Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa
File:                     3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa (raw, json)
Hash identifier:          57ZlnD3WGvaRakOxtB/l2zDHv6shaH7QpCqpCbK5iyU=
Subject key identifier:   B4:7D:2D:44:A0:D2:BB:8B:8F:84:06:55:EA:40:17:31:36:E5:5C:29
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       179206084D4B31B8673E7F6E1BF43ACD4F9ECF54
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa
Signing time:             Mon 28 Oct 2024 12:46:31 +0000
ROA not before:           Mon 28 Oct 2024 12:41:31 +0000
ROA not after:            Mon 27 Oct 2025 12:46:31 +0000
asID:                     262585
IP address blocks:        201.55.160.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:92:06:08:4d:4b:31:b8:67:3e:7f:6e:1b:f4:3a:cd:4f:9e:cf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 28 12:41:31 2024 GMT
            Not After : Oct 27 12:46:31 2025 GMT
        Subject: CN=B47D2D44A0D2BB8B8F840655EA40173136E55C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:f2:82:c7:e4:e6:d3:85:89:0c:ed:10:13:
                    55:99:62:80:6d:f9:b1:54:16:6a:21:87:41:06:57:
                    9c:25:36:36:97:76:46:30:73:58:b0:dd:0d:54:50:
                    a0:74:42:68:c7:71:df:30:d9:1b:23:17:02:f3:da:
                    03:78:60:41:08:94:7d:d8:e7:09:42:68:ca:06:29:
                    14:66:91:05:3f:35:a3:71:62:0a:01:8e:0c:54:49:
                    79:3c:91:29:c3:bc:42:5e:c8:ff:d9:b9:ed:b9:79:
                    6b:23:c1:27:08:1f:db:a8:b3:5c:99:4a:73:b0:89:
                    36:d3:06:a8:eb:0f:4c:14:c5:a4:57:53:bb:5e:60:
                    78:12:4e:c7:2b:13:18:16:22:ac:3a:e0:0c:f4:a1:
                    67:22:ef:24:c0:41:96:9d:d3:6c:b7:1e:da:1f:c6:
                    88:bf:b0:ac:31:86:20:01:77:1c:2c:64:11:11:25:
                    0b:68:f4:ed:3b:41:3a:1d:66:2c:93:2c:32:97:57:
                    a6:7c:b9:f0:9e:c0:63:45:5e:d5:37:91:4d:b3:20:
                    82:62:c2:43:91:12:98:3f:9c:fe:0d:a2:f3:6a:5f:
                    9a:e6:0d:6d:53:55:3e:b5:29:08:72:d5:f2:b0:7c:
                    f1:32:da:f5:7c:f1:f8:f8:3e:26:41:e5:35:cc:d5:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7D:2D:44:A0:D2:BB:8B:8F:84:06:55:EA:40:17:31:36:E5:5C:29
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32332d3233203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:89:a5:4a:6f:e0:3d:18:f0:1d:16:3b:7e:03:68:db:86:a6:
         77:5f:f0:ea:e8:66:b0:81:ea:eb:4b:b9:ef:9b:9d:86:eb:9c:
         bc:62:2b:4d:9e:e5:0d:5b:9d:17:ed:a0:21:1f:e4:ca:66:cc:
         5a:12:4c:61:13:4e:55:5a:c3:9d:3c:ae:cd:10:86:10:e8:e3:
         fd:fc:99:d1:55:c4:50:f4:1d:c6:b9:3e:ff:f0:f5:96:fe:4a:
         6d:17:58:25:bc:5f:96:ae:e1:cc:b9:dd:81:8f:c0:50:3e:54:
         7c:cc:8e:55:09:1d:9b:cb:48:33:58:51:58:9c:bb:5c:fa:37:
         6e:db:c0:22:c2:58:e1:71:9e:fc:9c:6d:c2:01:b8:e9:9e:0c:
         c9:9e:bb:9d:70:1f:80:01:e6:c5:ec:2e:69:c8:e6:4d:a5:27:
         fd:70:c2:f1:61:2e:07:23:35:85:60:7a:2e:c7:ff:6b:f8:a9:
         bb:0e:73:bf:9a:b0:f7:5b:9f:17:91:71:28:d2:24:02:33:bf:
         a1:31:2b:8f:18:0a:21:63:1a:0a:66:22:ad:47:32:df:c9:03:
         7f:d8:3c:35:be:05:a8:53:4c:3f:68:3e:c1:8d:47:7f:de:07:
         46:05:d2:f9:72:c4:f5:5b:df:63:ba:dd:5d:56:8a:cd:90:9f:
         2b:b3:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 19:50:06 2024 by rpki-client on console-fra.rpki-client.org