Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa
File:                     3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa (raw, json)
Hash identifier:          deMh5+sVVgZWwuKaOl/zKjYpZN2wqhpVatD3myYYe2Q=
Subject key identifier:   23:FA:9C:16:61:E9:76:F2:C1:51:6D:B7:25:45:9A:FD:5D:E5:40:76
Certificate issuer:       /CN=E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41
Certificate serial:       5AB92297D42A758BF1696FA928B5F2C548636AF1
Authority key identifier: E9:B1:4A:E5:FC:1A:89:49:3A:44:06:FD:DB:DC:C8:2C:3A:60:1E:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa
Signing time:             Mon 29 Jul 2024 12:53:15 +0000
ROA not before:           Mon 29 Jul 2024 12:48:15 +0000
ROA not after:            Mon 28 Jul 2025 12:53:15 +0000
asID:                     270776
IP address blocks:        200.39.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b9:22:97:d4:2a:75:8b:f1:69:6f:a9:28:b5:f2:c5:48:63:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41
        Validity
            Not Before: Jul 29 12:48:15 2024 GMT
            Not After : Jul 28 12:53:15 2025 GMT
        Subject: CN=23FA9C1661E976F2C1516DB725459AFD5DE54076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:52:2f:4e:bc:8e:e2:de:52:71:53:de:c8:
                    46:fa:f5:c5:d0:ea:f9:a5:be:08:b9:a7:af:a7:dc:
                    ff:96:48:d5:63:ea:67:3a:d9:f7:df:5c:56:5e:ed:
                    80:3f:ac:ac:d6:35:df:18:00:63:5a:56:bd:eb:8f:
                    ea:a0:30:45:2a:90:bd:2b:77:38:14:f9:40:4e:4c:
                    71:43:a4:7f:ed:45:fb:be:5a:4f:3a:52:4a:ea:4c:
                    bb:26:5c:5f:25:07:0e:0f:3f:e7:3d:4f:91:a4:a7:
                    02:f8:1c:ad:84:42:16:01:bf:c1:48:8a:66:65:8f:
                    95:de:d0:85:74:6e:39:61:b6:8c:80:0d:ff:12:45:
                    5d:e8:80:9a:ec:3b:4a:c1:cd:66:10:83:dd:49:a2:
                    ef:b3:37:81:1b:37:e3:13:dd:b0:c5:6f:58:9e:85:
                    42:f2:24:29:0e:b0:89:42:b6:34:65:72:4d:45:d8:
                    cf:b7:29:2c:b0:51:70:1d:17:28:9c:94:4b:59:5f:
                    c4:c3:0e:c1:8b:7d:b3:33:eb:a8:e2:94:06:6b:f9:
                    eb:25:99:b3:4c:6f:7d:66:2e:73:f6:ee:dd:de:73:
                    d2:ad:01:fe:8c:32:d6:dd:ac:2b:79:c7:08:be:70:
                    eb:a5:93:24:5f:f1:a3:3f:ba:5f:d0:ef:11:58:7a:
                    66:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:9C:16:61:E9:76:F2:C1:51:6D:B7:25:45:9A:FD:5D:E5:40:76
            X509v3 Authority Key Identifier:
                keyid:E9:B1:4A:E5:FC:1A:89:49:3A:44:06:FD:DB:DC:C8:2C:3A:60:1E:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B14AE5FC1A89493A4406FDDBDCC82C3A601E41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9ExJxP49CJ7mW8QTCAWFGQ48PxSWbwMzw9dnKNaMXe/0/3230302e33392e3134302e302f32322d3234203d3e20323730373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:4d:cb:18:83:f5:8f:4a:e4:ca:13:de:ec:97:e0:5b:10:
         fb:74:48:2b:65:be:62:74:b0:15:b5:15:63:cb:97:82:a0:61:
         85:10:ad:e5:04:f2:9d:c3:03:05:78:21:75:17:4f:b6:74:20:
         bb:be:39:03:6e:f0:a3:16:30:2c:0c:94:08:3e:43:ac:c2:ef:
         cb:46:09:15:1b:84:58:d8:dc:aa:1b:c7:a6:09:81:c7:2c:fb:
         95:53:0e:4f:31:20:c8:72:fe:f6:41:d6:15:5b:e3:e1:38:20:
         65:b5:5e:c9:e3:56:9b:ed:11:2a:c7:a5:09:91:0c:99:03:68:
         24:ce:75:01:10:25:28:7b:6d:52:b2:97:ab:a2:cb:5b:be:26:
         8d:09:d7:16:6f:f6:25:39:f4:d1:9d:a7:7b:15:bc:e4:d7:42:
         d3:ee:51:86:c3:d1:0a:f3:4c:aa:04:bc:61:10:46:84:f2:15:
         24:54:8e:d3:74:9d:21:a9:68:7e:c6:45:cd:b8:63:5c:70:b5:
         e9:70:bc:01:5d:ce:0e:65:06:d1:3a:93:17:84:bf:87:a3:a9:
         db:50:e7:5b:9f:5f:da:d9:9a:67:e2:78:0c:18:d4:1a:84:b3:
         ab:ff:a2:49:c7:88:e1:09:00:40:c8:1d:ba:63:16:28:51:50:
         11:e0:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 13:26:31 2024 by rpki-client on console-fra.rpki-client.org