Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa
File:                     3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa (raw, json)
Hash identifier:          EVyHMi8KO6Ri67mEd6MxrWmr0wi25Vtd+H+ejR/ALgU=
Subject key identifier:   15:82:B3:AA:B5:F5:FB:C9:76:28:DE:64:69:2D:3B:B1:07:88:3E:2B
Certificate issuer:       /CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
Certificate serial:       12C89A12B0A278561C71AA59A948563ADBF6C75D
Authority key identifier: A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa
Signing time:             Thu 04 Apr 2024 13:51:11 +0000
ROA not before:           Thu 04 Apr 2024 13:46:11 +0000
ROA not after:            Thu 03 Apr 2025 13:51:11 +0000
asID:                     10954
IP address blocks:        200.198.192.0/18 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c8:9a:12:b0:a2:78:56:1c:71:aa:59:a9:48:56:3a:db:f6:c7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A53BAC0561132599AF29A68050BD1EAB5939EAC5
        Validity
            Not Before: Apr  4 13:46:11 2024 GMT
            Not After : Apr  3 13:51:11 2025 GMT
        Subject: CN=1582B3AAB5F5FBC97628DE64692D3BB107883E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:b8:6a:0e:44:48:5f:eb:66:f3:3d:9d:73:
                    b0:e9:18:29:2d:7a:e1:97:f7:4d:5a:36:05:62:01:
                    0d:e4:5a:46:03:da:f4:28:a7:6b:1f:1d:5d:91:7d:
                    00:ce:0a:8f:2c:ad:48:cd:f8:7a:3d:68:d2:47:65:
                    3a:55:b1:94:42:90:af:f3:8a:29:5e:24:71:4c:fa:
                    6a:62:5e:90:58:ec:49:e3:ee:ad:4d:b6:d8:f1:97:
                    9f:58:ed:16:41:db:e4:cd:b8:0a:43:b1:ee:34:d0:
                    33:e4:47:89:8c:33:87:2b:b0:dc:40:74:d8:6d:c8:
                    22:0a:34:2a:94:bc:89:c7:7a:33:bc:9d:c8:61:d7:
                    59:eb:5e:de:68:78:a0:60:e0:ce:e8:fb:15:f3:3f:
                    b2:71:10:47:3d:89:b6:7d:46:60:ed:96:19:03:bd:
                    04:ef:a4:47:49:23:03:8b:66:bc:44:6b:69:55:02:
                    94:a0:28:14:32:32:cf:44:6b:9f:d7:70:f5:30:43:
                    30:87:d0:0e:b1:3d:4a:33:29:6e:47:37:04:3e:80:
                    e8:10:f2:07:7a:24:c9:b0:cb:d4:ff:0c:c4:72:42:
                    46:53:ee:2e:2c:aa:b3:6a:03:67:40:d1:c7:5f:c1:
                    16:10:af:53:0a:35:98:e9:39:13:97:3c:0d:23:54:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:82:B3:AA:B5:F5:FB:C9:76:28:DE:64:69:2D:3B:B1:07:88:3E:2B
            X509v3 Authority Key Identifier:
                keyid:A5:3B:AC:05:61:13:25:99:AF:29:A6:80:50:BD:1E:AB:59:39:EA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A53BAC0561132599AF29A68050BD1EAB5939EAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/1/3230302e3139382e3139322e302f31382d3234203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.198.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:44:38:d0:fc:f3:d9:25:48:ef:da:6b:21:ac:d0:7e:0d:
         eb:3b:a6:cf:6c:40:02:38:25:4f:4a:44:78:7e:eb:cc:37:2d:
         c3:18:c6:95:08:53:f5:7b:3b:2c:81:95:ca:03:2e:71:f5:98:
         59:b7:52:9e:e2:2d:b3:2d:c7:de:cf:2b:f9:f3:74:fb:eb:bf:
         f8:4a:bf:59:b9:7d:c2:bc:58:6c:29:a9:87:d5:0e:ec:f3:93:
         32:fa:df:01:98:81:9c:6d:89:a6:f7:2b:fd:df:08:9a:fe:e2:
         cc:1a:52:73:1d:27:80:69:5f:27:de:b3:f0:62:da:fc:02:d1:
         ea:86:2d:a7:74:64:09:a5:b9:90:32:53:77:1f:20:a2:6e:74:
         78:a2:28:60:71:3e:89:27:f9:ea:a8:8d:b0:55:b7:d9:a3:bb:
         f2:38:93:70:4c:ff:bf:38:f6:78:c3:1f:8b:12:a0:e8:77:a8:
         9d:2f:79:1a:39:1f:08:ba:76:4c:ad:23:dd:2c:a7:82:fa:2e:
         05:62:35:69:39:5f:a7:04:75:10:40:56:7d:69:51:dc:da:aa:
         c2:de:40:99:ab:ba:32:1e:c7:6d:11:2e:88:d1:30:3b:65:62:
         01:1a:12:da:8d:83:17:a4:23:ad:a7:9f:91:53:61:f2:66:12:
         73:80:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 19:30:28 2024 by rpki-client on console-fra.rpki-client.org