Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3131312e302f32342d3234203d3e20323730333239.roa
File:                     3230312e3231362e3131312e302f32342d3234203d3e20323730333239.roa (raw, json)
Hash identifier:          YsbypgAguO687dN1jszkw78cS565dB/V4P69/oQCS/E=
Subject key identifier:   12:4D:CB:2C:41:88:FA:AF:E9:3A:50:91:08:58:9C:43:BB:70:E5:B3
Certificate issuer:       /CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
Certificate serial:       1128F7ACF32081E6937A8B43460DF044456FF534
Authority key identifier: 95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3131312e302f32342d3234203d3e20323730333239.roa
Signing time:             Thu 27 Jun 2024 20:18:45 +0000
ROA not before:           Thu 27 Jun 2024 20:13:45 +0000
ROA not after:            Thu 26 Jun 2025 20:18:45 +0000
asID:                     270329
IP address blocks:        201.216.111.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:28:f7:ac:f3:20:81:e6:93:7a:8b:43:46:0d:f0:44:45:6f:f5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=950902D05DDE923B7DA014B3AA90F4258FD879B5
        Validity
            Not Before: Jun 27 20:13:45 2024 GMT
            Not After : Jun 26 20:18:45 2025 GMT
        Subject: CN=124DCB2C4188FAAFE93A509108589C43BB70E5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:b1:e0:06:e7:83:e4:bc:8e:2b:0f:6a:6b:
                    ad:e3:80:ed:01:f6:ad:ec:b3:70:88:d9:25:29:ed:
                    09:74:c1:ff:98:61:19:df:08:09:fa:a0:9e:a8:4c:
                    bb:e1:a3:7f:e1:fc:eb:ac:2b:75:41:a6:4a:0d:1c:
                    23:8c:7d:88:71:15:d6:af:36:49:01:23:02:87:16:
                    f0:df:ce:c0:de:c8:e6:a5:e1:0e:52:9d:ca:18:36:
                    ce:90:66:7e:0d:67:02:1e:dc:49:96:53:31:54:e6:
                    db:0a:bd:1d:7e:55:3d:1b:29:8f:af:b2:57:ad:ca:
                    b1:7e:06:ec:f5:d7:5c:6f:e7:f1:43:3e:04:60:bb:
                    f9:44:b6:24:eb:7f:24:7e:98:48:50:99:35:1f:81:
                    8a:43:41:fa:ec:0f:12:82:2e:89:87:43:f5:91:b2:
                    35:d7:01:4a:7e:bb:f4:59:39:5c:c6:12:bd:16:ee:
                    33:c3:4e:11:a9:03:09:db:4b:53:f2:2d:c2:a9:0c:
                    3f:f9:84:fd:f6:2d:f6:3f:8e:38:4a:82:4a:44:da:
                    7b:6d:d1:70:39:a9:e0:12:49:e0:1e:b3:c1:c3:0a:
                    e6:40:0d:08:90:6d:08:17:12:53:71:07:6d:fc:54:
                    c2:6f:e1:3b:9a:2d:f1:1d:c7:1d:98:d0:ad:a6:f5:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:CB:2C:41:88:FA:AF:E9:3A:50:91:08:58:9C:43:BB:70:E5:B3
            X509v3 Authority Key Identifier:
                keyid:95:09:02:D0:5D:DE:92:3B:7D:A0:14:B3:AA:90:F4:25:8F:D8:79:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/950902D05DDE923B7DA014B3AA90F4258FD879B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950902D05DDE923B7DA014B3AA90F4258FD879B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EoiV3xubDGadVmaB1vSZvB6NZCcQzHHJBHZZQVkAdaf1/0/3230312e3231362e3131312e302f32342d3234203d3e20323730333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:55:fb:73:4f:68:23:55:1f:34:b6:41:b3:90:b1:e0:37:c7:
         14:d6:32:3f:b7:86:a9:ff:c6:de:96:58:b5:36:ea:b3:25:ea:
         34:56:ab:3b:5a:fb:88:64:46:47:53:a3:ab:10:dd:89:97:a2:
         2e:50:dc:9f:fd:48:15:93:77:3f:c1:fd:4b:b2:5b:9e:bf:16:
         56:99:50:dd:50:6e:30:e2:c3:39:25:29:89:ab:4c:5a:ac:f6:
         90:52:da:02:91:1b:41:69:11:dc:6d:57:c9:cc:ab:b9:49:a5:
         81:34:8e:a6:9d:1c:a2:cb:64:59:63:3b:7b:6f:0c:00:3b:0c:
         5d:5c:ee:fc:f2:37:00:2c:2d:da:0f:79:44:18:f9:43:4a:f1:
         68:da:3e:5f:de:9e:ee:f2:75:09:f6:98:2c:fa:13:29:9b:b7:
         24:18:3b:d8:74:8f:9a:ac:5b:b2:c3:dd:fb:58:a3:19:3c:cd:
         1c:e3:4f:75:74:50:f3:f8:ad:0f:0e:40:75:1b:5f:3e:fe:27:
         36:d8:2c:b1:5b:bb:5f:17:c3:71:1e:db:7e:61:09:93:b1:ad:
         d2:f8:ef:c2:ae:5f:50:2a:11:87:7e:c7:3f:90:c8:44:2c:c1:
         2a:17:ec:27:a9:9a:c6:24:9c:8a:cc:61:b1:24:4a:3e:7e:69:
         ce:15:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 05:44:45 2024 by rpki-client on console-ams.rpki-client.org