Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          UEoSLoFaW/XmMJA93X0KWhqRcef3ivHYuS7I5mQkd70=
Subject key identifier:   4D:9D:A6:33:E1:62:DE:1C:41:AB:DB:6C:A2:FA:E7:3C:E5:A3:D5:78
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       61F145288BA631C85D3BCD5C1B8898FA294F0A26
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:20 +0000
ROA not before:           Wed 03 Apr 2024 19:06:20 +0000
ROA not after:            Wed 02 Apr 2025 19:11:20 +0000
asID:                     271504
IP address blocks:        200.53.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f1:45:28:8b:a6:31:c8:5d:3b:cd:5c:1b:88:98:fa:29:4f:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:20 2024 GMT
            Not After : Apr  2 19:11:20 2025 GMT
        Subject: CN=4D9DA633E162DE1C41ABDB6CA2FAE73CE5A3D578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:8a:6a:cb:92:77:5b:77:4a:74:f4:cd:dc:
                    05:38:5c:8f:2e:05:ce:f0:b2:b0:07:94:d2:e4:e2:
                    40:9d:73:9a:91:b3:9a:f2:3e:c0:56:bf:ec:a8:64:
                    84:ad:fb:37:8b:ee:ed:ed:d3:e3:14:00:62:59:5d:
                    2e:dc:27:12:1e:40:6c:af:4e:16:eb:12:2f:93:be:
                    a7:2a:56:aa:0b:04:71:36:1d:9d:a4:0a:51:61:64:
                    5c:f7:cd:2f:10:52:cf:8d:8d:e9:73:0e:31:46:df:
                    ed:a8:54:ea:57:e3:8f:92:a0:14:8e:06:15:9f:cc:
                    df:ce:22:c1:68:0d:2d:63:a0:a9:1f:4e:aa:93:b1:
                    bf:c1:7b:91:f1:06:19:f9:b3:44:6a:dc:e8:46:0a:
                    f0:65:d9:18:49:4b:f0:39:1c:49:af:cc:84:e5:2d:
                    89:7a:80:7c:2a:80:cd:17:32:32:9a:5f:05:ca:bb:
                    38:5e:79:f3:a3:ad:22:b1:b8:a7:c7:86:48:8b:e9:
                    10:c9:e2:14:80:ef:3f:2f:6e:39:03:37:28:68:6a:
                    cd:8b:04:ca:60:d0:8c:a9:fb:b8:a1:7e:c5:45:1d:
                    ff:f2:aa:df:5e:fb:9f:e6:ae:33:f5:b0:5b:19:e1:
                    fa:41:24:62:07:0a:a0:13:e0:6b:bc:b5:98:5b:ad:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:A6:33:E1:62:DE:1C:41:AB:DB:6C:A2:FA:E7:3C:E5:A3:D5:78
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:37:50:74:96:89:30:50:13:22:c8:ca:eb:2e:95:69:09:
         bc:93:af:77:f3:13:d1:3f:3d:95:50:68:44:c5:d8:94:aa:e7:
         e6:b4:99:7b:5e:fb:89:24:36:37:75:af:a9:e2:bc:e5:de:14:
         08:e8:86:2f:64:8a:8c:d6:57:31:e2:d2:d2:8b:a3:ad:65:4c:
         07:8c:2c:e5:8d:96:25:e8:57:70:26:e9:0d:56:d6:e8:fa:8a:
         fd:4e:6c:f2:2f:a5:a1:a1:2f:4c:7f:29:7b:c2:ff:9d:f8:3d:
         73:cc:5b:41:92:a6:99:d7:bb:28:fb:ca:9a:89:32:3c:13:c7:
         26:bd:ae:3c:f7:0d:e4:fe:27:4e:50:3a:a5:e5:d4:b3:24:2f:
         3d:a1:fa:ee:7a:a1:93:44:b0:91:b4:bc:4e:70:b7:22:13:e3:
         a2:d5:67:23:06:a7:b1:e1:f5:77:63:ba:29:eb:68:ee:f6:3b:
         e3:98:df:59:b8:d8:44:d0:21:7e:06:b9:4d:99:49:a0:73:c6:
         44:ac:b0:7a:9d:a9:d5:36:10:f3:24:b6:80:14:2b:72:2e:73:
         07:be:59:07:62:db:5f:30:8f:3e:2c:78:39:50:1e:af:a2:45:
         d9:5c:ad:a1:f2:86:2b:ac:9c:ba:13:ba:ef:68:44:c8:1a:7a:
         3a:bc:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 04:03:12 2024 by rpki-client on console-fra.rpki-client.org