Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32322d3232203d3e20323731353034.roa (raw, json)
Hash identifier:          +t6qtwQpWf/5dS0KGgEjgT7pH+dRZSa5iiszCzfiQzk=
Subject key identifier:   07:BB:F0:A1:85:F9:B4:15:64:0A:6C:A7:A0:2E:85:DE:FA:86:2A:A4
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       3BB3F92BDC75057830286F3CE603E09473E25DCC
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        200.53.64.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b3:f9:2b:dc:75:05:78:30:28:6f:3c:e6:03:e0:94:73:e2:5d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=07BBF0A185F9B415640A6CA7A02E85DEFA862AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:59:2d:8a:c4:28:d1:09:07:25:eb:07:8e:
                    b6:ec:a6:ca:9d:26:c5:4a:e3:98:a0:26:51:1c:24:
                    6c:7c:2f:26:b3:77:db:d1:93:8a:89:67:b8:3c:5f:
                    b4:da:53:8c:55:41:20:a7:c9:e2:52:35:aa:be:94:
                    7d:9f:e1:76:70:bc:57:3c:8e:71:a2:68:14:51:c8:
                    e8:71:2e:68:d6:b2:96:a6:2a:49:38:4e:13:00:0c:
                    27:fd:8e:49:53:ff:c8:8a:cb:6a:eb:39:7a:cc:2c:
                    a9:7c:1d:f7:d4:dd:62:4a:4e:30:41:11:cf:0d:28:
                    4c:d0:8a:57:08:00:c9:f5:a1:46:94:1a:80:68:48:
                    75:21:8c:0b:10:35:5f:bd:c1:33:83:72:80:5a:47:
                    43:e9:8b:84:5f:b3:fa:27:b1:cc:ca:2a:7a:93:61:
                    46:3b:2e:82:f0:fd:18:05:f7:83:7b:88:53:2c:c2:
                    20:cf:1f:1e:06:ca:40:24:0d:68:96:e6:07:1a:c4:
                    10:cd:27:59:e8:d7:53:25:9f:20:67:d5:10:4f:6e:
                    ae:93:73:a3:c0:e3:ae:ce:55:d0:0a:4c:59:20:03:
                    ed:31:8e:ee:29:4b:10:87:4a:70:5d:a0:ff:5b:c3:
                    33:92:0a:1d:53:a4:43:80:5e:25:40:07:cc:e4:25:
                    8c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BB:F0:A1:85:F9:B4:15:64:0A:6C:A7:A0:2E:85:DE:FA:86:2A:A4
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:22:c5:0d:38:63:43:70:8e:d1:d9:5e:52:ed:36:14:23:ce:
         08:17:05:cd:c1:1c:10:b5:11:c5:14:64:41:86:3a:64:ca:04:
         0a:03:a6:83:bd:54:26:f0:ae:50:fc:37:20:ca:a4:5f:b7:61:
         70:6e:df:46:6e:97:ee:e9:75:84:eb:5d:90:dd:2f:3c:e5:77:
         1b:9e:b8:e5:45:d6:be:8c:91:b8:c4:fe:b4:3f:de:ad:0f:03:
         ba:e5:cf:fd:52:9d:99:c9:a3:cf:72:5e:81:58:25:45:59:2a:
         6f:ad:e6:a3:57:40:95:e4:67:9f:0c:ff:b8:0a:89:ab:23:a7:
         1d:30:89:f2:da:8e:6d:02:31:f6:a6:ba:07:27:fa:bc:04:87:
         e1:8f:d7:46:4f:51:be:43:6d:d7:67:ca:f5:95:c2:6b:de:ea:
         ce:26:cd:2a:9a:ff:46:2c:7f:25:16:84:7d:fa:1d:68:31:80:
         1b:9f:38:7b:85:9d:92:45:a8:30:24:11:32:38:da:79:cf:92:
         c2:de:50:a2:08:d4:71:1d:92:bf:2a:ee:a5:f6:f4:ce:d5:43:
         5e:fc:46:ae:5d:cf:ae:5d:30:be:48:92:40:26:3d:8d:56:a7:
         8a:b3:31:aa:65:03:42:4e:59:4b:d2:17:0a:f6:18:c1:6c:71:
         a3:49:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 04:03:12 2024 by rpki-client on console-fra.rpki-client.org