Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa
File:                     3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa (raw, json)
Hash identifier:          T5yDyAZMHmKjL3CrabAyd5A28DcPA+mlSQyqj7JNVhA=
Subject key identifier:   AB:CA:19:DF:86:2E:2E:C2:91:D7:AD:55:7A:EF:86:0C:F9:2A:4B:01
Certificate issuer:       /CN=51C2EC2E8985040FA85C26651E67991D969C7E20
Certificate serial:       0698D79CFA4CDB1DF44F2839DC69817A87B53217
Authority key identifier: 51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa
Signing time:             Wed 03 Apr 2024 18:30:09 +0000
ROA not before:           Wed 03 Apr 2024 18:25:09 +0000
ROA not after:            Wed 02 Apr 2025 18:30:09 +0000
asID:                     270255
IP address blocks:        200.108.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:98:d7:9c:fa:4c:db:1d:f4:4f:28:39:dc:69:81:7a:87:b5:32:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C2EC2E8985040FA85C26651E67991D969C7E20
        Validity
            Not Before: Apr  3 18:25:09 2024 GMT
            Not After : Apr  2 18:30:09 2025 GMT
        Subject: CN=ABCA19DF862E2EC291D7AD557AEF860CF92A4B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:57:b0:45:75:81:cc:39:64:c1:93:83:ca:
                    e1:36:ad:86:dd:5c:01:79:d3:5f:31:38:79:5d:01:
                    43:3e:07:cd:51:b5:da:15:3f:2d:e2:c2:24:70:88:
                    fc:aa:92:a6:31:b2:65:b0:9b:5e:de:25:8f:ef:38:
                    6e:4b:3d:89:39:8b:4f:4b:99:c4:f1:48:82:b3:7b:
                    45:89:53:fc:17:5f:8b:26:1e:84:2c:92:b6:d6:d4:
                    21:83:55:3e:4c:4a:03:60:46:06:19:bf:ff:59:6f:
                    a6:6b:01:2f:f3:7e:f8:0e:15:f7:ac:40:1d:34:cd:
                    82:21:b9:21:eb:66:50:c3:bc:6e:b7:14:15:59:25:
                    ce:06:9d:d5:72:b2:eb:ca:d5:81:2c:aa:21:07:91:
                    70:8b:c4:d8:9e:c1:67:e7:e2:66:5d:4c:66:b5:48:
                    eb:a6:a7:a4:ee:a9:cc:d0:41:77:31:8e:d1:54:8e:
                    6a:96:e8:a3:40:9b:30:ae:9d:49:46:61:3d:3e:cb:
                    a4:b6:3b:90:91:82:08:ae:8a:8b:84:08:d9:83:fe:
                    35:d7:e0:ed:8a:d9:3b:71:74:35:8b:c9:4c:cf:f0:
                    1d:3d:c4:fa:49:6e:6f:72:6e:a1:4d:6f:b4:97:45:
                    ea:71:a1:ab:e2:f1:05:9d:6d:08:3d:75:10:a2:6d:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CA:19:DF:86:2E:2E:C2:91:D7:AD:55:7A:EF:86:0C:F9:2A:4B:01
            X509v3 Authority Key Identifier:
                keyid:51:C2:EC:2E:89:85:04:0F:A8:5C:26:65:1E:67:99:1D:96:9C:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/51C2EC2E8985040FA85C26651E67991D969C7E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C2EC2E8985040FA85C26651E67991D969C7E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/1/3230302e3130382e3136382e302f32322d3234203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:9f:9e:cd:3c:a9:1f:d0:8f:6a:29:46:50:79:e7:90:24:e6:
         9b:e3:46:8b:96:12:43:aa:87:89:ba:1b:eb:05:c3:08:16:13:
         6a:10:2e:9f:bc:9d:b1:c5:f8:1a:71:18:93:fd:a7:be:1d:ef:
         2a:7d:ce:47:a1:cd:40:ea:63:7b:5b:3b:d7:7e:3d:83:c5:f6:
         84:79:27:5c:44:a1:d5:d8:c7:ed:82:52:31:1d:bb:29:30:73:
         0f:63:e6:d9:bf:22:96:0f:bd:95:7e:5d:ab:0c:6e:73:c1:84:
         f8:d3:fa:41:da:c6:05:3a:60:6d:37:b8:8f:da:b9:2a:fa:f0:
         3a:42:f2:fe:74:fc:03:ad:a3:ef:db:80:81:22:c0:31:96:a9:
         6a:5b:a8:ea:71:72:f9:ff:6d:31:d1:2d:cd:c7:99:41:17:61:
         26:2e:5d:ed:e2:a2:c7:7e:fa:0e:61:ef:d7:a0:83:79:b6:9f:
         75:3f:67:05:75:19:ff:2a:78:8e:40:9b:c1:6f:0a:33:0a:f6:
         ba:c7:cf:28:2c:d6:2e:f8:93:aa:0f:bc:6c:d1:76:85:dd:50:
         5d:7a:f6:ab:7e:4a:0d:2f:a9:06:86:8d:eb:dc:73:e9:87:be:
         17:71:a2:fc:ad:81:19:8f:c0:05:b0:08:2a:0b:96:04:3e:a9:
         84:e5:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 10:58:44 2024 by rpki-client on console-fra.rpki-client.org