Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136362e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136362e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          wp0MvNvDm3O4DwzML4pNpQ3R/oPzoytonjFwKY9QvZk=
Subject key identifier:   F0:12:BA:5A:42:4C:F0:3C:98:7D:56:86:8B:62:F7:83:F8:4F:8B:93
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       55BC793CB436BAA512A75916669CBA85E41F099D
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136362e302f32342d3234203d3e20323632353835.roa
Signing time:             Wed 30 Oct 2024 21:27:10 +0000
ROA not before:           Wed 30 Oct 2024 21:22:10 +0000
ROA not after:            Wed 29 Oct 2025 21:27:10 +0000
asID:                     262585
IP address blocks:        201.55.166.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bc:79:3c:b4:36:ba:a5:12:a7:59:16:66:9c:ba:85:e4:1f:09:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 30 21:22:10 2024 GMT
            Not After : Oct 29 21:27:10 2025 GMT
        Subject: CN=F012BA5A424CF03C987D56868B62F783F84F8B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:e4:d8:db:ba:ce:59:8b:13:80:c4:1a:54:
                    74:51:c9:ca:27:c6:71:74:e8:ef:35:37:93:8a:53:
                    6a:8f:ae:3c:fd:a6:37:5a:da:91:f6:2c:8f:e6:12:
                    4f:33:df:ce:32:c1:3e:9a:c5:55:98:cd:56:9f:b1:
                    8b:1e:51:21:0a:18:5a:d9:9a:10:e2:50:b4:50:3e:
                    60:0a:90:95:94:bd:e1:51:03:53:2e:64:63:a3:e5:
                    45:4b:fd:1b:17:0c:16:f9:53:95:1f:aa:1f:4f:c6:
                    cb:93:16:e4:e5:d1:4f:1f:ec:a3:d1:fd:86:cc:ae:
                    2b:85:ae:01:f0:a5:e6:61:9a:7e:2a:a8:fa:71:c6:
                    a2:59:51:00:54:d9:ec:3c:72:81:6a:ca:13:e7:90:
                    64:4a:16:cd:c9:69:f0:c6:ea:24:d6:88:be:fc:64:
                    12:70:38:1e:27:49:08:8e:56:38:75:4d:5f:8d:45:
                    8b:0c:7b:6a:bc:77:24:83:4c:af:0b:b2:2b:05:3d:
                    9c:4c:d4:ce:f6:31:2d:63:a8:41:df:5b:a3:f4:2d:
                    72:ee:36:ae:d6:58:2a:0e:26:85:34:ee:26:49:5b:
                    e6:e5:bc:b6:8e:b8:bb:38:94:4c:19:43:7a:46:36:
                    a8:28:c8:36:1c:3d:da:8b:77:ae:bb:77:bb:1a:c1:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:12:BA:5A:42:4C:F0:3C:98:7D:56:86:8B:62:F7:83:F8:4F:8B:93
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136362e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:04:44:89:64:fc:60:5f:56:c2:d3:90:eb:0d:bb:7d:49:40:
         15:c8:4b:38:6b:c2:6e:6c:1c:ee:50:c2:49:92:88:3d:40:8f:
         24:e5:ab:21:92:d1:57:fb:3c:60:35:77:1f:16:1c:52:cc:02:
         7e:c1:e6:fc:c3:f0:58:62:68:f0:87:ed:6c:68:4c:3e:76:c8:
         60:9f:1a:de:f4:9d:09:6a:65:3d:87:1b:34:1b:d0:71:57:ab:
         8e:9c:bc:63:3f:89:7b:27:b5:12:74:9a:14:27:ed:51:a0:56:
         f2:30:26:0f:0d:16:5d:f9:bd:41:ab:ab:6d:ca:05:09:a6:af:
         84:38:0c:81:be:ee:d9:bd:20:d6:5e:09:35:e6:3a:e1:b3:0c:
         44:b0:c7:ed:cb:a4:b9:3b:6b:15:86:fa:ca:20:c6:32:d4:f7:
         c4:4d:d3:c8:b2:44:b3:fb:c4:bb:8e:ec:d2:a2:22:9a:52:cd:
         81:50:5c:ff:84:a9:7e:90:6b:25:06:31:a4:6b:20:22:2b:c3:
         10:d0:4e:5e:65:68:23:02:46:ce:7b:0a:f4:c8:ff:39:ae:52:
         c4:30:e2:d7:89:34:b0:d3:f3:c6:75:6c:8e:c5:6b:f2:7e:3c:
         86:d7:da:e3:fd:01:fe:7f:4e:54:c3:3e:cb:cd:7b:ba:9b:e0:
         92:84:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org