Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa
File:                     3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa (raw, json)
Hash identifier:          bp47g9asPqleWvjzIIYonrFY3ZFMLGm/2rAexs1XOco=
Subject key identifier:   1D:FF:52:F0:F1:5E:44:4D:86:41:6C:39:07:ED:73:6F:00:86:DA:EF
Certificate issuer:       /CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
Certificate serial:       3FA47C9C409BFE4BCD6512EFBC46AEF5F5F62DC4
Authority key identifier: B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa
Signing time:             Wed 15 May 2024 16:08:44 +0000
ROA not before:           Wed 15 May 2024 16:03:44 +0000
ROA not after:            Wed 14 May 2025 16:08:44 +0000
asID:                     271744
IP address blocks:        200.150.246.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:7c:9c:40:9b:fe:4b:cd:65:12:ef:bc:46:ae:f5:f5:f6:2d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4623BBF9691AEA08941EC1B7B09D8084C4F83
        Validity
            Not Before: May 15 16:03:44 2024 GMT
            Not After : May 14 16:08:44 2025 GMT
        Subject: CN=1DFF52F0F15E444D86416C3907ED736F0086DAEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b6:01:2b:e7:af:d3:83:43:bb:59:02:09:ac:
                    c6:48:be:f6:82:88:6c:7d:96:25:4c:66:3e:5d:8d:
                    cd:e2:96:0d:6f:5b:ce:b9:51:85:55:ab:78:c3:24:
                    f6:c9:d7:c4:e7:7c:b1:2c:c1:3e:15:b7:27:2d:cb:
                    b5:86:eb:64:be:8e:f3:61:18:53:43:09:93:f5:6e:
                    c1:b0:e9:70:1f:6e:2c:a6:29:fc:d6:9e:b9:8a:f0:
                    d2:3b:e9:1e:10:47:6f:3a:2e:43:73:15:d5:90:0e:
                    af:2e:9a:06:48:5a:d3:54:a2:20:ee:fc:d8:0c:15:
                    bb:d2:4d:0f:52:0f:85:7c:cf:44:58:87:0d:7f:f5:
                    a2:39:5a:06:63:ee:14:3b:d1:74:91:fb:28:1d:16:
                    9f:ca:bd:ce:b2:30:ef:6d:51:cf:fe:60:bf:49:70:
                    aa:d6:f8:d5:f9:b9:ce:0d:83:a0:fd:8c:bc:22:ca:
                    56:fb:12:8f:14:63:c0:fb:82:2a:e3:d7:18:2e:00:
                    76:8a:3a:63:b3:5d:68:79:42:75:82:8d:3b:99:af:
                    9e:8f:ff:b1:c6:6b:c2:1f:7d:32:82:20:3f:85:bc:
                    a6:c0:0d:c0:3f:27:a9:59:cb:a4:8e:8f:20:00:d9:
                    2a:03:f1:14:de:ad:71:a2:90:5e:ca:9b:c5:7c:07:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FF:52:F0:F1:5E:44:4D:86:41:6C:39:07:ED:73:6F:00:86:DA:EF
            X509v3 Authority Key Identifier:
                keyid:B0:B4:62:3B:BF:96:91:AE:A0:89:41:EC:1B:7B:09:D8:08:4C:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B4623BBF9691AEA08941EC1B7B09D8084C4F83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:d5:83:7d:ec:5f:35:45:da:29:de:2a:f6:54:fa:d5:da:
         93:c9:69:f3:ea:08:99:3b:22:91:9a:73:1b:02:e7:92:e3:79:
         0c:67:e5:f7:de:3a:ff:05:76:dc:cf:b8:72:21:26:b1:ce:45:
         b1:0f:55:d2:ab:73:7f:98:07:fb:76:9f:85:b4:bd:1d:00:fd:
         8f:ad:4e:d2:9a:a6:01:69:a2:44:ab:ed:7d:80:3d:bf:e0:5e:
         77:9f:0c:f1:f0:8d:28:a7:92:88:9a:d6:11:26:ee:aa:df:dc:
         b8:fc:99:93:a0:ae:9e:e5:94:57:72:4c:e5:c1:82:49:ff:69:
         e7:37:61:e5:6d:81:ed:ce:0b:48:03:38:c4:10:0a:40:12:cc:
         92:63:6d:c9:e7:5c:f2:48:85:71:9d:2a:cf:74:5f:d8:ff:4e:
         7c:90:bc:fb:e1:3f:03:44:75:8b:f6:3a:dc:93:ba:d6:20:25:
         89:4a:76:17:e3:e2:0c:b9:37:b6:bc:83:f8:fd:7d:a3:28:b6:
         f0:15:74:78:27:e2:98:2e:9b:cc:41:f2:fb:b0:7b:69:d9:f0:
         a4:dd:f2:d9:0c:34:02:15:49:93:43:41:ce:f0:27:18:33:1f:
         1a:ef:c3:9d:55:7d:34:aa:f6:a3:ca:ce:76:18:db:e8:07:49:
         7c:0e:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org