Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3130392e302f32342d3234203d3e20323730333239.roa
File:                     3230312e3231362e3130392e302f32342d3234203d3e20323730333239.roa (raw, json)
Hash identifier:          CBRcs15xyDW5RLtV8STDojsJ0DxhLGXr52BgOgvk/Gk=
Subject key identifier:   E8:C9:75:97:C1:31:36:30:F5:10:E3:4A:C1:E6:01:A2:47:DB:CB:BE
Certificate issuer:       /CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
Certificate serial:       3869B057EE976B9828DEB67A87D91465CC4609D7
Authority key identifier: 95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3130392e302f32342d3234203d3e20323730333239.roa
Signing time:             Thu 27 Jun 2024 20:18:28 +0000
ROA not before:           Thu 27 Jun 2024 20:13:28 +0000
ROA not after:            Thu 26 Jun 2025 20:18:28 +0000
asID:                     270329
IP address blocks:        201.216.109.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:69:b0:57:ee:97:6b:98:28:de:b6:7a:87:d9:14:65:cc:46:09:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
        Validity
            Not Before: Jun 27 20:13:28 2024 GMT
            Not After : Jun 26 20:18:28 2025 GMT
        Subject: CN=E8C97597C1313630F510E34AC1E601A247DBCBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:f0:2d:22:f0:88:9a:c2:29:b1:f5:b4:af:
                    fb:02:1f:36:32:4f:96:58:e3:68:e8:b8:1b:3e:62:
                    50:e9:77:f4:b7:56:2b:33:c7:6e:1b:36:39:22:25:
                    25:33:96:d8:0f:1a:7d:5d:8f:57:77:f9:74:8b:a2:
                    c7:7b:09:a4:0f:bb:91:45:df:19:65:25:e6:b5:61:
                    02:76:70:47:a4:6f:37:b7:97:5a:62:c0:57:08:ee:
                    41:ac:f1:a9:72:c1:aa:38:dc:e1:97:40:a6:7b:0f:
                    c9:54:ce:d2:19:dd:b2:fe:58:a9:84:4e:16:33:50:
                    76:ec:4a:d6:39:2c:d8:62:a1:22:6d:8b:b3:80:86:
                    fd:38:8b:b6:d1:de:1b:cc:a4:12:df:05:5d:83:e4:
                    41:28:e1:97:2b:4e:18:61:c7:94:15:54:9b:db:48:
                    fc:30:d5:5a:26:da:de:4e:d3:dd:45:fc:eb:33:d9:
                    34:b7:b4:93:17:48:0e:05:82:f9:92:36:4d:6f:be:
                    3a:6a:66:a3:65:ff:92:93:22:c5:ae:c7:d4:eb:78:
                    53:a8:9e:32:69:17:f5:c9:35:9d:53:f1:22:77:3d:
                    2e:f6:21:6b:ee:c1:15:3b:59:8d:f8:56:30:76:a8:
                    6f:ec:41:7e:63:ee:0c:61:ab:cd:5a:9a:43:a7:d4:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C9:75:97:C1:31:36:30:F5:10:E3:4A:C1:E6:01:A2:47:DB:CB:BE
            X509v3 Authority Key Identifier:
                keyid:95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/950902D05DDE923B7DA014B3AA90F4258FD879B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3130392e302f32342d3234203d3e20323730333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:3e:d3:ed:d8:7a:88:9b:da:98:6b:ac:37:73:9b:8c:16:
         bf:1f:6f:6b:47:66:34:c7:24:59:88:62:a5:07:fb:6a:c9:7e:
         cc:c6:d3:26:2b:9e:80:7d:a5:e7:8e:e2:a7:16:eb:a0:7b:4d:
         e3:1b:a5:91:eb:1e:62:02:1d:c4:44:05:de:20:29:76:5f:94:
         95:df:60:f0:cc:0c:74:25:f8:56:8f:d4:2d:20:23:a5:1a:eb:
         c8:94:48:2d:5b:4a:1d:97:7a:1f:95:59:d0:d0:93:31:c9:6b:
         21:e6:38:b2:0c:5b:ce:59:38:b4:d9:fa:11:eb:f9:de:b2:f6:
         13:c1:10:79:7d:8b:a9:1d:28:b7:0d:37:d9:b0:a4:b0:27:7e:
         5f:1d:14:33:86:5f:f3:99:9d:88:ae:f9:8d:99:34:8e:85:56:
         cf:63:c9:9c:43:63:b2:bf:58:d3:2c:04:87:f0:1c:ed:2b:50:
         0a:e9:55:85:05:bb:44:34:2e:3d:74:44:fd:26:9c:b6:59:f6:
         e9:d1:49:1b:b3:87:51:fe:11:6d:fe:43:f3:77:ad:98:86:fc:
         d9:e3:fd:03:2a:df:9a:7d:b5:ce:3d:e5:8a:94:fb:c4:9e:67:
         72:eb:81:b9:f4:a3:a2:4d:f2:74:b7:fc:fb:81:a0:b5:33:ca:
         74:b5:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 05:44:45 2024 by rpki-client on console-ams.rpki-client.org