5:d6:7a:8c:eb:
                    e3:92:ff:d5:b6:fa:87:b5:3b:6b:6b:bc:2c:dc:73:
                    2b:98:26:69:1f:04:08:d2:ee:46:c1:6f:dc:11:e6:
                    19:40:f6:11:9a:79:40:02:aa:96:6b:ae:3d:c4:4f:
                    3d:5b:97:14:a5:4b:77:41:a1:5f:c3:3e:87:01:7a:
                    8f:ea:4d:56:ea:7b:9b:37:66:d8:d1:f2:f2:a8:0a:
                    a1:4c:1b:f5:97:c0:39:3d:ef:03:47:2e:97:b2:fe:
                    b5:61:2f:be:1e:31:03:e8:e5:c9:b0:a8:5a:2f:ff:
                    a2:ad:91:df:9d:1b:27:ba:26:24:e1:64:b1:90:2d:
                    6e:61:f1:40:5b:15:66:ae:c1:04:25:21:b0:7c:23:
                    ee:8c:71:26:21:51:1c:93:a9:2e:a4:ea:02:98:a3:
                    e2:ae:94:c7:b9:ae:de:0d:c0:9b:48:3a:39:56:f7:
                    e4:ac:d0:77:0d:e2:1a:34:d1:e5:12:06:13:75:b9:
                    e7:b1:94:37:dd:92:51:ce:4e:a6:21:7e:14:a6:5e:
                    b8:75:d9:55:20:30:4e:ea:56:9f:43:ee:e8:e2:d2:
                    86:58:71:5e:75:cc:bc:44:de:26:16:f3:b8:13:dc:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CC:C9:46:B8:08:46:26:4F:37:50:CC:F8:0A:54:A6:90:A8:21:CF
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3230302e35322e31362e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:24:f7:15:87:75:4c:84:81:04:80:38:4b:04:ac:56:b8:
         40:1f:c8:36:e3:ea:98:44:8c:1c:6e:3b:64:e9:ba:8f:ed:ba:
         85:c9:2f:24:f1:e6:00:30:88:bb:7d:28:aa:ae:2f:3f:0a:b0:
         d5:c2:89:c5:be:ea:45:ec:f8:ac:a8:83:43:09:72:a3:d9:b2:
         6e:cd:35:d0:3d:fc:e2:8c:90:e6:88:c7:ab:34:4a:43:e2:b3:
         37:52:c6:bb:97:60:e8:13:1f:67:8d:45:2b:d2:48:9a:da:11:
         ef:f0:de:b0:aa:67:ab:02:a6:c9:d9:fb:df:32:b9:e3:32:ee:
         c6:9f:68:c2:fc:6d:14:a2:9c:ba:08:24:4d:69:f7:76:c3:98:
         fc:d5:a9:d6:f4:7b:a7:42:c1:9d:a5:10:af:f7:a6:a6:18:e2:
         78:2c:1a:fd:54:ad:91:4a:d0:c0:be:43:d1:06:19:d0:16:e5:
         18:1e:d0:a8:d9:2b:b5:6d:61:06:a5:5c:62:56:d0:30:09:87:
         1d:15:36:57:d8:10:0e:01:e1:59:1f:94:41:a3:b7:08:02:c4:
         8f:b2:42:b6:07:37:e9:d2:3d:3e:b8:5a:76:4e:51:1a:38:98:
         ba:14:d6:36:b6:89:6d:84:66:91:04:41:66:4e:00:8f:03:48:
         07:51:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org