Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e35382e302f32342d3234203d3e203230393430.roa
File:                     3230312e31362e35382e302f32342d3234203d3e203230393430.roa (raw, json)
Hash identifier:          mc2PBO1foscGYOqQ1BYwuiiEkIiCS1ntq7UCe6Y4hyE=
Subject key identifier:   46:9C:05:38:32:B7:CD:0C:08:85:22:75:32:27:25:75:DA:0E:5E:83
Certificate issuer:       /CN=15E785251DDA610E1934AFED62EF3BD8E021B835
Certificate serial:       4F38A698F9D8DA3E86B1761D25E6FE088EF4168A
Authority key identifier: 15:E7:85:25:1D:DA:61:0E:19:34:AF:ED:62:EF:3B:D8:E0:21:B8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15E785251DDA610E1934AFED62EF3BD8E021B835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e35382e302f32342d3234203d3e203230393430.roa
Signing time:             Fri 17 Nov 2023 17:39:47 +0000
ROA not before:           Fri 17 Nov 2023 17:34:47 +0000
ROA not after:            Fri 15 Nov 2024 17:39:47 +0000
asID:                     20940
IP address blocks:        201.16.58.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:38:a6:98:f9:d8:da:3e:86:b1:76:1d:25:e6:fe:08:8e:f4:16:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15E785251DDA610E1934AFED62EF3BD8E021B835
        Validity
            Not Before: Nov 17 17:34:47 2023 GMT
            Not After : Nov 15 17:39:47 2024 GMT
        Subject: CN=469C053832B7CD0C0885227532272575DA0E5E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:c2:97:31:3a:2f:9b:df:66:01:7f:12:57:
                    77:0d:4d:45:26:83:eb:e1:5c:88:50:dc:02:b9:05:
                    20:89:6f:34:cb:0d:c4:2f:d2:97:49:21:12:03:9c:
                    82:e9:0a:80:b4:93:73:99:16:53:eb:a6:99:c2:a3:
                    af:11:a1:af:30:1c:2b:19:f0:29:ad:d4:ea:cc:60:
                    bd:3b:11:4d:e8:27:47:f3:14:58:9d:2b:3d:1c:58:
                    a0:f4:5a:b0:a9:33:9b:8d:1e:98:22:c7:3d:b8:e4:
                    57:14:ad:b6:d6:7a:a6:22:4e:58:12:3b:95:57:7b:
                    80:17:e1:39:7f:c4:18:e1:e4:79:55:d7:be:e1:a0:
                    6f:e0:ae:a0:40:c5:71:59:db:84:2c:0f:86:82:55:
                    1f:67:8b:13:da:3c:fe:49:21:db:95:c5:10:65:79:
                    0f:10:80:4c:50:de:b4:24:5a:df:98:74:04:43:5d:
                    8f:4c:3c:47:31:2f:11:bc:3c:94:0a:34:82:b6:0d:
                    26:59:7e:9b:4b:68:08:72:17:e3:1e:51:75:e9:e5:
                    b2:74:b9:a8:7f:82:1d:75:35:43:69:bc:19:4d:b3:
                    d7:29:72:41:0f:58:13:ce:78:58:bf:83:59:b6:cd:
                    c3:e1:67:a3:32:96:40:12:58:97:9b:a2:23:37:37:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9C:05:38:32:B7:CD:0C:08:85:22:75:32:27:25:75:DA:0E:5E:83
            X509v3 Authority Key Identifier:
                keyid:15:E7:85:25:1D:DA:61:0E:19:34:AF:ED:62:EF:3B:D8:E0:21:B8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/15E785251DDA610E1934AFED62EF3BD8E021B835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15E785251DDA610E1934AFED62EF3BD8E021B835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e35382e302f32342d3234203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:67:87:f0:06:89:0d:64:d9:2b:02:2f:1c:e6:14:38:db:39:
         02:15:52:de:06:4b:86:ad:57:bc:01:3c:0b:3a:37:96:15:c8:
         7e:e9:8f:92:74:5b:5a:99:4c:96:b5:e5:b2:ee:3e:2b:e6:46:
         1a:b7:4e:51:f2:7e:20:f0:71:f4:38:f6:41:a0:f6:29:be:fb:
         0e:db:b8:48:68:a9:a2:86:0b:fc:6d:33:d3:b1:ed:59:1f:b7:
         0a:e3:ab:0f:f0:1e:0a:29:f0:70:89:ac:c0:e5:03:35:9c:5d:
         f9:9a:8b:45:98:54:ef:63:e9:0b:35:48:04:72:24:78:31:9a:
         0e:fc:a4:6c:53:01:50:a8:a5:c5:43:62:d8:3f:91:eb:f0:a4:
         b5:be:73:90:df:37:f2:d7:59:2e:58:37:d5:77:b5:18:04:81:
         44:e8:75:48:1c:66:a2:dd:69:41:a7:39:8e:bd:16:8d:88:5f:
         47:a6:31:c4:f9:83:f9:3c:86:4c:64:b6:bb:18:ea:8b:bd:fa:
         86:79:1f:6c:b8:91:eb:c8:4b:7e:bb:34:14:e6:cb:9b:a0:d6:
         1a:36:3e:f6:78:36:c6:8f:b5:05:e5:aa:fb:d2:cd:58:f4:f0:
         9b:40:7e:ab:b2:a9:e0:c9:35:95:03:dd:da:40:9e:80:7b:4d:
         79:78:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 12:11:00 2024 by rpki-client on console-ams.rpki-client.org