Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa
File:                     3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa (raw, json)
Hash identifier:          pt/sZOhLygqb1bhtBRK17QjBQeNVxr15yHR/PJaRsJU=
Subject key identifier:   17:E5:E1:EA:F1:59:96:C2:C8:5D:5C:3D:28:87:0C:B9:3A:6B:1C:62
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       279C44C7808F3097DF5E8DB372E33347DD1873EF
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa
Signing time:             Mon 29 Apr 2024 18:00:10 +0000
ROA not before:           Mon 29 Apr 2024 17:55:10 +0000
ROA not after:            Mon 28 Apr 2025 18:00:10 +0000
asID:                     271744
IP address blocks:        200.150.244.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9c:44:c7:80:8f:30:97:df:5e:8d:b3:72:e3:33:47:dd:18:73:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: Apr 29 17:55:10 2024 GMT
            Not After : Apr 28 18:00:10 2025 GMT
        Subject: CN=17E5E1EAF15996C2C85D5C3D28870CB93A6B1C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:99:9c:76:1b:ea:34:98:ce:b4:83:53:d1:
                    f7:c7:3d:63:4f:22:0d:9a:f7:e9:9f:a4:a9:39:7e:
                    75:e5:d4:09:a6:6d:82:52:e0:af:0e:c8:3c:06:eb:
                    22:1f:0e:ba:3c:0e:96:19:f4:03:ea:3a:45:53:c3:
                    fa:d3:c3:c3:f4:22:d4:1b:73:13:e2:58:2c:2e:92:
                    79:f8:36:e9:1a:9d:37:eb:37:65:61:24:28:f3:75:
                    a9:be:e6:85:b6:60:95:76:90:9a:a1:59:7a:c5:13:
                    35:a9:22:b0:05:c8:9f:04:9f:ad:e8:44:3e:b6:09:
                    e8:0f:65:eb:63:cc:c2:21:91:15:9f:9f:12:9e:90:
                    f9:d0:c7:99:73:a8:7b:4c:46:10:6c:3c:c0:3e:8f:
                    1c:57:63:47:ae:08:a1:ec:99:89:ea:87:c5:a9:28:
                    06:aa:3f:08:4b:95:da:73:c4:18:5c:13:a5:c5:0a:
                    ea:5f:3f:08:8f:64:c7:5a:ea:3d:5b:fd:84:4a:8f:
                    4b:89:34:a7:e7:71:b6:cc:c1:10:e5:08:38:f8:c1:
                    39:d9:fe:df:40:89:55:9e:1c:2c:91:80:91:23:88:
                    83:ae:05:33:3d:9d:cc:6d:2f:b8:dd:ed:71:af:40:
                    10:d4:fa:d7:2d:fd:9a:1d:29:e5:9c:7d:f3:31:d6:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:E1:EA:F1:59:96:C2:C8:5D:5C:3D:28:87:0C:B9:3A:6B:1C:62
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234342e302f32322d3232203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:53:44:1f:9c:5b:a4:fa:f1:0a:96:3f:b1:fc:5a:02:1d:bf:
         63:46:b1:6b:a4:51:fd:19:25:15:95:42:ca:8b:2b:d9:26:af:
         da:43:b0:a2:72:bc:1b:97:8f:da:78:69:69:d5:c7:72:d8:bd:
         bd:64:12:18:aa:22:f8:4a:60:90:3f:5a:7b:ed:e2:c5:6f:94:
         95:86:48:a0:c6:01:5b:08:ce:f2:25:3d:10:c3:94:4c:b4:93:
         c5:dd:d6:58:9e:4c:37:f5:1f:bf:b4:d0:88:e0:25:51:d8:f4:
         9a:48:4e:40:c9:ed:b0:03:08:38:f2:68:bc:90:33:78:34:a2:
         db:27:67:4d:b3:18:0c:34:6d:81:5e:4b:3a:88:de:00:45:66:
         c2:4d:0d:d3:fe:b2:92:0e:54:ff:da:6a:57:b1:3c:0e:66:0f:
         a6:47:5f:0f:b1:0d:1d:66:9a:2b:49:ac:f6:27:ad:46:1a:2c:
         6b:f7:87:3c:bf:ef:db:a9:ae:13:5d:58:3b:54:c8:fd:d9:de:
         29:32:94:b6:f8:6b:80:0c:67:da:dd:c9:0f:7f:43:38:e1:eb:
         d7:77:0c:cc:4b:6e:29:aa:a9:b5:6c:68:50:48:8f:c4:69:33:
         0d:6b:f8:56:6b:2e:7e:37:aa:dd:93:2d:2f:31:b4:5e:79:28:
         c8:8e:6f:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ5xEx4CPMJffXo2zcuMzR90Yc+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCNDYyM0JCRjk2OTFBRUEwODk0MUVDMUI3QjA5RDgw
ODRDNEY4MzAeFw0yNDA0MjkxNzU1MTBaFw0yNTA0MjgxODAwMTBaMDMxMTAvBgNV
BAMTKDE3RTVFMUVBRjE1OTk2QzJDODVENUMzRDI4ODcwQ0I5M0E2QjFDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5f5mcdhvqNJjOtINT0ffHPWNP
Ig2a9+mfpKk5fnXl1AmmbYJS4K8OyDwG6yIfDro8DpYZ9APqOkVTw/rTw8P0ItQb
cxPiWCwuknn4NukanTfrN2VhJCjzdam+5oW2YJV2kJqhWXrFEzWpIrAFyJ8En63o
RD62CegPZetjzMIhkRWfnxKekPnQx5lzqHtMRhBsPMA+jxxXY0euCKHsmYnqh8Wp
KAaqPwhLldpzxBhcE6XFCupfPwiPZMda6j1b/YRKj0uJNKfncbbMwRDlCDj4wTnZ
/t9AiVWeHCyRgJEjiIOuBTM9ncxtL7jd7XGvQBDU+tct/ZodKeWcffMx1uSzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUF+Xh6vFZlsLIXVw9KIcMuTprHGIwHwYDVR0j
BBgwFoAUsLRiO7+Wka6giUHsG3sJ2AhMT4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FkYVdXZ0hwcDJXTDVUMlNRTmJMeDlqbnpRMWY1ejZFZ3JLTmVyRnRY
UUMvMC9CMEI0NjIzQkJGOTY5MUFFQTA4OTQxRUMxQjdCMDlEODA4NEM0RjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQjQ2MjNCQkY5NjkxQUVB
MDg5NDFFQzFCN0IwOUQ4MDg0QzRGODMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhZGFXV2dIcHAyV0w1VDJTUU5iTHg5am56UTFmNXo2RWdyS05lckZ0WFFDLzAv
MzIzMDMwMmUzMTM1MzAyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM3MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsiW9DANBgkqhkiG9w0BAQsFAAOCAQEAg1NE
H5xbpPrxCpY/sfxaAh2/Y0axa6RR/RklFZVCyosr2Sav2kOwonK8G5eP2nhpadXH
cti9vWQSGKoi+EpgkD9ae+3ixW+UlYZIoMYBWwjO8iU9EMOUTLSTxd3WWJ5MN/Uf
v7TQiOAlUdj0mkhOQMntsAMIOPJovJAzeDSi2ydnTbMYDDRtgV5LOojeAEVmwk0N
0/6ykg5U/9pqV7E8DmYPpkdfD7ENHWaaK0ms9ietRhosa/eHPL/v26muE11YO1TI
/dneKTKUtvhrgAxn2t3JD39DOOHr13cMzEtuKaqptWxoUEiPxGkzDWv4Vmsufjeq
3ZMtLzG0XnkoyI5vAw==
-----END CERTIFICATE-----
Generated at Fri Oct 25 20:38:11 2024 by rpki-client on console-ams.rpki-client.org