Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e35302e302f32342d3234203d3e203230393430.roa
File:                     3230312e31362e35302e302f32342d3234203d3e203230393430.roa (raw, json)
Hash identifier:          kKZZvZv0vRQg31O9keO3o332wdT89u9N7ob956pxFCc=
Subject key identifier:   D1:C5:ED:06:60:2D:DE:06:F1:F8:6E:AE:5F:D7:70:C9:BE:05:AF:24
Certificate issuer:       /CN=15E785251DDA610E1934AFED62EF3BD8E021B835
Certificate serial:       30F5DBC9408224BDE3B7080E6863DFBB04960EF3
Authority key identifier: 15:E7:85:25:1D:DA:61:0E:19:34:AF:ED:62:EF:3B:D8:E0:21:B8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15E785251DDA610E1934AFED62EF3BD8E021B835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e35302e302f32342d3234203d3e203230393430.roa
Signing time:             Fri 17 Nov 2023 17:40:18 +0000
ROA not before:           Fri 17 Nov 2023 17:35:18 +0000
ROA not after:            Fri 15 Nov 2024 17:40:18 +0000
asID:                     20940
IP address blocks:        201.16.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f5:db:c9:40:82:24:bd:e3:b7:08:0e:68:63:df:bb:04:96:0e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15E785251DDA610E1934AFED62EF3BD8E021B835
        Validity
            Not Before: Nov 17 17:35:18 2023 GMT
            Not After : Nov 15 17:40:18 2024 GMT
        Subject: CN=D1C5ED06602DDE06F1F86EAE5FD770C9BE05AF24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:02:2f:c5:49:bc:9d:42:c9:1b:2a:16:61:af:
                    bf:8f:a7:bc:24:f0:2e:69:2f:00:92:9c:cd:dc:c7:
                    a8:23:64:a3:22:ab:76:f0:40:6f:41:01:98:be:e6:
                    aa:6e:1c:58:0d:28:ad:d1:c5:08:60:a3:2e:ce:e8:
                    62:c3:e6:7d:08:3d:7e:d6:ba:80:99:58:64:c2:93:
                    64:c2:f0:cd:a9:88:5f:d7:98:a2:7c:51:a9:60:96:
                    d5:7c:10:54:6d:fd:c9:09:8e:62:d7:65:de:92:f9:
                    75:ea:ff:01:f1:d6:3d:b2:b7:3e:07:f4:20:a9:8d:
                    07:d0:0f:e3:56:cc:db:53:a1:86:4a:9e:77:23:41:
                    68:e6:79:29:20:f2:ee:9f:e6:3c:27:e3:61:9b:ab:
                    36:fe:79:9f:fa:a2:10:2c:23:12:6f:9c:ad:48:90:
                    b8:36:5b:cb:9e:ba:38:24:7d:34:e4:41:75:f4:5d:
                    8d:21:bd:9b:35:19:d6:dd:98:7b:1b:2d:67:89:b0:
                    4b:60:63:4f:dd:25:93:da:99:60:40:df:a3:59:f9:
                    40:9d:5a:4a:72:21:41:11:d3:47:4d:6a:1d:de:a6:
                    1a:b0:f6:c9:97:7d:89:e1:d2:0a:9d:77:f2:c2:4f:
                    70:d8:3a:aa:d2:89:83:8a:74:3e:18:f2:61:9a:8d:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C5:ED:06:60:2D:DE:06:F1:F8:6E:AE:5F:D7:70:C9:BE:05:AF:24
            X509v3 Authority Key Identifier:
                keyid:15:E7:85:25:1D:DA:61:0E:19:34:AF:ED:62:EF:3B:D8:E0:21:B8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/15E785251DDA610E1934AFED62EF3BD8E021B835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15E785251DDA610E1934AFED62EF3BD8E021B835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e35302e302f32342d3234203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:2e:18:06:86:e0:83:66:dd:1d:de:49:04:44:c6:33:34:
         24:58:14:04:69:3a:54:cf:48:4b:c7:b9:90:77:db:5e:13:93:
         be:50:76:2f:2e:5c:d9:ca:f3:55:e9:bb:ac:35:bb:0b:a5:6b:
         e4:d4:a3:d1:d0:07:b1:e0:78:69:7b:86:49:cf:1c:3a:e5:bc:
         ba:89:44:a1:0e:10:08:50:86:27:7e:75:fa:b1:c8:86:96:ff:
         5c:1b:25:a0:7c:e1:fc:48:6d:35:7c:f9:58:9d:9a:49:b8:c1:
         ea:93:2a:40:93:28:65:c9:8a:25:cd:9c:98:c7:2f:2b:e5:46:
         9b:1b:63:32:f3:6a:f7:01:fe:c7:60:36:96:7f:5b:35:d5:48:
         a0:29:86:4b:5e:5e:6a:b5:ea:20:21:b7:61:d9:dc:23:7a:d0:
         db:6b:d4:09:f2:95:dc:9f:a0:ae:82:68:5f:2e:e2:11:7a:17:
         9e:79:20:f2:77:22:f7:d3:5d:8f:e4:a0:1e:f6:d1:73:fc:ef:
         d1:87:ce:26:92:bb:75:4b:c3:5b:4e:dd:d0:56:ad:07:60:f0:
         88:79:fe:c9:1b:19:94:bd:27:46:3a:7c:7c:0d:48:82:3d:46:
         2a:0e:9b:2b:19:10:89:f1:6e:6a:6f:86:9d:44:54:25:f9:88:
         97:a8:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 12:11:00 2024 by rpki-client on console-ams.rpki-client.org