Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230312e38372e3230382e302f32302d3234203d3e20323632353839.roa
File:                     3230312e38372e3230382e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          Vlof+BGdNIXSq81V7YVGpxC96wj6Y2CuDbs2kWdX8RE=
Subject key identifier:   09:33:1C:96:26:A7:EF:CA:35:A9:70:8F:8A:5C:7B:76:DF:29:50:D8
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       74C474507332409D0B9BDAF1B2E659855BEBFACB
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230312e38372e3230382e302f32302d3234203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:33 +0000
ROA not before:           Fri 05 Apr 2024 03:27:33 +0000
ROA not after:            Fri 04 Apr 2025 03:32:33 +0000
asID:                     262589
IP address blocks:        201.87.208.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:74:50:73:32:40:9d:0b:9b:da:f1:b2:e6:59:85:5b:eb:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:33 2024 GMT
            Not After : Apr  4 03:32:33 2025 GMT
        Subject: CN=09331C9626A7EFCA35A9708F8A5C7B76DF2950D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:f9:21:68:3e:75:eb:3a:2c:9e:3b:0c:af:
                    77:50:05:f7:b4:6b:c3:58:c1:c6:df:c3:d2:3f:3a:
                    9e:5f:c3:cc:30:dc:9d:ba:ea:1f:eb:eb:55:a6:3a:
                    11:24:66:c1:58:0c:fc:c1:07:ea:df:14:02:d7:46:
                    0c:82:c2:0e:08:8b:61:d3:15:59:1e:41:ad:f0:9b:
                    04:10:dd:69:07:ca:c4:d7:a2:5c:3c:fa:34:7b:7f:
                    27:af:1e:75:07:87:bc:93:38:5b:05:12:48:a0:ba:
                    72:a4:79:11:25:bf:51:ae:6e:c0:5b:19:31:4c:df:
                    35:8f:80:fa:f1:e9:ae:19:8d:ea:97:96:46:f3:77:
                    36:4a:4a:e9:b4:10:72:de:d3:8e:6b:01:83:f7:11:
                    78:52:a8:7b:ce:27:88:a3:10:ec:25:08:c8:39:0a:
                    93:9e:48:11:24:3e:c0:2a:16:f3:cb:71:22:ea:60:
                    9c:4f:e5:d6:17:ea:ad:06:31:c5:ce:18:56:a7:dc:
                    51:0f:c0:fc:de:94:12:18:4f:7c:3c:89:0a:ad:2c:
                    2e:9b:ea:e0:27:e4:2f:9f:c3:b2:8f:c2:62:27:98:
                    1b:af:df:09:7a:c6:ba:0e:18:74:cf:76:70:fb:25:
                    cb:76:34:82:ef:ab:3e:15:4a:c9:f8:6a:25:61:2f:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:1C:96:26:A7:EF:CA:35:A9:70:8F:8A:5C:7B:76:DF:29:50:D8
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3230312e38372e3230382e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:93:c5:a3:1f:a8:23:f5:2a:ce:d6:e0:ce:2c:e1:12:ac:
         a3:fe:14:ce:eb:a4:5e:8e:6d:39:16:78:df:70:5f:e3:af:2b:
         c9:d8:8d:fc:eb:98:5b:3f:38:2d:cb:c7:b7:ff:c1:c9:3e:a7:
         b3:c3:a2:27:fc:39:0e:5e:5f:38:49:3d:6d:13:44:ed:c5:12:
         e0:ca:fc:b3:ad:01:82:d5:35:18:7f:c5:20:ce:61:fc:ad:0f:
         c9:f4:d0:b5:d0:99:ad:cb:ff:53:69:af:9e:e5:37:b7:a5:87:
         e3:ab:3c:8f:29:66:08:42:c2:86:c6:18:9d:16:ac:9c:64:8e:
         62:64:6e:89:a4:4e:3d:20:41:a7:2b:e3:b4:41:ab:36:d2:d0:
         d5:cb:66:0f:d8:d1:fd:67:dc:2f:96:a5:bb:8d:2e:0c:a6:0d:
         87:73:5e:12:20:f9:8d:fe:1e:ec:a8:cd:ab:43:cf:a3:40:ac:
         65:c8:05:f8:60:d0:ed:17:45:7c:3a:89:f0:47:a9:60:dd:34:
         86:e6:00:fc:10:ad:56:0b:3f:6f:0e:0d:c2:4c:db:84:a9:d6:
         3b:e9:7b:32:92:3f:22:d4:0f:c9:a1:1b:cf:0e:49:39:a7:d6:
         e0:e5:66:7f:11:ba:28:f9:46:98:70:47:c2:55:fc:ee:95:9e:
         7d:1b:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 05:18:49 2024 by rpki-client on console-fra.rpki-client.org