Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa
File:                     3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          YezTCxg8n9fIm4k3bks7T5Venb4ED6XN/FdkHoojx9s=
Subject key identifier:   2D:AA:71:26:30:5F:32:D1:BF:86:63:F9:7C:79:B7:40:B6:1C:C9:FE
Certificate issuer:       /CN=F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2
Certificate serial:       0318CE6F0AAE793A237C3CB853EF8CDF0DA05F99
Authority key identifier: F0:B9:44:31:6C:D1:E1:E6:EB:4D:12:8F:A5:E4:1C:A2:9C:A9:4C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa
Signing time:             Fri 04 Oct 2024 20:41:48 +0000
ROA not before:           Fri 04 Oct 2024 20:36:48 +0000
ROA not after:            Fri 03 Oct 2025 20:41:48 +0000
asID:                     265300
IP address blocks:        200.125.176.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:18:ce:6f:0a:ae:79:3a:23:7c:3c:b8:53:ef:8c:df:0d:a0:5f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2
        Validity
            Not Before: Oct  4 20:36:48 2024 GMT
            Not After : Oct  3 20:41:48 2025 GMT
        Subject: CN=2DAA7126305F32D1BF8663F97C79B740B61CC9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:63:ad:08:2f:11:a3:f7:ee:e9:f0:4f:b4:
                    a3:59:7c:b9:c8:e3:fe:0a:40:03:00:34:f6:8c:7b:
                    2f:28:1f:71:cf:56:e6:8f:5d:f7:3a:54:73:46:71:
                    a3:80:0c:02:33:f6:54:17:70:29:9e:22:85:fb:67:
                    cf:39:c4:1f:da:14:4b:22:ce:36:23:60:a6:ae:61:
                    56:14:c0:92:fa:da:3e:d4:17:ff:0f:6a:e9:91:38:
                    4c:a8:35:cd:06:4e:2a:91:ae:d1:ce:5a:b0:d6:45:
                    10:41:9c:d6:e6:ae:04:83:1f:f3:71:5e:c6:0b:f7:
                    34:0c:a4:64:0a:93:76:2a:52:dd:f8:ab:67:91:f7:
                    14:4a:f4:ac:53:35:bd:31:ef:64:2d:5d:a0:d9:85:
                    0d:94:81:6e:b3:d9:42:85:65:67:f3:f5:30:85:26:
                    fc:e3:cc:65:8f:e3:13:ff:11:b1:8f:e4:64:f8:e2:
                    b2:74:a1:74:d3:57:02:4b:23:46:9e:d0:b5:1a:98:
                    d5:7c:43:5e:39:ad:57:98:24:7b:1c:48:01:b8:de:
                    13:30:0d:2f:f0:be:c4:18:e2:fb:1c:d3:b9:e3:7a:
                    e8:02:67:fb:00:85:7f:08:1d:43:04:fa:14:1f:6f:
                    d5:78:ba:4d:0f:a8:64:f5:7c:f5:0b:71:19:1c:f5:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AA:71:26:30:5F:32:D1:BF:86:63:F9:7C:79:B7:40:B6:1C:C9:FE
            X509v3 Authority Key Identifier:
                keyid:F0:B9:44:31:6C:D1:E1:E6:EB:4D:12:8F:A5:E4:1C:A2:9C:A9:4C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3132352e3137362e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:97:f5:7c:78:ed:40:ed:de:d1:b0:c6:b8:f6:6c:a8:ab:31:
         66:60:8f:aa:2b:68:d7:c4:cf:52:db:3f:10:47:4d:9d:f5:49:
         d1:5f:b6:c3:53:c8:1b:72:41:06:c4:5e:0b:3d:23:51:db:e9:
         fc:ab:f1:9d:e6:ff:21:71:00:0f:fe:fb:14:7e:2f:3b:15:a2:
         3b:fd:ba:9f:bd:eb:c4:51:25:04:20:a8:e8:39:24:da:e5:78:
         9d:f2:3a:1a:0c:cb:1a:29:8f:ac:09:5f:f2:a4:66:5e:ba:15:
         a6:50:20:90:91:c3:4a:13:e0:48:14:69:82:50:ca:8f:81:81:
         0d:66:58:4f:a8:5e:7f:1f:10:86:ed:04:68:64:5b:c0:19:f7:
         fe:c8:96:95:d5:78:a3:81:6e:80:f9:fd:c8:7a:31:36:95:d8:
         e3:c5:40:8e:e2:96:c6:aa:f6:53:bc:2f:f4:13:ec:2e:e8:ec:
         fa:1c:e9:db:a6:91:33:15:78:b5:f7:eb:83:ee:32:89:77:04:
         6f:00:29:da:60:77:0d:bc:2b:62:49:9c:9b:8e:a9:26:b4:22:
         48:ae:67:94:0a:cc:03:7e:df:5f:af:f6:7e:05:a0:b8:4e:45:
         9c:48:01:ad:4f:2d:22:c4:d2:18:fe:9d:7b:c1:a5:81:df:36:
         48:ad:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 21:58:14 2024 by rpki-client on console-ams.rpki-client.org