Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa
File:                     3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa (raw, json)
Hash identifier:          Y1I3A634nGzmsDo0XY5HKxax8rcE50exyzOZqf6FXaA=
Subject key identifier:   65:84:72:5C:5A:3F:0A:22:1D:AD:87:5E:2E:0E:D1:8F:22:B2:2E:C0
Certificate issuer:       /CN=EA79FBAB9C686CB61DC9B11E8881DF9992262F61
Certificate serial:       6BCB0B0B65A52BD0733EB44C2E0FFA875BC8C761
Authority key identifier: EA:79:FB:AB:9C:68:6C:B6:1D:C9:B1:1E:88:81:DF:99:92:26:2F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa
Signing time:             Thu 04 Apr 2024 00:04:55 +0000
ROA not before:           Wed 03 Apr 2024 23:59:55 +0000
ROA not after:            Thu 03 Apr 2025 00:04:55 +0000
asID:                     270280
IP address blocks:        200.125.172.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cb:0b:0b:65:a5:2b:d0:73:3e:b4:4c:2e:0f:fa:87:5b:c8:c7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA79FBAB9C686CB61DC9B11E8881DF9992262F61
        Validity
            Not Before: Apr  3 23:59:55 2024 GMT
            Not After : Apr  3 00:04:55 2025 GMT
        Subject: CN=6584725C5A3F0A221DAD875E2E0ED18F22B22EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:d2:f8:a0:a9:88:44:d1:b6:8e:75:5e:29:
                    88:95:f8:12:7c:95:da:2d:db:ca:00:28:09:d3:2d:
                    20:17:5d:30:3a:98:16:4b:91:e7:af:9a:92:5b:95:
                    4c:00:6b:77:92:4f:4e:35:3d:6e:d9:ba:bf:dc:b7:
                    30:7f:25:9e:f1:6e:d8:49:fb:f4:12:fd:a8:d2:10:
                    9e:ee:ce:d2:e4:da:7f:cc:b9:d2:00:ab:5e:1b:c5:
                    8e:39:22:92:87:d2:69:72:e1:61:eb:21:59:0a:cd:
                    7a:44:19:bf:90:f6:ab:4a:f2:00:a4:8f:1d:ae:6b:
                    5e:d4:97:8a:c7:d0:06:77:89:51:74:d1:53:05:a2:
                    c6:a6:45:86:e5:0a:2b:be:33:85:23:86:43:d6:1b:
                    55:3b:40:15:8c:15:c7:bf:72:a6:35:67:63:08:6d:
                    79:a5:02:28:6a:00:14:ab:cf:f1:3d:c0:6c:60:1c:
                    ef:f9:30:71:ff:58:fe:10:c3:0f:aa:76:c7:11:bb:
                    32:81:80:3d:8c:a6:42:6f:5d:42:67:79:c1:1b:18:
                    9f:5b:29:4a:1a:d2:66:9a:33:56:1c:b5:e3:0f:20:
                    7a:be:d7:7c:9c:6a:68:ec:cf:76:a5:ca:f5:15:36:
                    78:6b:18:19:64:6a:51:2c:0d:28:52:5a:a9:bc:e6:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:84:72:5C:5A:3F:0A:22:1D:AD:87:5E:2E:0E:D1:8F:22:B2:2E:C0
            X509v3 Authority Key Identifier:
                keyid:EA:79:FB:AB:9C:68:6C:B6:1D:C9:B1:1E:88:81:DF:99:92:26:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA79FBAB9C686CB61DC9B11E8881DF9992262F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/2/3230302e3132352e3137322e302f32322d3234203d3e20323730323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:66:90:13:3d:03:37:13:b6:b0:3c:72:36:af:bf:85:20:
         05:1c:ad:20:5e:5a:c5:bf:d0:31:33:96:61:3a:cc:63:dc:59:
         2e:a8:b8:4f:4e:5c:a1:df:c4:e2:01:c6:a4:4f:1a:d1:86:45:
         52:04:f4:ff:98:01:73:7f:eb:24:12:7d:0c:6a:58:cd:93:68:
         6d:3f:d6:c4:0f:84:9d:8f:a7:d3:b0:bd:d6:55:ca:ab:c3:f6:
         6c:a2:d9:6e:c3:6e:e3:16:27:b6:8d:0b:27:42:4c:bc:38:02:
         cc:71:e7:9b:1e:c9:e3:ca:bc:a4:dd:92:4a:fe:07:c9:60:4b:
         4b:d3:ca:29:2e:e0:e7:d8:d8:56:46:45:10:6f:33:48:7b:6e:
         d6:19:92:4a:09:3c:62:24:98:ba:b4:a6:30:8f:a2:9a:28:8b:
         9c:30:9b:02:94:cb:59:df:83:01:a2:28:6b:e0:f6:c3:35:8b:
         16:67:17:94:94:53:f5:9d:7b:00:9a:77:eb:75:9c:77:4f:e4:
         46:ce:34:44:1b:99:a5:f4:04:3d:4a:4f:6d:d4:bd:8f:94:fa:
         0f:68:25:dd:b1:51:9b:92:4c:75:b4:a3:e6:56:66:88:d9:84:
         3e:35:94:ea:ff:94:2d:a1:2c:08:d5:7f:9d:b4:40:67:d5:c8:
         07:a7:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 00:38:31 2024 by rpki-client on console-ams.rpki-client.org