Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36352e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          ITat8vvnJfpGWJtz+0SG3EjtbSoI2/BthxLVeEau2jY=
Subject key identifier:   48:1E:83:21:AC:F4:06:2A:86:E0:4F:39:70:85:68:DD:1D:7E:21:E6
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       4AFD489F1F3D5CECF0D6768932E76268065A0C84
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        200.53.65.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fd:48:9f:1f:3d:5c:ec:f0:d6:76:89:32:e7:62:68:06:5a:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=481E8321ACF4062A86E04F39708568DD1D7E21E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:9d:d5:2e:ef:92:72:5a:c4:97:17:4f:1d:
                    71:b1:97:51:f6:64:c4:c9:7b:1d:14:37:d2:49:87:
                    7a:8b:cc:12:8d:7f:c3:e7:b6:bd:d7:1a:cb:0d:9a:
                    63:08:5a:77:6b:c1:d1:19:b6:79:ae:88:84:05:7e:
                    ff:26:d7:88:38:30:28:1a:aa:2d:29:b3:aa:fc:29:
                    76:c3:64:92:61:e0:78:8f:5c:56:bc:68:d7:0f:4f:
                    b0:da:f7:ea:ca:60:14:53:46:1b:2e:4f:be:3b:da:
                    19:19:86:da:44:57:98:5a:f7:ef:e9:82:57:5b:ef:
                    00:88:d3:cf:c1:a7:ea:ef:37:92:cc:a5:e3:fd:b0:
                    85:33:3a:bf:96:87:5c:e9:49:7e:13:1b:de:8e:3f:
                    d4:c2:45:ac:90:09:31:4f:03:55:3f:b0:11:93:85:
                    a8:af:26:dc:79:fb:a5:bb:12:7c:fd:73:c0:61:82:
                    f2:7d:78:c7:1b:4b:69:92:bc:54:02:b7:3f:6a:80:
                    f6:3f:2e:a0:a2:80:a9:12:d6:2e:e2:e1:39:33:b9:
                    94:1b:79:eb:e3:fd:5c:89:3f:a2:bb:0e:12:9a:96:
                    e5:82:1c:c7:7b:76:74:21:b3:8f:60:65:fc:a2:95:
                    77:d7:8b:ff:5f:9b:71:35:02:59:88:d2:13:e0:6c:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1E:83:21:AC:F4:06:2A:86:E0:4F:39:70:85:68:DD:1D:7E:21:E6
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ce:c1:9f:82:39:3d:58:c2:7f:4e:8d:fa:e9:f0:b4:45:23:
         f8:fa:40:2e:4e:05:0c:6c:b9:77:05:1d:15:40:7c:aa:59:ac:
         c5:18:66:9d:6b:f5:71:b1:cb:5d:21:e8:00:88:ab:89:59:20:
         73:19:43:ba:9e:80:22:d7:e4:46:43:4b:b3:c0:2d:10:90:7c:
         56:2b:e7:28:6c:de:1c:77:4b:cd:6f:73:6a:d7:c5:8f:0a:50:
         fa:80:20:87:f8:bf:6d:55:85:53:bd:ab:20:e1:29:7f:d5:12:
         67:25:a5:f4:67:80:6e:96:ff:2e:22:17:aa:12:58:14:06:9a:
         02:bd:27:36:c6:53:bd:7a:93:94:29:94:4c:37:dc:36:58:78:
         38:7a:1f:17:88:47:8b:73:26:15:da:30:85:ff:54:a5:8e:2f:
         63:53:db:cf:9c:c6:02:72:61:0c:9f:7b:26:60:48:bd:81:07:
         55:bf:1d:c1:a4:b1:93:4c:a9:5e:49:1b:eb:03:a9:f5:c2:14:
         ff:f0:2b:95:04:cf:52:08:f3:de:cb:52:ff:0c:83:8d:bb:b4:
         3e:6f:b3:7e:41:db:89:7f:85:a9:43:96:8a:48:8c:bb:73:70:
         1d:30:e4:0e:f8:02:14:56:8c:61:aa:be:96:d9:ea:21:c6:50:
         f2:ea:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 04:03:12 2024 by rpki-client on console-fra.rpki-client.org