Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136332e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136332e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          EYyamM2fBljvaXEE5/J1yRFMmT6RKtdy2zhUBRb1FNU=
Subject key identifier:   64:C6:E7:03:D6:F1:16:F9:FD:CF:6C:3D:B8:05:FE:76:80:F4:E6:6D
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       2340A2F41765A133DA3684DD871A5E46B07431BE
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136332e302f32342d3234203d3e20323632353835.roa
Signing time:             Wed 30 Oct 2024 21:26:58 +0000
ROA not before:           Wed 30 Oct 2024 21:21:58 +0000
ROA not after:            Wed 29 Oct 2025 21:26:58 +0000
asID:                     262585
IP address blocks:        201.55.163.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:40:a2:f4:17:65:a1:33:da:36:84:dd:87:1a:5e:46:b0:74:31:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 30 21:21:58 2024 GMT
            Not After : Oct 29 21:26:58 2025 GMT
        Subject: CN=64C6E703D6F116F9FDCF6C3DB805FE7680F4E66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:58:e9:8e:f0:bf:e9:9b:f9:da:6e:18:7d:
                    d6:84:47:3e:b4:ac:be:37:77:f3:89:d5:b0:0f:4e:
                    a6:9c:88:38:02:79:4a:1d:b1:26:85:be:ce:0d:60:
                    bd:62:75:ec:80:8e:8f:64:0c:a6:6e:88:a0:08:66:
                    e9:af:32:21:28:05:3e:47:46:81:c8:6f:2e:f5:86:
                    53:25:10:70:c9:f7:d4:a6:87:0c:45:6f:82:a6:cf:
                    ad:a4:72:0f:79:73:8e:df:9f:8a:c4:29:43:f3:35:
                    53:2f:9d:d7:91:cb:4a:74:c4:df:20:42:29:c9:78:
                    70:71:b3:6c:5a:64:37:7f:c5:96:f8:49:cc:bb:89:
                    4a:5f:33:5e:c5:b6:8a:5f:88:18:c9:72:88:8c:5a:
                    73:0f:f2:80:8e:04:f4:f6:04:2a:17:15:f6:52:53:
                    4b:e6:25:fd:13:1f:20:f4:17:a4:3f:e0:6b:36:08:
                    3b:60:1b:a1:d8:25:b1:02:ea:5f:5d:e6:6a:cd:2b:
                    c3:cb:c3:c2:1f:9a:4d:91:b7:9c:c0:de:35:4b:72:
                    07:79:5b:f2:6c:0f:3b:5a:95:84:ab:a7:5a:d5:e1:
                    7d:10:a7:4f:9f:ae:a5:23:34:99:04:11:fa:b9:47:
                    92:39:b2:68:fc:cb:8e:21:95:5b:f0:74:c3:4a:27:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C6:E7:03:D6:F1:16:F9:FD:CF:6C:3D:B8:05:FE:76:80:F4:E6:6D
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136332e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:0f:e0:bb:2b:17:72:5f:7b:85:69:93:a1:8a:3f:1e:a5:
         83:28:56:68:f2:67:67:3d:9b:50:e0:9a:f9:6e:7d:0c:c1:97:
         1a:6c:dd:b8:1e:96:e5:2b:c2:5c:3c:fa:4b:9c:e3:d1:17:fc:
         5c:52:d9:6e:96:18:29:12:47:ed:6a:cb:ab:87:73:a1:f3:92:
         3c:a7:16:09:1a:5e:9c:4d:17:c3:94:db:14:32:3b:29:42:f2:
         d2:6d:9f:29:7a:1b:de:d2:03:bd:c2:5d:c3:37:17:6b:da:b3:
         19:15:9e:a5:7f:6d:09:d6:e4:bf:0f:4f:33:a4:cb:a4:6f:29:
         21:9a:61:cc:65:18:40:03:d4:34:fe:27:3b:8f:ca:01:61:f2:
         7e:22:87:23:7d:b7:27:c2:c2:5a:31:de:13:50:97:8d:d8:5c:
         70:16:56:ac:fb:1a:74:ce:39:58:ef:2c:d4:d7:6f:c9:2d:94:
         7e:7f:a2:b3:59:cc:b1:49:fe:78:b7:75:7f:d8:29:e9:c8:04:
         d6:ac:b1:51:0b:ce:d8:51:98:eb:a8:80:49:d7:d0:1d:02:cc:
         c7:22:9c:7a:68:6f:b8:78:d2:69:b3:65:39:17:31:ef:50:64:
         45:e8:b6:77:fb:a9:63:e3:e5:7d:1f:cc:0f:2c:e1:de:55:18:
         55:c9:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org