Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234352e302f32342d3234203d3e20323731373434.roa
File:                     3230302e3135302e3234352e302f32342d3234203d3e20323731373434.roa (raw, json)
Hash identifier:          OXo82N4Jab4g7EgVoS+mYVoalN1IOQuVvBYlLEMfUx0=
Subject key identifier:   B9:85:6D:59:34:AD:96:B2:35:F7:90:D3:08:FE:FB:4C:61:2C:13:A7
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       6651D1EE7FE01C43135288060594CC98760C5454
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234352e302f32342d3234203d3e20323731373434.roa
Signing time:             Mon 29 Apr 2024 18:00:07 +0000
ROA not before:           Mon 29 Apr 2024 17:55:07 +0000
ROA not after:            Mon 28 Apr 2025 18:00:07 +0000
asID:                     271744
IP address blocks:        200.150.245.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:51:d1:ee:7f:e0:1c:43:13:52:88:06:05:94:cc:98:76:0c:54:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: Apr 29 17:55:07 2024 GMT
            Not After : Apr 28 18:00:07 2025 GMT
        Subject: CN=B9856D5934AD96B235F790D308FEFB4C612C13A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:d5:4e:f7:45:bb:5c:af:8e:26:ec:be:27:
                    a8:d5:54:2f:82:c9:9f:92:b5:23:d4:45:c3:75:03:
                    84:dd:c4:1a:0f:f6:9a:19:fd:5f:6a:e0:02:d9:a2:
                    91:cc:7d:28:98:1e:d0:1f:a6:29:1e:54:cd:0e:4f:
                    89:70:0f:9d:ef:a0:11:cb:dd:9d:61:34:84:d8:16:
                    e3:8c:55:d4:f8:6f:7e:4e:d4:97:a1:cf:1c:1a:14:
                    1d:27:5e:f9:9a:76:dd:e9:f8:9b:8a:91:67:35:e9:
                    32:72:27:38:32:3f:31:2b:a4:1c:9f:6d:37:1f:54:
                    64:f5:69:e8:e6:f7:61:c3:e7:9a:8d:52:42:30:e6:
                    f7:63:02:c9:95:86:12:83:a3:a9:5c:29:29:9b:a0:
                    06:3d:9f:86:37:14:31:15:a3:35:2b:16:7e:11:bd:
                    ec:0f:9d:54:e1:26:60:6d:87:71:7e:38:76:03:25:
                    61:7a:9a:28:ed:12:6e:f8:55:4c:05:aa:29:bb:ac:
                    db:e5:3b:49:0a:25:28:10:34:60:eb:3b:bc:f4:75:
                    26:0a:50:8c:71:3b:d1:ab:e8:eb:eb:b2:e1:2b:19:
                    c7:71:9b:a4:a7:b7:90:d3:dc:5f:f8:8c:7d:28:b8:
                    c4:f8:60:06:e5:b8:c4:40:16:49:0e:5c:b0:06:bd:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:6D:59:34:AD:96:B2:35:F7:90:D3:08:FE:FB:4C:61:2C:13:A7
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234352e302f32342d3234203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:98:8e:c5:f9:1b:60:a7:35:83:f0:7d:d2:de:46:26:c5:
         a2:8d:7e:50:11:43:b4:0b:a0:4f:fa:e6:07:53:04:47:f0:f4:
         6e:e0:5e:0f:17:40:1b:77:c8:91:ff:5a:c8:fc:c2:06:ff:66:
         f5:ca:bc:92:81:ec:af:4b:03:66:d1:8f:98:a4:7d:25:63:53:
         a8:db:6c:4b:64:6b:2f:00:a1:86:cd:09:d7:86:0a:ee:76:e8:
         50:98:8c:1e:8a:7e:33:b5:07:b9:19:04:a2:5b:94:b0:56:c6:
         1c:5c:52:7c:e1:04:68:68:92:54:6e:c0:13:e5:be:11:eb:37:
         a2:1a:9c:94:78:de:81:b2:7f:c5:c2:66:ac:7f:a5:c8:15:49:
         ba:f7:f0:a4:ec:6a:00:61:30:85:29:0c:fa:c3:a8:26:c8:0b:
         c7:4a:6e:fb:1f:d5:f6:34:00:78:55:ac:37:3e:94:e0:56:f8:
         39:53:69:87:91:59:b6:ba:54:fd:fb:19:54:b6:aa:fb:47:1d:
         7c:8a:57:1a:49:25:cf:84:69:bd:bc:bd:0f:09:8f:88:64:bf:
         5a:95:41:5c:38:3d:d0:0a:07:ee:34:68:76:70:4b:36:12:7e:
         91:f7:73:e8:ac:e2:e5:40:77:bd:c9:04:8e:0c:aa:52:47:70:
         ba:01:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org