Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3234203d3e20323730383236.roa
File:                     3230302e3231392e32382e302f32322d3234203d3e20323730383236.roa (raw, json)
Hash identifier:          qIKWjVmrQMe2oGAv1NcpvI0wLcWu4H16XwFz1EsWens=
Subject key identifier:   5D:6B:61:DD:2B:5F:10:E8:1D:96:85:2F:FC:EC:77:3C:A0:15:7E:44
Certificate issuer:       /CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
Certificate serial:       47E0C0032BB803F18F8AAF12E2EEB680C931BAD4
Authority key identifier: D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3234203d3e20323730383236.roa
Signing time:             Fri 02 Aug 2024 19:20:23 +0000
ROA not before:           Fri 02 Aug 2024 19:15:23 +0000
ROA not after:            Fri 01 Aug 2025 19:20:23 +0000
asID:                     270826
IP address blocks:        200.219.28.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e0:c0:03:2b:b8:03:f1:8f:8a:af:12:e2:ee:b6:80:c9:31:ba:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D71606B1A6F25EDCF6323F7F5E7D161516E193C4
        Validity
            Not Before: Aug  2 19:15:23 2024 GMT
            Not After : Aug  1 19:20:23 2025 GMT
        Subject: CN=5D6B61DD2B5F10E81D96852FFCEC773CA0157E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:84:23:44:02:55:1b:b0:2a:1b:51:2d:cf:
                    0d:20:fa:2c:82:43:fb:ee:98:77:6c:07:88:bc:e8:
                    2e:a9:a0:bf:9b:22:07:cc:16:ed:81:90:aa:3f:d9:
                    89:15:f9:bb:8b:08:74:7e:0e:b7:c4:44:60:85:b5:
                    33:5d:fe:31:7e:5f:eb:50:48:ed:4a:b7:90:8e:c7:
                    79:7e:ea:bb:ed:ac:2c:1d:b1:6e:45:f5:0d:a8:8c:
                    cd:d1:63:f3:c4:10:76:19:83:e2:f1:94:86:65:63:
                    12:3d:03:c9:eb:47:e9:b5:a7:c0:0e:25:59:03:5c:
                    ac:ed:8f:08:34:09:d7:13:be:72:ee:03:fe:2a:5b:
                    d7:03:06:39:b1:57:87:f7:7c:fe:c9:a0:80:78:87:
                    1b:cc:65:ce:fc:9d:27:75:3e:16:1f:29:4d:d2:b3:
                    89:e3:6c:91:6b:bb:2a:68:56:c8:da:12:90:ab:89:
                    35:eb:e0:6f:8f:19:b1:28:2b:45:e4:a7:f4:cf:68:
                    50:3b:5b:03:ad:2f:05:5c:26:22:c3:05:56:41:77:
                    77:ee:83:1b:5c:9d:81:30:3a:27:03:5c:48:14:23:
                    6f:3c:69:58:40:48:f5:20:c0:03:57:05:b8:32:28:
                    cf:0a:3b:c5:d2:c7:3a:db:4f:81:3e:fd:ad:b5:41:
                    ee:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6B:61:DD:2B:5F:10:E8:1D:96:85:2F:FC:EC:77:3C:A0:15:7E:44
            X509v3 Authority Key Identifier:
                keyid:D7:16:06:B1:A6:F2:5E:DC:F6:32:3F:7F:5E:7D:16:15:16:E1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D71606B1A6F25EDCF6323F7F5E7D161516E193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3234203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:39:0f:b4:3a:76:59:b9:15:9f:a5:2a:80:80:a8:25:d7:b9:
         29:83:66:59:41:a9:82:32:f5:a4:2a:3d:e8:08:3e:64:85:7b:
         ea:22:1e:78:85:9e:f8:bf:de:e0:b3:2c:87:30:11:6a:1c:ae:
         81:08:55:0f:70:67:f3:8d:df:5d:a4:ef:ef:c2:20:f6:e5:a7:
         31:14:36:52:a3:90:e8:e9:60:d3:4e:53:df:52:e3:09:b6:0f:
         5a:2b:52:6a:63:42:10:f5:32:5b:86:ef:c1:61:dc:7b:41:80:
         5f:fd:b1:32:81:84:a8:70:39:23:d8:88:3c:d8:15:f5:26:77:
         cd:c7:aa:ee:f5:e9:83:93:ca:5b:87:c0:5b:18:a0:42:d7:44:
         5a:3f:32:de:ce:3a:9b:2c:d0:71:77:d8:96:b6:c6:e0:85:dd:
         65:4f:fd:60:65:78:97:f0:8e:b9:e3:bd:61:b5:d6:41:ab:5f:
         14:45:44:03:3e:d3:aa:29:1e:2d:53:ca:74:04:d2:e2:b7:d2:
         5a:fd:06:14:50:c1:25:2b:df:14:82:d6:d4:17:98:68:b6:92:
         40:3a:f4:95:c4:ca:82:33:9c:09:96:bf:d1:ce:f9:54:b8:85:
         62:ca:f9:41:7b:d1:1f:ed:5d:55:24:6f:57:79:9a:e8:54:db:
         21:8d:4c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 04:52:23 2024 by rpki-client on console-fra.rpki-client.org