Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
File:                     3230302e35332e36362e302f32332d3233203d3e20323731353034.roa (raw, json)
Hash identifier:          HmjxeG9ctN6X3hFIaC1YOKPbbfn9Bgyccq9tZCGjR14=
Subject key identifier:   F9:16:47:5B:A9:33:85:23:5C:B6:A0:80:8C:75:AA:F0:94:71:2D:38
Certificate issuer:       /CN=BDBF088AD60886FED4A9616708283717E8AD2443
Certificate serial:       46BB38C6AF8575A2F1040B2C2E4D2A62A022FC4B
Authority key identifier: BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa
Signing time:             Wed 03 Apr 2024 19:11:21 +0000
ROA not before:           Wed 03 Apr 2024 19:06:21 +0000
ROA not after:            Wed 02 Apr 2025 19:11:21 +0000
asID:                     271504
IP address blocks:        200.53.66.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:38:c6:af:85:75:a2:f1:04:0b:2c:2e:4d:2a:62:a0:22:fc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDBF088AD60886FED4A9616708283717E8AD2443
        Validity
            Not Before: Apr  3 19:06:21 2024 GMT
            Not After : Apr  2 19:11:21 2025 GMT
        Subject: CN=F916475BA93385235CB6A0808C75AAF094712D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:a6:5f:e7:72:f2:f1:1c:45:f3:da:4e:6b:
                    7d:ec:0f:fc:1b:00:d6:ed:5c:18:b9:ed:1d:5a:57:
                    dd:f6:d0:56:74:da:07:66:48:63:da:04:4c:d4:a0:
                    3e:26:7b:ab:cd:fa:95:a9:20:ab:13:6b:e7:63:21:
                    e9:b8:45:f1:de:7c:9c:37:6b:cd:e2:c0:8c:0b:ee:
                    a7:e4:98:e5:1d:06:fc:9a:b5:26:d9:3f:d2:ea:0d:
                    30:69:fb:44:fa:f6:41:06:46:8f:f6:3b:93:bf:a3:
                    2b:40:b5:3d:f5:4d:05:63:b1:65:fa:1e:ce:f5:3d:
                    6f:e8:32:1d:84:8f:e0:45:23:83:de:a0:0f:b3:58:
                    d7:74:76:5e:d9:ac:e5:47:93:6a:8a:16:91:08:36:
                    27:da:68:a5:09:8c:ce:da:6e:cc:49:32:57:cb:01:
                    1e:28:17:42:38:de:a1:40:11:9f:9a:b2:d9:a6:22:
                    87:c6:8d:5d:3b:dd:b2:98:91:1d:95:c5:10:83:bb:
                    1a:82:06:6f:6a:13:f0:48:e7:cf:e1:fe:a1:c8:52:
                    03:a6:d4:a1:b6:d1:13:fc:9d:4e:fa:a3:b3:af:37:
                    6f:90:1c:e3:08:a9:55:c1:b2:c1:47:56:81:0c:93:
                    9d:05:cb:70:9b:37:8b:70:c9:a8:a0:09:35:58:5f:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:16:47:5B:A9:33:85:23:5C:B6:A0:80:8C:75:AA:F0:94:71:2D:38
            X509v3 Authority Key Identifier:
                keyid:BD:BF:08:8A:D6:08:86:FE:D4:A9:61:67:08:28:37:17:E8:AD:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/BDBF088AD60886FED4A9616708283717E8AD2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDBF088AD60886FED4A9616708283717E8AD2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/1/3230302e35332e36362e302f32332d3233203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:fc:5d:ca:d7:b3:32:c0:03:9c:46:41:76:f0:29:87:6b:89:
         3d:aa:a0:e9:70:c9:d1:45:48:56:8f:e5:84:e7:a8:85:6a:e9:
         29:87:96:0f:ae:38:8e:9c:86:ea:e9:dd:2f:57:1b:ea:7a:15:
         79:84:7a:a1:c5:c4:d0:eb:5f:64:53:83:7a:a6:9c:08:72:51:
         71:17:c2:df:6b:49:3a:9a:36:e6:75:28:e7:d1:91:eb:92:83:
         44:cb:45:ee:f8:9c:dd:fd:28:f9:c6:c3:99:af:f9:b0:9c:e2:
         82:f3:2f:e4:01:47:ce:65:ae:1c:08:6f:cb:0f:77:4e:6e:19:
         62:6e:9c:87:7f:18:15:1a:18:43:e1:1b:09:48:13:e6:c3:9a:
         4a:4a:14:ce:8c:ba:9b:b0:e8:49:85:67:ac:ed:00:78:f7:5f:
         0c:de:84:7a:b1:64:8b:1f:7f:af:94:15:2b:7e:09:f8:3a:70:
         a1:64:ac:9e:c5:b2:f7:45:a8:88:a6:4d:fc:68:b0:98:3c:9b:
         b5:29:a6:92:e5:97:57:f6:e8:8b:03:56:30:3d:ea:dd:dd:74:
         cf:c1:86:e0:af:45:c7:aa:3c:be:94:69:93:56:1b:20:31:94:
         f6:47:85:44:d2:6c:65:99:2d:1d:19:42:49:c2:50:16:7f:37:
         be:0e:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 04:03:12 2024 by rpki-client on console-fra.rpki-client.org