Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3131302e302f32342d3234203d3e20323730333239.roa
File:                     3230312e3231362e3131302e302f32342d3234203d3e20323730333239.roa (raw, json)
Hash identifier:          MXW1mr4vMVpUFxMasc3pE4fmeVQdXNzb623CzXOOfZo=
Subject key identifier:   72:F4:81:53:5C:66:E9:0D:2D:B1:27:59:A7:D2:A0:80:15:A7:F4:11
Certificate issuer:       /CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
Certificate serial:       626E2579E8159F204778A274816145CD38EEB3F9
Authority key identifier: 95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3131302e302f32342d3234203d3e20323730333239.roa
Signing time:             Thu 27 Jun 2024 20:18:42 +0000
ROA not before:           Thu 27 Jun 2024 20:13:42 +0000
ROA not after:            Thu 26 Jun 2025 20:18:42 +0000
asID:                     270329
IP address blocks:        201.216.110.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6e:25:79:e8:15:9f:20:47:78:a2:74:81:61:45:cd:38:ee:b3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
        Validity
            Not Before: Jun 27 20:13:42 2024 GMT
            Not After : Jun 26 20:18:42 2025 GMT
        Subject: CN=72F481535C66E90D2DB12759A7D2A08015A7F411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:d4:87:11:c6:56:19:f5:fe:22:a6:b7:b4:
                    1a:5c:77:80:0a:d5:55:6c:3c:47:92:14:d3:7b:66:
                    91:c8:6c:60:d6:4e:34:86:26:49:19:a9:e8:57:d1:
                    e0:be:2a:25:e7:f8:6f:b9:ab:15:ff:0f:8d:b9:11:
                    26:ac:09:cd:13:b5:9c:d3:7c:65:41:99:8d:fa:b5:
                    a6:0b:2b:61:46:25:d0:00:78:46:4a:b2:be:ea:a1:
                    83:03:77:38:16:61:69:9e:ce:ed:21:86:51:41:d8:
                    a8:8c:6f:b9:7f:a5:6b:f9:37:3f:37:d2:cc:b7:1e:
                    b0:82:52:3b:ff:44:5c:b9:67:3e:00:9d:26:a4:29:
                    11:91:36:4d:f7:cf:51:c9:05:5a:ff:3a:78:00:ed:
                    51:59:88:42:e6:52:89:0a:57:d2:e5:9f:b5:d0:c4:
                    de:ee:88:6f:98:e8:f5:0e:87:35:b5:7a:34:d0:00:
                    f6:b4:60:51:8c:ad:9d:ef:d9:b7:b8:3e:11:03:1c:
                    b6:21:40:a1:a5:25:40:51:09:ed:e7:52:73:99:5b:
                    c0:68:01:ab:61:dc:90:dc:d9:c9:4b:a8:54:b3:e9:
                    e2:22:4d:43:57:0f:a3:00:fa:de:41:19:7a:8c:da:
                    0c:4c:31:b8:56:5f:0a:b4:e6:1b:80:f4:50:2d:20:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:81:53:5C:66:E9:0D:2D:B1:27:59:A7:D2:A0:80:15:A7:F4:11
            X509v3 Authority Key Identifier:
                keyid:95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/950902D05DDE923B7DA014B3AA90F4258FD879B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3131302e302f32342d3234203d3e20323730333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:fb:99:64:e5:61:8f:ea:e2:95:1f:21:cf:e9:3c:7b:88:
         95:9f:f0:55:1d:fb:cd:2d:64:c9:9f:18:cb:bd:8b:60:d0:f5:
         16:10:a8:33:8b:6f:34:06:b0:1d:3d:fe:fe:95:75:5a:ed:79:
         f6:ef:6c:fd:d1:3d:0c:17:3b:03:87:63:1b:81:b3:bd:db:73:
         65:58:37:66:cc:10:7a:a5:c3:62:44:73:cd:86:fc:87:e1:01:
         ab:65:74:eb:6a:d0:2a:25:43:ba:9f:66:c4:17:63:1f:7d:d8:
         f2:bb:a3:dd:92:e7:19:1a:5d:98:2c:b4:d7:e0:88:ad:84:c6:
         97:89:68:2c:47:c0:55:13:df:c3:a6:ae:1d:6e:35:a4:7f:bd:
         44:88:7a:55:d8:2b:71:00:2f:95:8f:22:f1:03:86:54:94:0e:
         02:2a:c7:c7:0e:73:2c:a9:06:4c:2f:0b:eb:ed:bb:d6:d7:5a:
         97:40:6e:fd:52:bb:33:c9:a1:da:27:a3:19:e2:e2:2c:e7:10:
         b2:6f:47:63:6b:d9:68:9f:61:64:d1:43:97:18:19:32:b5:22:
         bd:1b:e9:02:50:a2:af:75:b8:3d:50:ab:34:b6:cd:71:54:3f:
         cc:e7:04:22:97:da:45:98:7e:c4:10:40:d5:7a:67:11:32:90:
         2b:82:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 05:10:06 2024 by rpki-client on console-fra.rpki-client.org