Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32332d3233203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32332d3233203d3e20323731353034.roa (raw, json)
Hash identifier:          D8sQBCAh3BfMkfGx+MjPpic6UWdcIrzN9Ypzu/u0vPw=
Subject key identifier:   DD:0A:29:2F:5F:A7:79:21:82:CE:0A:C4:95:98:71:5A:48:D1:78:20
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       71223A18C6C04999D1125BE8E37BC3CA604F8803
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32332d3233203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:13 +0000
ROA not before:           Mon 19 Aug 2024 18:23:13 +0000
ROA not after:            Mon 18 Aug 2025 18:28:13 +0000
asID:                     271504
IP address blocks:        200.53.64.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:22:3a:18:c6:c0:49:99:d1:12:5b:e8:e3:7b:c3:ca:60:4f:88:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:13 2024 GMT
            Not After : Aug 18 18:28:13 2025 GMT
        Subject: CN=DD0A292F5FA7792182CE0AC49598715A48D17820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:51:11:36:7b:41:d1:77:a7:d4:67:1d:04:
                    87:93:5a:fc:22:4a:6a:94:80:70:d1:d9:46:54:29:
                    0b:e3:60:01:b7:a9:78:32:b7:72:39:31:50:65:8e:
                    bd:7e:3d:71:ae:2c:17:67:fa:72:a5:02:30:a8:dd:
                    23:de:82:12:65:69:0e:f6:3b:09:ae:91:78:cb:62:
                    4f:e1:1a:21:db:e4:bb:4f:22:3f:22:5d:0e:99:d6:
                    c7:b2:a9:2c:d7:f1:1d:8a:ff:f9:cb:2c:56:54:2d:
                    b7:96:e9:62:01:df:ef:34:e2:86:47:6f:78:45:1a:
                    7d:ff:89:29:f6:27:c1:4f:3e:88:f3:b3:26:72:ed:
                    a3:f9:74:90:83:a7:2a:0b:07:a9:df:56:54:b2:97:
                    f2:e8:4d:4f:a1:66:6e:b0:3d:00:df:0f:81:98:f6:
                    48:64:b1:b8:0c:df:8b:b5:2e:c0:11:e7:ee:35:c9:
                    00:6e:62:69:f3:cc:24:f4:15:1b:71:66:84:98:f2:
                    76:d4:e9:b9:a7:ee:b5:85:b6:cb:41:95:fd:98:99:
                    53:70:0d:06:12:76:62:71:99:46:26:9d:2c:ee:a1:
                    e1:b4:13:90:d0:1b:cd:a2:ad:a5:ad:b4:c2:ab:d1:
                    48:79:ff:46:48:c4:a0:f2:94:4a:a8:4a:97:5c:d9:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:29:2F:5F:A7:79:21:82:CE:0A:C4:95:98:71:5A:48:D1:78:20
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32332d3233203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:9b:c7:90:fe:cc:b3:68:8d:2e:86:fe:e6:9e:9d:01:34:
         3a:28:22:a3:08:43:7a:88:19:49:27:65:fc:bb:51:47:dc:56:
         f0:d0:69:e9:62:ec:0b:43:01:3f:42:c3:96:23:5b:94:9a:91:
         2f:d3:b8:62:f8:e0:0d:ae:f6:62:bb:34:6b:2b:ba:67:e6:d4:
         05:d1:bc:88:3d:05:8e:aa:f6:35:3f:07:22:42:7c:4d:22:7e:
         ca:7a:1c:5a:46:2d:62:92:ac:c9:be:12:cd:39:9f:78:81:69:
         f9:ea:3e:52:0b:6b:d4:e9:af:83:d3:a3:47:2d:69:7e:cc:23:
         47:78:2c:6f:52:e7:f1:99:80:66:af:c6:19:1e:b0:08:55:54:
         70:7e:ac:bd:45:e4:dd:6b:87:27:82:08:d0:f6:46:25:0b:f3:
         f1:a4:e3:20:eb:04:c4:0d:15:51:87:b0:ec:e2:a4:45:6f:f0:
         69:b9:00:de:08:83:14:8b:8f:8f:f9:83:37:cb:ac:a2:ed:cd:
         c7:a8:94:5b:8d:16:28:e0:9f:4a:c7:31:e6:8c:c9:66:7f:9a:
         ad:17:ae:6a:5e:37:d5:b5:a2:61:27:21:3a:e3:58:d0:8a:5e:
         91:98:a8:6d:f5:7d:34:b3:b8:28:0a:d4:0c:89:74:e3:b9:a9:
         fb:ee:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:41 2024 by rpki-client on console-ams.rpki-client.org