Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/3230302e342e3132342e302f32322d3234203d3e20323731343133.roa
File:                     3230302e342e3132342e302f32322d3234203d3e20323731343133.roa (raw, json)
Hash identifier:          jF+RYYASiB0H3O1mf8c0ryp3sq7fi88FIn5WdewMcJ8=
Subject key identifier:   48:D1:91:6E:71:3E:84:AB:42:83:67:F1:19:97:13:AC:6C:23:BF:3E
Certificate issuer:       /CN=DB3BEDB0C3E3A3742D72951E46B5B62CB1B2F528
Certificate serial:       20CB73B1BFAAD9E3EFED3C409BC1F40BE5BC2E91
Authority key identifier: DB:3B:ED:B0:C3:E3:A3:74:2D:72:95:1E:46:B5:B6:2C:B1:B2:F5:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB3BEDB0C3E3A3742D72951E46B5B62CB1B2F528.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/3230302e342e3132342e302f32322d3234203d3e20323731343133.roa
Signing time:             Fri 16 Aug 2024 12:37:01 +0000
ROA not before:           Fri 16 Aug 2024 12:32:01 +0000
ROA not after:            Fri 15 Aug 2025 12:37:01 +0000
asID:                     271413
IP address blocks:        200.4.124.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cb:73:b1:bf:aa:d9:e3:ef:ed:3c:40:9b:c1:f4:0b:e5:bc:2e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3BEDB0C3E3A3742D72951E46B5B62CB1B2F528
        Validity
            Not Before: Aug 16 12:32:01 2024 GMT
            Not After : Aug 15 12:37:01 2025 GMT
        Subject: CN=48D1916E713E84AB428367F1199713AC6C23BF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:9d:db:91:d2:e7:ed:ec:f3:f3:fb:12:bb:
                    88:57:28:62:af:41:19:ee:ad:86:74:15:7b:6c:94:
                    84:f3:6e:ce:09:0b:40:92:12:26:7b:44:6e:11:44:
                    6b:a7:04:a1:7d:5d:bd:6b:ae:c9:83:03:c7:1f:16:
                    fe:53:15:60:81:89:97:c5:cc:65:ce:42:ec:1b:8b:
                    d3:6f:2f:23:58:5d:c8:c1:b7:ad:31:8a:c0:63:80:
                    ad:d4:7a:86:04:56:e9:ed:c7:43:1b:15:e9:db:0f:
                    b5:76:96:48:8e:46:86:b0:c5:5b:e9:ee:ca:17:86:
                    ec:f8:dc:f1:27:0a:83:5e:74:31:9e:01:17:33:c7:
                    e5:71:ee:c4:ed:5b:24:8a:6f:60:1d:60:a6:81:d1:
                    12:a5:4c:1d:6b:6b:a7:28:18:33:05:31:1d:f8:28:
                    9a:0e:cc:94:f3:7f:36:84:5f:b8:3a:5b:3c:c2:8a:
                    3a:32:df:1d:2f:f6:b0:93:89:ea:e0:57:db:f3:13:
                    f7:fc:f7:15:c2:e2:76:b5:6e:70:da:71:67:4b:0a:
                    55:83:43:b8:d3:db:4a:3d:f0:90:0a:e1:80:f6:80:
                    73:34:07:b5:da:98:9e:93:5c:b2:20:ba:b4:82:d8:
                    19:06:bd:4f:24:8e:c2:11:e7:84:d3:8d:b2:2b:f4:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:91:6E:71:3E:84:AB:42:83:67:F1:19:97:13:AC:6C:23:BF:3E
            X509v3 Authority Key Identifier:
                keyid:DB:3B:ED:B0:C3:E3:A3:74:2D:72:95:1E:46:B5:B6:2C:B1:B2:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/DB3BEDB0C3E3A3742D72951E46B5B62CB1B2F528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB3BEDB0C3E3A3742D72951E46B5B62CB1B2F528.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARLsUi4eLLpQr3d2PtQaXHCnCiVdba5EcLNzAcgFgC1F/0/3230302e342e3132342e302f32322d3234203d3e20323731343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:89:1f:21:c8:3f:82:54:fb:c2:e7:18:6b:17:14:11:97:09:
         8d:5f:7d:87:2b:84:2a:7b:bb:fd:b5:8c:a1:38:93:5d:cc:3c:
         33:ce:cb:fc:16:1d:37:6b:cb:9b:98:ce:ce:ac:14:72:e1:2f:
         7f:87:26:e4:90:f4:c2:58:a5:59:58:7a:51:26:48:22:b6:61:
         40:af:61:f6:ae:d0:27:d1:85:4e:b1:66:70:19:65:ae:e5:4b:
         75:b4:ee:52:e9:51:d3:7b:96:ea:ca:99:32:52:f4:da:2c:ae:
         77:c6:85:ef:48:f6:a3:a7:0a:59:33:a1:8f:8f:57:84:2f:04:
         60:13:46:2f:12:9a:58:f9:4a:e7:3b:ea:9f:a8:e8:b2:a8:b8:
         db:40:dd:b9:30:60:7d:fc:61:99:bf:f1:35:a1:67:d5:b1:5f:
         6d:aa:b0:21:6f:3b:6a:20:8e:eb:f9:74:6d:6f:5f:44:c5:be:
         01:e5:7b:86:bd:b3:e0:a6:1c:6a:91:a2:d3:ca:86:62:3b:cf:
         c1:97:9a:4e:02:83:bf:53:bd:51:bb:87:0e:c8:14:77:b3:41:
         20:d7:17:9b:08:c4:b8:02:64:8c:ca:a5:90:5f:6d:45:e6:7e:
         15:d1:78:7c:1d:b4:ae:5b:10:ee:45:a2:02:b1:ad:63:f9:37:
         1e:67:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 09:53:47 2024 by rpki-client on console-fra.rpki-client.org