Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36342e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          0Yx3oiRFeVTtZEo3ZZOgIs6ffAKZ8H/cNAnzx4CEaeo=
Subject key identifier:   24:92:F0:2D:A1:12:B0:34:E5:EE:59:0D:00:52:5A:BE:30:80:C9:B8
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       364FA0F2040869DBD6904BA186EADE034843DAB8
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:13 +0000
ROA not before:           Mon 19 Aug 2024 18:23:13 +0000
ROA not after:            Mon 18 Aug 2025 18:28:13 +0000
asID:                     271504
IP address blocks:        200.53.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4f:a0:f2:04:08:69:db:d6:90:4b:a1:86:ea:de:03:48:43:da:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:13 2024 GMT
            Not After : Aug 18 18:28:13 2025 GMT
        Subject: CN=2492F02DA112B034E5EE590D00525ABE3080C9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:41:dc:f5:1a:fe:2c:8a:67:1f:95:53:d2:
                    ea:22:93:68:05:df:f7:90:14:27:27:ac:81:fa:31:
                    0e:21:b1:68:33:3a:42:5b:b5:9e:de:3d:af:65:df:
                    69:4b:64:03:2a:e8:96:11:81:df:ab:2e:77:78:ea:
                    38:92:65:f0:27:39:c3:a7:03:b8:c8:1b:53:b0:2a:
                    3a:0c:ea:9a:db:59:cb:ed:9f:e7:73:ec:71:08:c5:
                    32:f8:fb:6a:20:09:36:50:c9:f8:39:42:d9:e8:37:
                    d2:81:44:74:1b:9d:1d:63:c1:6c:07:06:77:12:ef:
                    56:01:81:49:0c:0e:65:85:d7:e9:b8:99:7c:1c:04:
                    dc:b1:5b:9a:f5:51:88:6e:9a:97:96:44:18:8a:8e:
                    7d:2d:9a:a2:fb:f0:f3:80:a4:84:5a:b8:4c:6d:64:
                    28:49:fd:d6:4d:17:21:6d:f4:a0:ff:0c:a2:76:eb:
                    e3:6d:de:28:b6:d8:88:92:b8:e7:3a:2f:65:9b:62:
                    91:01:dc:b0:86:ae:c8:15:34:36:b6:17:2a:5c:d0:
                    c0:68:eb:87:ba:f0:66:59:5a:1f:54:e9:a4:9e:69:
                    d8:7a:41:a2:8e:f9:6b:cc:2e:6e:40:f2:6d:16:f2:
                    66:5b:be:7f:b3:11:06:ec:e1:26:4d:79:60:f2:5e:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:92:F0:2D:A1:12:B0:34:E5:EE:59:0D:00:52:5A:BE:30:80:C9:B8
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36342e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:f7:78:c0:1d:30:15:b0:51:1b:e5:13:4a:85:4a:41:cd:
         e4:e7:3b:c4:63:bf:8b:02:ab:a2:f2:87:3a:e4:74:4d:dd:27:
         ca:a9:1f:fa:d6:f7:0a:23:17:8e:f1:03:44:d4:64:e1:ac:13:
         f6:45:26:2d:d9:bf:0d:dc:e7:93:c6:53:7c:41:d2:d9:46:56:
         b2:4a:54:3b:1a:5a:8f:bd:f0:3b:f5:da:af:80:9d:c2:77:8b:
         fa:5a:fa:cb:84:0b:3e:ac:67:24:dc:ea:83:1a:31:a7:2f:b6:
         e3:43:b2:63:65:f5:69:a9:4d:45:0e:29:28:b2:64:05:77:82:
         7c:e8:11:a9:41:94:1d:f6:f9:07:39:03:a6:ac:ad:bf:73:a0:
         2e:e2:08:e6:b7:5b:57:1d:43:3d:39:08:4a:ac:75:ec:36:7e:
         15:0b:ed:ae:d4:88:ab:a1:cc:8a:5d:4d:9a:59:10:19:f8:d2:
         67:8e:d0:30:7b:f9:46:c6:f0:8e:9b:60:ae:79:cf:7d:af:9d:
         5e:c1:02:4b:87:5e:87:4c:1a:7e:49:f4:51:a2:b8:ef:51:c4:
         95:d0:25:7b:47:98:34:02:db:03:c8:93:d7:80:c4:23:c8:41:
         05:90:e3:4a:4c:4b:78:52:68:a0:1a:48:39:9a:34:95:7f:87:
         fb:36:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org