Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32332d3233203d3e20323731373434.roa
File:                     3230302e3135302e3234362e302f32332d3233203d3e20323731373434.roa (raw, json)
Hash identifier:          XwWRWCudLO6R9w0m2qjpaSQJlzz+XU/kQsOZY3Ly1vU=
Subject key identifier:   1D:D1:84:72:5C:D2:41:E2:CE:42:37:16:D7:8F:F2:74:60:E7:E6:E8
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       30E68DE5A66113940C8F590AAE6A4CB00DA144B4
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32332d3233203d3e20323731373434.roa
Signing time:             Fri 05 Jul 2024 12:26:35 +0000
ROA not before:           Fri 05 Jul 2024 12:21:35 +0000
ROA not after:            Fri 04 Jul 2025 12:26:35 +0000
asID:                     271744
IP address blocks:        200.150.246.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e6:8d:e5:a6:61:13:94:0c:8f:59:0a:ae:6a:4c:b0:0d:a1:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: Jul  5 12:21:35 2024 GMT
            Not After : Jul  4 12:26:35 2025 GMT
        Subject: CN=1DD184725CD241E2CE423716D78FF27460E7E6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:e2:da:30:6a:22:38:8d:5b:99:6e:fa:38:
                    fc:d6:a4:05:5e:45:96:45:1d:13:47:78:7a:f4:21:
                    06:81:21:f8:b0:34:8b:c0:4a:0a:83:66:11:92:12:
                    7c:21:b3:9c:69:b7:78:dc:f2:3b:c2:df:1a:f8:c9:
                    91:4e:89:da:92:ae:6b:d9:34:ad:87:d8:4e:20:0f:
                    7f:56:2d:84:78:5e:66:ce:5d:11:59:11:cb:4b:33:
                    dd:f5:f2:ec:5f:49:70:d3:e2:4c:ca:2b:0f:04:02:
                    91:fc:59:84:ba:37:09:89:7c:2d:d3:85:ff:19:da:
                    1e:67:44:2f:22:ea:f7:42:95:cd:43:fc:79:b0:57:
                    e3:5c:a4:7d:81:5b:c0:f1:45:2e:b0:70:1c:35:30:
                    f4:b0:ae:71:f3:a1:5a:eb:f9:df:6c:f9:68:b0:7c:
                    e8:87:62:eb:ba:91:ac:e8:da:5a:8c:e4:54:0e:79:
                    c2:26:3f:cb:7a:e1:3e:63:8c:e1:05:e3:e1:4d:d5:
                    41:68:ed:b9:46:07:1d:0a:ba:ee:a2:38:c2:32:9a:
                    ad:8c:a3:ab:d4:ab:99:30:dc:ca:24:b1:3c:f3:f7:
                    ec:1b:34:49:b5:86:74:44:68:91:cc:fe:9e:36:c4:
                    d5:2b:f2:89:96:9c:de:fb:b6:8b:36:b2:92:fc:0b:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D1:84:72:5C:D2:41:E2:CE:42:37:16:D7:8F:F2:74:60:E7:E6:E8
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32332d3233203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:08:29:a6:d1:ab:c6:4f:13:a1:95:a8:e2:69:e9:a6:a4:
         b9:2f:12:ef:09:b7:da:2c:aa:fa:c4:4c:03:d8:2b:68:46:ec:
         ea:41:e4:94:9c:76:5f:ce:c9:e9:41:8e:94:12:23:9e:ff:78:
         0c:37:50:53:c8:c5:52:5a:e6:6a:58:03:87:f4:3f:7a:1f:8d:
         91:12:9a:2f:a9:84:fb:08:38:4d:3d:6a:15:c5:27:82:6e:f5:
         96:53:d0:4f:c3:36:86:f3:66:75:70:18:ca:0b:55:ba:c1:44:
         2c:16:26:71:fe:c3:dc:7b:79:8e:bf:79:c0:d9:64:02:89:88:
         c9:c8:76:2e:96:e6:58:4b:2f:ad:0d:5e:cf:b6:e4:a2:e8:17:
         cf:ce:3c:f6:99:b7:ec:61:c5:9f:71:87:c1:67:2d:0d:1f:3c:
         3a:ab:de:e1:20:d2:0f:f9:ca:14:18:86:b5:2b:b5:ba:98:a9:
         37:62:6d:ef:40:94:3d:45:1f:72:d3:fb:9a:47:d7:4d:1f:d4:
         43:96:b6:88:49:d5:3b:9f:14:46:c1:8a:22:28:8a:40:21:5d:
         fb:43:7d:13:59:ac:f2:86:7f:c2:fa:c3:8e:a0:21:7e:4b:e0:
         5a:1c:a3:4e:b5:ef:e5:f6:b3:2c:a0:da:80:f7:73:f3:95:ef:
         77:17:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:38:11 2024 by rpki-client on console-ams.rpki-client.org