Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36362e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          GZXZUt4wYhUrPtygALaPz9QfOqGdDLrb61njwRGJfQE=
Subject key identifier:   C7:78:53:9A:C6:1D:39:01:16:14:E9:47:0B:B2:AB:7F:F7:6E:AF:9B
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       16600912AE3A4DC0F2A69A0044A34390DCEE1E20
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:14 +0000
ROA not before:           Mon 19 Aug 2024 18:23:14 +0000
ROA not after:            Mon 18 Aug 2025 18:28:14 +0000
asID:                     271504
IP address blocks:        200.53.66.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:60:09:12:ae:3a:4d:c0:f2:a6:9a:00:44:a3:43:90:dc:ee:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:14 2024 GMT
            Not After : Aug 18 18:28:14 2025 GMT
        Subject: CN=C778539AC61D39011614E9470BB2AB7FF76EAF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:f3:ae:8d:3e:c2:07:c2:6b:27:d8:84:61:
                    42:b6:d4:ba:87:e3:9c:9a:73:22:68:a8:d3:82:af:
                    98:36:8a:d7:ce:b0:17:17:29:d5:eb:44:59:bc:c0:
                    56:50:a5:b7:be:25:94:c1:a0:74:53:cc:e1:c4:ca:
                    87:02:1a:fa:4c:aa:a0:23:b5:a8:45:53:1c:1e:4a:
                    66:4b:68:f4:ff:2b:58:fc:be:a2:f8:4b:e6:5b:9a:
                    39:ff:ac:fc:82:45:a6:74:bc:8f:ff:3a:a2:ca:7c:
                    aa:93:ea:73:2c:2e:9f:ac:f4:99:2d:b5:bd:ea:47:
                    f2:51:49:b8:2f:14:bf:f7:35:50:08:22:14:dc:d2:
                    d2:8d:eb:23:63:19:d3:ad:f9:9d:8d:90:34:cf:4e:
                    55:50:da:ff:bc:95:d3:d6:99:7b:ff:1d:4c:85:43:
                    f7:99:a4:8b:f9:67:ad:f8:6c:01:ab:2b:0a:9c:b3:
                    85:44:95:40:f7:98:ba:f5:90:ee:1d:6b:27:99:7c:
                    05:70:68:6f:00:8c:44:28:0b:60:f8:dd:b7:0c:ac:
                    d7:1d:b6:24:c3:59:c1:98:8c:1d:63:dc:49:da:d9:
                    e0:3f:9a:b8:12:69:75:ab:b6:8b:1d:9b:6d:da:e6:
                    88:ff:7e:db:b9:88:47:f8:39:6d:22:f4:87:e8:91:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:78:53:9A:C6:1D:39:01:16:14:E9:47:0B:B2:AB:7F:F7:6E:AF:9B
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36362e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:2f:81:ca:85:b3:7e:43:6b:1f:e6:88:b4:33:bf:4b:ee:
         09:29:d2:90:b7:96:06:2f:33:15:66:60:f9:28:03:43:44:0a:
         3c:cc:7a:cc:6a:f8:ba:34:01:19:bb:2c:d1:ca:8f:0a:dd:52:
         78:3b:08:57:6c:af:e0:c6:ec:c4:20:e0:13:e8:6e:d1:4f:d2:
         00:18:a1:c7:24:1d:f3:68:46:2c:b6:c3:9f:2a:bd:d1:8d:9f:
         38:c1:49:92:b0:d1:a3:fd:07:46:25:2c:b0:9f:42:3e:c2:10:
         4f:b0:13:0c:75:a9:d4:0c:c5:ca:7b:ca:e1:72:c0:81:88:5e:
         97:71:c9:1c:ee:59:39:4f:c8:2d:11:a3:ab:a4:d4:80:e8:aa:
         0a:bb:6c:bd:27:d5:be:05:ea:3a:b3:d2:c0:9d:83:df:df:19:
         18:7f:87:9e:2e:a4:6f:ad:7d:d9:ce:ee:e0:72:ef:d5:0e:2f:
         d7:bc:15:ce:b7:63:8d:60:2d:d5:ed:bf:26:dc:91:62:88:c9:
         52:fc:39:78:d0:69:2c:a5:61:32:76:f1:af:fc:38:63:1a:ca:
         08:e4:1c:86:62:5e:e4:5b:29:36:65:d1:2f:14:6c:1f:b0:b6:
         19:b0:52:11:e1:1d:bf:2e:af:0d:6b:31:c8:d9:e3:9c:5f:f2:
         4b:26:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org