Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/3134332e3230322e3138342e302f32322d3332203d3e20323634303736.roa
File:                     3134332e3230322e3138342e302f32322d3332203d3e20323634303736.roa (raw, json)
Hash identifier:          29sUvF9HqQMGPZeHPHS6Jx9wgRIt5GPSbGO0EZDE7As=
Subject key identifier:   26:3A:73:1E:76:CB:F6:66:DB:1A:46:25:FE:03:86:FC:62:03:88:C3
Certificate issuer:       /CN=D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07
Certificate serial:       49D8E608C609ED17DB8DA03A8B49B870E3B83FFF
Authority key identifier: D2:25:BD:31:4D:5C:EA:6E:CF:BE:E9:60:E2:57:F1:9E:4D:7D:0C:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/3134332e3230322e3138342e302f32322d3332203d3e20323634303736.roa
Signing time:             Fri 26 Apr 2024 19:57:31 +0000
ROA not before:           Fri 26 Apr 2024 19:52:31 +0000
ROA not after:            Fri 25 Apr 2025 19:57:31 +0000
asID:                     264076
IP address blocks:        143.202.184.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d8:e6:08:c6:09:ed:17:db:8d:a0:3a:8b:49:b8:70:e3:b8:3f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07
        Validity
            Not Before: Apr 26 19:52:31 2024 GMT
            Not After : Apr 25 19:57:31 2025 GMT
        Subject: CN=263A731E76CBF666DB1A4625FE0386FC620388C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:19:c5:36:43:05:66:84:20:49:1f:4b:6f:
                    7b:d2:15:87:0b:82:c5:0c:b8:0d:fe:44:c9:4d:cc:
                    c8:d3:94:69:8e:9f:a4:be:14:2d:79:d5:c1:59:04:
                    93:99:92:ed:ef:f1:34:c5:e9:d7:0e:19:43:26:b2:
                    0f:5b:af:12:96:2f:60:5d:4f:60:05:1d:6d:0c:82:
                    2a:16:41:34:be:48:71:18:8e:9c:34:a9:fd:49:dd:
                    47:3f:1e:42:ba:e3:7d:ed:c3:3f:21:03:35:ca:e4:
                    82:4d:ba:93:78:23:b0:7e:0a:06:e2:0e:ad:3a:9b:
                    82:4d:0f:db:a8:b6:00:7b:20:12:7f:0c:30:11:b8:
                    91:f8:7d:ff:53:1d:ff:45:51:df:ec:ae:8c:db:9d:
                    58:5d:49:ec:63:99:d6:3b:ad:71:59:e1:35:ef:84:
                    31:cf:75:b2:e4:1f:41:82:16:4d:ea:0b:21:c5:dc:
                    36:e0:64:47:58:ee:6a:83:bb:12:3f:93:5c:50:b1:
                    04:9b:82:c1:75:cb:4c:9a:85:1b:81:03:11:50:fb:
                    ca:d0:e7:15:fa:b8:f4:76:55:50:7c:86:1b:ed:f6:
                    73:a6:3d:45:63:1e:13:01:e9:2a:df:6d:fa:ef:86:
                    fa:6b:30:5f:67:6e:cf:08:eb:ae:b0:9b:05:c5:56:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:73:1E:76:CB:F6:66:DB:1A:46:25:FE:03:86:FC:62:03:88:C3
            X509v3 Authority Key Identifier:
                keyid:D2:25:BD:31:4D:5C:EA:6E:CF:BE:E9:60:E2:57:F1:9E:4D:7D:0C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D225BD314D5CEA6ECFBEE960E257F19E4D7D0C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/3134332e3230322e3138342e302f32322d3332203d3e20323634303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:da:f7:aa:7d:ab:60:38:f6:7d:c2:d5:b8:ea:11:54:7f:4f:
         d5:54:ca:8f:f3:2e:36:bc:6f:d1:79:6e:7a:88:7b:8d:0a:3e:
         5f:5d:50:5b:07:53:3e:6c:00:a6:59:51:ae:d7:bf:ed:0c:50:
         4a:95:7d:12:7e:51:2e:6c:37:34:38:da:35:73:35:b0:6a:64:
         c8:73:4d:9c:06:18:cc:37:64:f3:c4:64:f1:4b:ce:45:1e:48:
         0b:5b:a0:2f:04:94:d2:00:b0:ef:08:85:6e:02:99:fe:e1:b8:
         28:60:4b:3e:87:21:61:32:3d:da:1e:04:f7:e6:e0:bb:f5:ac:
         1a:b5:11:a3:35:97:48:e3:f4:8d:01:03:4b:5b:7a:36:84:3c:
         41:f5:38:7e:d3:62:9f:c0:7f:b0:15:9e:6a:8e:ba:5c:5c:8d:
         f5:00:37:ae:2b:d0:43:dc:46:69:3e:ff:0f:f9:ca:9e:ec:ab:
         5f:bb:02:b4:33:bd:42:01:7c:76:22:84:73:18:9a:77:35:75:
         98:0e:d4:8d:a7:90:88:fb:de:37:a4:0e:00:a8:21:32:e3:d9:
         93:2e:2f:85:34:bb:21:48:5a:4f:44:e3:eb:be:0c:be:34:d3:
         a8:da:22:75:34:2e:9a:df:fc:3b:ba:7a:e0:67:18:d1:47:bb:
         3f:f7:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----