Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa
File:                     3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa (raw, json)
Hash identifier:          U58ugKTG5pvsn0ZmfouK2RaIdH2hfeUETcNnmVza8ig=
Subject key identifier:   8C:44:C3:E6:B6:7B:BE:7A:DC:BF:76:F1:02:AA:26:4F:54:55:1C:63
Certificate issuer:       /CN=ACF906D660552AF607C868FA54B1B6ED9ECEC67F
Certificate serial:       23DD72B2A48C7C9D134D70A78F405A99C22A0FE6
Authority key identifier: AC:F9:06:D6:60:55:2A:F6:07:C8:68:FA:54:B1:B6:ED:9E:CE:C6:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa
Signing time:             Fri 20 Sep 2024 18:41:09 +0000
ROA not before:           Fri 20 Sep 2024 18:36:09 +0000
ROA not after:            Fri 19 Sep 2025 18:41:09 +0000
asID:                     270444
IP address blocks:        200.26.252.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:72:b2:a4:8c:7c:9d:13:4d:70:a7:8f:40:5a:99:c2:2a:0f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF906D660552AF607C868FA54B1B6ED9ECEC67F
        Validity
            Not Before: Sep 20 18:36:09 2024 GMT
            Not After : Sep 19 18:41:09 2025 GMT
        Subject: CN=8C44C3E6B67BBE7ADCBF76F102AA264F54551C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:4c:1a:0b:64:dc:fc:72:8d:81:43:56:4a:
                    4d:9f:04:70:56:f6:a3:73:c3:9a:a2:47:04:4f:f5:
                    3b:a6:ee:4b:32:9b:c3:52:a0:f7:e3:97:52:e5:d7:
                    70:23:2c:03:cc:74:53:a0:e8:9a:54:fe:8f:87:a6:
                    c4:74:cd:29:4c:c9:b0:2d:4f:db:84:10:e8:5c:44:
                    91:7f:56:e6:64:fc:03:af:da:60:29:57:df:e4:80:
                    39:9b:ef:8e:d8:59:8f:9d:4b:20:c2:7e:37:51:4b:
                    e3:ba:79:d6:57:cb:90:32:b7:60:85:db:6b:9c:00:
                    16:e0:cc:69:8d:c4:7a:0d:fe:1a:fa:04:10:8c:06:
                    4b:ed:77:e9:63:e1:e3:63:95:45:25:23:5d:95:f3:
                    26:a2:e0:c8:9d:07:2f:cf:50:9b:a4:7f:50:9b:99:
                    d3:db:0f:5e:ff:d2:c4:0a:ad:65:37:6f:78:20:d8:
                    e9:16:22:3b:37:2b:b5:c0:51:aa:b8:93:51:98:fa:
                    3e:63:c5:6a:1a:65:38:37:a1:f5:47:68:69:be:d0:
                    d0:78:5a:72:07:28:0c:b9:c3:21:1d:c5:14:b0:22:
                    f4:74:9f:03:a6:4f:08:d4:49:a4:61:0c:ea:b7:f0:
                    c6:d0:85:fd:86:73:1d:20:63:5f:be:a6:b7:f7:e5:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:C3:E6:B6:7B:BE:7A:DC:BF:76:F1:02:AA:26:4F:54:55:1C:63
            X509v3 Authority Key Identifier:
                keyid:AC:F9:06:D6:60:55:2A:F6:07:C8:68:FA:54:B1:B6:ED:9E:CE:C6:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF906D660552AF607C868FA54B1B6ED9ECEC67F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9uwvfcSqnyJdiSniapQq5CqEvyEBMvDrVMQW3w6ob2m/0/3230302e32362e3235322e302f32322d3332203d3e20323730343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:53:b0:24:63:24:7f:c7:2e:79:27:3d:4d:67:2a:67:58:
         96:58:64:d6:74:43:92:23:a3:19:be:ba:6f:8a:7b:92:3a:9d:
         39:a5:30:4b:c7:5d:6d:56:85:85:18:4c:a6:e9:87:b8:b6:86:
         c8:04:3d:bd:b7:8d:06:c6:e4:fa:cf:e8:9d:a8:31:d2:4f:10:
         a5:70:e1:0b:72:aa:83:24:f8:76:fb:c0:5d:70:8f:04:aa:3b:
         0e:5f:ce:05:c5:86:a2:c7:38:d7:96:3a:a6:5f:f3:f6:81:ec:
         2d:ff:c7:eb:03:b8:69:05:7b:79:b0:f3:95:f1:92:e0:30:be:
         28:79:39:28:f7:a2:3c:a1:8d:20:dd:9b:82:b3:08:ff:aa:e0:
         5f:e9:11:37:30:cb:9f:41:fe:2a:de:92:18:b5:21:5a:65:ba:
         37:e1:c8:2f:21:6a:0f:c3:6f:f1:a8:74:26:4f:e2:5b:07:44:
         6b:29:f9:3d:68:f8:e9:e3:5f:5e:24:19:3d:b6:a0:2f:31:97:
         76:11:6f:00:be:60:62:8e:52:6e:8c:d6:d9:2a:a4:69:83:e5:
         fe:44:3a:20:96:6f:86:11:4a:df:a2:af:42:af:39:06:a4:2a:
         5f:55:50:b3:45:67:9a:a0:6a:ed:8f:eb:af:16:85:f1:22:d2:
         3a:e8:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 16:56:53 2024 by rpki-client on console-fra.rpki-client.org