Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          IbFHWEAmzjvsbsi1IOiuVdIKBJhcuhQKi+RB7G6PlhI=
Subject key identifier:   52:EA:9F:68:81:E9:BB:CB:97:44:6A:1A:B0:80:EE:F8:76:86:2F:6A
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       476D3456010FE380A07B3AC20408FCA83E1C3BE9
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa
Signing time:             Wed 30 Oct 2024 21:27:15 +0000
ROA not before:           Wed 30 Oct 2024 21:22:15 +0000
ROA not after:            Wed 29 Oct 2025 21:27:15 +0000
asID:                     262585
IP address blocks:        201.55.167.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6d:34:56:01:0f:e3:80:a0:7b:3a:c2:04:08:fc:a8:3e:1c:3b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 30 21:22:15 2024 GMT
            Not After : Oct 29 21:27:15 2025 GMT
        Subject: CN=52EA9F6881E9BBCB97446A1AB080EEF876862F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:9c:4c:97:3a:4e:a7:83:84:76:29:8c:f0:
                    fe:ed:e8:b3:d9:0d:73:c5:4f:41:c8:24:ed:83:7b:
                    26:82:bf:f5:e7:33:93:b1:44:fd:87:87:aa:4e:70:
                    99:d0:b4:b9:c6:fb:df:30:6d:29:8e:d5:0a:3f:8c:
                    12:0d:d4:b8:fa:25:bf:3c:ed:b6:35:e0:89:ec:b9:
                    96:5d:8e:c1:dc:29:3c:02:dc:d6:c6:51:c1:93:e5:
                    3c:78:46:55:d5:7b:34:1f:6a:b6:36:ed:bf:0c:73:
                    11:b3:4a:fc:ad:c8:69:a5:35:81:bb:e1:5f:42:62:
                    15:5c:f1:b8:fe:0d:42:de:78:df:af:77:50:6d:7f:
                    e1:7a:f3:c7:50:ef:4e:8a:d9:93:81:39:5e:e7:96:
                    23:fc:db:ac:67:6d:c1:eb:5b:b3:d6:45:15:17:11:
                    1c:e1:08:2f:5c:61:f1:46:e1:ee:7d:12:9a:57:0e:
                    06:f8:a5:9f:d9:4a:f9:ff:2e:0c:e7:00:15:5c:46:
                    76:9c:a8:70:3d:6e:a3:56:7c:53:61:51:73:97:a8:
                    90:25:47:9b:29:96:35:2d:53:73:0c:7c:cd:c1:4c:
                    06:bd:b6:3e:f8:fc:06:e5:fe:9e:af:27:f4:66:6f:
                    2a:5f:b6:95:15:ba:8a:16:dc:9b:95:7e:d5:f1:60:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:9F:68:81:E9:BB:CB:97:44:6A:1A:B0:80:EE:F8:76:86:2F:6A
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136372e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:66:cc:dc:0e:72:6e:37:e4:0e:60:5c:21:27:b0:7a:d9:
         b1:11:7b:f2:84:65:4f:d2:e0:8c:a6:a1:96:50:ad:bb:f7:ba:
         cc:7a:da:40:4f:0d:11:dd:e4:05:3c:91:e4:2d:86:a0:73:35:
         80:59:c4:27:f5:55:b7:92:04:fb:38:2d:fc:c0:09:85:12:d8:
         0f:1c:e0:11:1f:27:36:a0:62:fa:66:33:42:2f:7f:0d:ce:73:
         49:a7:00:fb:e2:9f:dc:52:fc:66:1b:cb:3c:dd:bf:dc:89:55:
         be:d4:ab:ef:4f:65:90:07:b4:02:05:2f:e9:02:e9:dc:86:8a:
         31:df:57:56:99:8d:cc:81:c3:bf:cd:91:d2:6c:a0:37:99:8c:
         05:33:45:be:a9:8f:28:0f:a3:24:3a:33:22:5e:44:74:15:a3:
         71:d4:9f:03:3a:54:ec:0e:79:5f:ce:4b:0c:90:8e:a7:e1:d9:
         0c:d8:20:1b:0e:1c:a6:5c:7a:36:2b:5f:9d:34:f1:f6:8c:24:
         25:56:30:17:7b:8c:b2:6a:30:40:05:81:f2:18:24:6a:78:ac:
         c3:d6:79:57:53:8b:37:60:9b:a7:6e:b4:31:c5:3c:2d:4a:07:
         d4:ea:09:a9:71:34:43:99:94:90:39:9f:65:c0:5a:db:9f:df:
         c0:74:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 19:50:06 2024 by rpki-client on console-fra.rpki-client.org