Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
File:                     3230302e35332e36372e302f32342d3234203d3e20323731353034.roa (raw, json)
Hash identifier:          vIWfR9pMSQGpB0Jv/5yeEW8b5IsZ0cKe728SI40+7Kg=
Subject key identifier:   26:90:A0:98:79:12:0A:14:8B:C4:A5:93:6C:8D:3E:BF:76:DE:31:6E
Certificate issuer:       /CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
Certificate serial:       42B1C9A4C6CDAEE8AC63B0743AFD197E723A9941
Authority key identifier: 8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa
Signing time:             Mon 19 Aug 2024 18:28:14 +0000
ROA not before:           Mon 19 Aug 2024 18:23:14 +0000
ROA not after:            Mon 18 Aug 2025 18:28:14 +0000
asID:                     271504
IP address blocks:        200.53.67.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:c9:a4:c6:cd:ae:e8:ac:63:b0:74:3a:fd:19:7e:72:3a:99:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9
        Validity
            Not Before: Aug 19 18:23:14 2024 GMT
            Not After : Aug 18 18:28:14 2025 GMT
        Subject: CN=2690A09879120A148BC4A5936C8D3EBF76DE316E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:7d:c7:fb:dc:a9:5c:d4:6c:2a:dd:e5:ce:
                    b1:9f:f4:64:06:fc:41:26:60:5e:5b:f7:c7:56:73:
                    c3:72:13:4d:8c:e0:17:e2:1c:c5:84:66:c0:d2:6b:
                    59:b6:78:ce:01:fd:4d:d3:78:24:14:78:96:87:15:
                    bc:8d:85:77:a7:7b:8d:98:59:61:b4:33:2c:36:e3:
                    f7:05:2c:de:d6:15:c0:be:74:4e:ae:7f:fa:02:66:
                    83:10:36:41:b8:2f:b0:61:85:1f:f8:80:5f:6b:7a:
                    13:20:da:be:f8:ce:62:16:79:75:cb:4e:96:7e:1f:
                    81:56:01:c2:42:51:87:4b:c5:50:78:1a:64:be:29:
                    4a:46:65:14:11:3e:9c:ab:5d:a1:bd:29:e3:98:f3:
                    18:36:3f:bb:ce:2e:31:a5:24:8f:f3:1d:d5:8a:63:
                    cd:63:fb:8f:67:7f:22:de:e0:c6:a7:a9:f8:e0:d9:
                    17:04:b8:dd:8c:be:0a:f3:45:3f:7b:54:2b:bb:30:
                    69:8b:e8:e1:55:05:2e:3f:9b:9f:fb:d0:38:cb:fd:
                    37:96:9f:58:e1:e6:a3:15:79:af:1e:79:be:18:ee:
                    90:27:40:04:ff:18:c6:5b:82:24:6e:1b:35:0e:de:
                    dd:b5:6a:ff:0d:1d:67:0c:ec:c0:7f:d7:91:41:67:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:A0:98:79:12:0A:14:8B:C4:A5:93:6C:8D:3E:BF:76:DE:31:6E
            X509v3 Authority Key Identifier:
                keyid:8C:EE:AF:02:6D:5A:D9:1D:D7:1E:09:E7:7A:F7:A9:0E:DB:59:6A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEEAF026D5AD91DD71E09E77AF7A90EDB596AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/2/3230302e35332e36372e302f32342d3234203d3e20323731353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:4b:ac:84:10:5c:5a:e7:26:7c:6b:b4:05:57:64:a6:3f:21:
         9c:98:7d:f1:b7:15:84:06:40:cb:4a:b3:80:59:2a:3c:c0:3d:
         66:34:1b:0e:80:62:d8:22:a9:d4:5c:2a:77:1f:30:33:9e:e5:
         12:f7:a5:87:f2:af:b5:ca:6b:8e:64:b1:0c:6c:a2:cc:84:f9:
         1a:ab:7e:4c:58:f8:92:0d:a5:f5:fb:75:0a:13:99:b0:52:27:
         ab:00:0d:98:06:d8:da:10:f9:f4:f1:d5:42:02:48:99:26:86:
         59:7b:fc:de:ab:6d:bd:3b:94:7d:da:4c:0f:39:e4:a5:45:39:
         6b:46:ab:e3:cb:de:1d:2a:5a:dd:6d:b2:db:ae:71:3f:c0:ef:
         1f:a3:6e:ba:68:bd:8f:6d:b0:86:fd:bb:af:ee:81:92:db:c3:
         fb:5b:58:eb:0c:45:e3:34:ed:fd:fe:41:9a:d3:03:32:4c:9d:
         9b:ca:ae:55:50:c3:db:a5:5a:c1:c3:32:63:15:6a:8f:00:f1:
         3e:59:44:02:8d:c6:c1:7a:ed:fe:a1:44:6d:39:b9:83:a4:1c:
         96:1d:3f:16:c2:7d:4e:ef:c8:fd:17:23:52:21:84:ad:6b:35:
         3f:15:56:c6:1d:45:64:72:c3:65:ce:d5:ea:3f:b5:f3:db:3b:
         5f:4a:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:29:21 2024 by rpki-client on console-fra.rpki-client.org