Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa
File:                     3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          DyeCd316aGTdYsvUFZP0irssH0wCGeQAcQjZ3EyZ23M=
Subject key identifier:   60:3D:1E:80:94:39:12:80:A5:E1:70:EE:99:69:36:70:50:96:6D:CB
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       6E69A02D17D79F47B6BE15B58C2CAB092E27958F
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:31 +0000
ROA not before:           Fri 05 Apr 2024 03:27:31 +0000
ROA not after:            Fri 04 Apr 2025 03:32:31 +0000
asID:                     262589
IP address blocks:        201.33.176.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:69:a0:2d:17:d7:9f:47:b6:be:15:b5:8c:2c:ab:09:2e:27:95:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:31 2024 GMT
            Not After : Apr  4 03:32:31 2025 GMT
        Subject: CN=603D1E8094391280A5E170EE9969367050966DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:39:38:49:7b:ca:15:8f:10:e8:32:85:0d:
                    e4:ff:8b:d9:86:44:a6:77:ef:8f:bf:a5:5b:8a:46:
                    ac:06:6a:5b:a9:f1:4f:d1:6f:5f:5a:6a:7d:f5:f2:
                    95:1d:e8:f2:43:a4:5c:89:80:f2:98:cf:11:85:07:
                    46:45:1a:12:de:ec:dd:fb:41:86:af:c4:43:55:e5:
                    2d:a9:86:df:2d:76:e5:7f:50:f3:cf:7a:d6:a1:17:
                    b7:85:42:91:6a:32:07:e8:02:04:0b:56:03:3a:c3:
                    a9:6e:6b:e0:8b:1c:27:0e:7a:e7:56:83:1b:35:20:
                    01:2a:76:68:57:58:73:13:dd:84:68:a5:34:31:0f:
                    95:d5:2b:f3:31:d3:50:e8:3a:5d:bf:ff:b5:ca:87:
                    70:dc:15:b9:04:89:9c:e4:c9:9e:28:cc:30:7a:59:
                    20:fe:d8:84:f4:bb:08:02:df:6e:5e:4e:76:71:ef:
                    32:d5:30:70:6c:71:a9:eb:1c:21:15:58:22:05:4e:
                    ea:05:2b:7b:9c:a7:d2:74:d6:fc:54:39:e1:db:d2:
                    32:82:a9:68:f0:c5:1a:d5:8f:4c:c6:16:4e:a4:12:
                    ee:0f:55:87:a3:74:09:53:de:63:10:53:98:e2:4a:
                    0a:ef:9e:81:74:7b:4c:7f:cd:8c:3e:a5:69:a6:ec:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3D:1E:80:94:39:12:80:A5:E1:70:EE:99:69:36:70:50:96:6D:CB
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230312e33332e3137362e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:76:f6:8b:c0:d2:1b:e4:e4:e9:2a:aa:72:04:64:01:39:
         f8:ff:af:0d:df:11:4d:49:da:82:b0:c0:c3:01:e1:cd:ca:45:
         84:92:1d:0a:a4:81:6b:86:10:90:0f:54:ac:03:06:21:b5:8b:
         67:f2:b2:2c:a9:94:db:6e:66:24:eb:cf:e7:4f:a1:13:26:a7:
         79:5a:d0:5e:b3:89:80:59:89:35:78:73:e4:61:90:28:fa:ed:
         a8:a9:42:bc:63:2d:d1:13:34:1f:3d:ac:66:b5:ed:55:0d:8c:
         91:4d:d3:cd:5b:e0:ad:0f:d7:1e:b2:32:75:8f:a1:74:de:50:
         34:31:d0:ef:0e:70:d9:92:31:2e:cd:cf:bf:d2:fe:c9:95:c7:
         66:7b:e1:8a:ac:d7:a3:dd:a4:f8:bd:37:92:ec:3a:d3:d6:c0:
         41:85:13:3e:35:da:1e:cf:46:6a:6e:47:60:84:ed:9a:eb:c7:
         31:a5:ea:1b:51:b0:6e:fc:64:05:90:ca:79:0f:06:24:d8:9f:
         99:34:c4:9e:54:e2:33:56:c3:62:68:65:25:d2:d9:31:fe:c9:
         d4:09:0e:19:5f:d2:24:dc:27:c8:e6:ac:36:4a:15:e3:15:b8:
         77:e6:c4:5b:75:57:70:03:42:25:a0:14:0e:a5:16:28:d0:3d:
         8f:37:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 05:18:49 2024 by rpki-client on console-fra.rpki-client.org