Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32322d3232203d3e20323731353034.roa (raw, json)
Hash identifier:          Xin6p6+b7DbIAbQTt8fvVonjQ29qXkJxm7Fn221rdzo=
Subject key identifier:   7E:A7:77:BB:C8:98:E5:D4:05:02:FB:6E:33:0B:5A:B2:C9:6D:66:59
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       3A6A30D66B4F4CA714E2EA75FB7EEFF7F185E0E4
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:14 +0000
ROA not before:           Mon 19 Aug 2024 18:23:14 +0000
ROA not after:            Mon 18 Aug 2025 18:28:14 +0000
asID:                     271504
IP address blocks:        200.53.64.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6a:30:d6:6b:4f:4c:a7:14:e2:ea:75:fb:7e:ef:f7:f1:85:e0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:14 2024 GMT
            Not After : Aug 18 18:28:14 2025 GMT
        Subject: CN=7EA777BBC898E5D40502FB6E330B5AB2C96D6659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:59:1a:82:de:c1:71:05:28:96:e3:09:7b:
                    39:91:47:ef:33:e3:53:14:28:48:f2:95:76:72:91:
                    59:52:4b:71:00:3b:db:af:14:0a:56:5d:20:cc:57:
                    b4:93:a1:f4:1b:76:33:df:00:61:e6:4a:6e:8b:97:
                    4d:73:c8:5c:0c:6e:ea:b6:b1:73:10:b9:1f:9e:7b:
                    e9:3b:67:8f:a8:49:2c:ca:e2:02:02:09:f9:a5:ad:
                    43:fc:aa:e2:33:54:c8:af:58:7e:58:90:82:5e:1e:
                    69:0f:3f:be:2b:29:c3:c7:bb:28:ad:14:6b:f9:8d:
                    65:00:b7:66:c0:fe:50:71:1f:f9:3b:b2:ba:c2:e6:
                    8c:5b:d1:d3:d4:18:8d:14:8e:1b:b5:57:f9:db:8f:
                    2c:14:00:99:28:68:29:b8:79:65:63:ef:8e:a1:56:
                    01:26:28:6e:33:2b:15:0b:a2:1a:89:a6:4b:7d:fe:
                    4d:e9:38:77:87:e1:2c:eb:f5:0e:a5:98:f7:8e:f3:
                    0d:01:4e:d0:86:3f:c8:1c:07:fd:29:85:06:7c:d7:
                    91:e1:51:ff:0c:32:36:87:43:84:97:fd:9e:58:16:
                    b6:93:b3:73:c0:d5:60:62:ae:53:5c:e7:cf:38:55:
                    3f:11:29:a0:93:4e:e6:76:b3:60:6b:f9:16:4e:44:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A7:77:BB:C8:98:E5:D4:05:02:FB:6E:33:0B:5A:B2:C9:6D:66:59
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32322d3232203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:2d:4f:4d:01:46:ac:fc:0a:ef:4d:bb:08:4a:86:3f:58:eb:
         4b:3e:7c:fa:4c:b1:2b:40:6f:f0:a9:fe:40:e6:a7:c2:96:e9:
         c9:6f:23:20:06:c4:d6:72:68:44:06:af:33:15:9f:cb:09:7d:
         94:36:4a:9c:82:91:7f:0d:09:64:a0:41:66:44:19:b9:4f:32:
         0d:fb:d5:a8:78:b9:b5:8b:6b:ac:c5:b9:9e:4f:01:73:f4:8a:
         4d:7b:60:d2:80:ed:e7:da:a8:5c:a3:8a:de:4a:8d:fb:17:76:
         9d:57:fd:da:6c:58:59:55:86:c7:67:8e:eb:a3:22:ea:04:5b:
         e7:28:ab:72:96:71:d0:23:41:9d:2d:e7:42:a3:1b:96:bc:22:
         57:e8:92:bd:ac:44:57:e4:5c:67:27:57:05:56:2c:db:90:bb:
         37:b8:4b:19:c6:23:bc:9e:ce:9f:5a:56:93:a1:5f:53:94:38:
         f7:c8:ca:69:0f:a2:2c:a6:d9:98:ca:a9:b5:54:53:a2:1c:68:
         3c:51:f5:b4:b3:a0:49:d1:c4:38:63:1b:2c:55:e5:f1:aa:05:
         9f:66:a4:ce:84:14:1c:9a:2a:b6:35:d9:26:ec:93:36:d5:ba:
         8a:6f:46:c2:12:e1:50:13:c2:47:5c:c9:c1:42:57:c6:e6:8b:
         a3:69:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org