Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36352e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          QpAI96spe3l2rTNN8qNlm6Q4SyV7OIoTsG33CyaD2Cc=
Subject key identifier:   D5:43:64:44:A9:5D:8A:8E:B2:30:9E:D5:80:FF:A4:6E:A1:3A:58:CD
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       07B1BC17AFEFDBB70D268AF6386259527EC720
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:13 +0000
ROA not before:           Mon 19 Aug 2024 18:23:13 +0000
ROA not after:            Mon 18 Aug 2025 18:28:13 +0000
asID:                     271504
IP address blocks:        200.53.65.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b1:bc:17:af:ef:db:b7:0d:26:8a:f6:38:62:59:52:7e:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:13 2024 GMT
            Not After : Aug 18 18:28:13 2025 GMT
        Subject: CN=D5436444A95D8A8EB2309ED580FFA46EA13A58CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:6f:b4:d7:30:04:8f:f9:9e:97:86:28:73:
                    58:00:d4:52:56:6a:3f:56:17:8d:51:eb:36:c7:98:
                    82:cf:e7:df:9b:c0:b1:cf:ac:92:ae:32:3e:7e:ba:
                    5d:cb:5a:1e:05:3d:ff:bd:00:04:0c:5e:b3:a0:d7:
                    1e:c2:a4:a9:75:46:94:ae:8f:b9:37:e4:69:41:06:
                    41:da:3a:34:e0:e2:76:93:c6:fc:52:78:73:02:e1:
                    1f:08:82:b0:47:ed:a8:df:9c:e2:90:7d:70:a7:2a:
                    36:1d:e6:b7:2b:f2:d6:84:8d:e7:c6:98:cc:9e:5a:
                    4a:69:2e:42:6d:61:a8:43:13:2e:94:b1:93:3b:9d:
                    99:97:c1:fc:c2:c9:84:19:c7:e7:d2:62:3e:00:b3:
                    73:76:f2:24:ad:94:3c:25:f3:82:b5:3e:06:71:c0:
                    f8:08:67:e1:42:04:9e:7b:c9:71:ac:23:b0:42:62:
                    43:14:81:06:ff:dd:46:b3:60:a9:8b:66:f0:b4:27:
                    cb:05:76:72:61:2b:f2:ac:f9:7b:a1:5f:f5:9c:45:
                    98:b6:4b:1b:87:9e:1e:af:ad:83:fd:5b:2a:c3:07:
                    f8:ef:73:75:49:e6:4f:a8:bc:2e:77:60:1a:ba:cd:
                    17:9a:98:fe:1d:be:7e:ae:23:0d:70:0d:e4:f0:9e:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:64:44:A9:5D:8A:8E:B2:30:9E:D5:80:FF:A4:6E:A1:3A:58:CD
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36352e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:aa:67:31:bf:e5:1e:8f:cb:2b:95:04:77:7e:61:70:1d:
         27:f3:2c:32:10:da:e5:81:ff:4e:da:49:fa:0f:1e:30:5b:5c:
         84:f3:61:04:1d:f0:16:27:2f:20:31:a4:61:dc:42:27:86:a4:
         ac:64:71:3b:1d:97:4d:b5:74:62:9f:34:18:34:00:d9:54:44:
         4d:96:48:14:13:b0:30:06:53:91:b1:41:5b:0f:70:8b:ae:d1:
         28:ea:67:44:ae:e9:2c:30:0d:cb:8d:f2:3f:e6:97:78:76:d6:
         57:75:36:9a:d2:02:c7:1a:4d:f4:20:97:c2:53:ab:6d:bd:e6:
         19:43:d2:12:36:9c:ad:2f:53:09:a1:a9:0b:41:5b:16:00:e4:
         9c:d6:e7:51:98:d0:9b:d3:ad:e6:da:95:8a:42:26:88:72:40:
         8d:28:30:30:78:e1:55:0b:49:d9:bd:4d:2c:14:a9:34:5d:a3:
         5f:84:77:8f:23:d1:7d:7a:c4:72:02:9c:1e:94:0f:02:44:0f:
         4e:a2:43:ce:4d:76:89:57:51:9f:38:67:b7:61:f0:79:12:3c:
         21:35:92:ee:38:6c:c4:8e:47:8e:ed:62:9c:87:62:cb:f4:7d:
         60:5d:f4:8d:ba:8c:ec:55:34:44:d0:2f:df:1a:96:56:8a:01:
         52:70:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:41 2024 by rpki-client on console-ams.rpki-client.org