Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          dR4eZLJ0cYDqGDzv3x90ScdHgGLmAipwIqPm4H4sOS4=
Subject key identifier:   DE:63:F3:6B:1B:6B:F2:8C:5F:11:00:33:42:3A:6A:A3:20:F0:95:78
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       0174C9512B86439FA8AABD6025680468F092F72C
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa
Signing time:             Wed 30 Oct 2024 21:27:21 +0000
ROA not before:           Wed 30 Oct 2024 21:22:21 +0000
ROA not after:            Wed 29 Oct 2025 21:27:21 +0000
asID:                     262585
IP address blocks:        201.55.168.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:c9:51:2b:86:43:9f:a8:aa:bd:60:25:68:04:68:f0:92:f7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 30 21:22:21 2024 GMT
            Not After : Oct 29 21:27:21 2025 GMT
        Subject: CN=DE63F36B1B6BF28C5F110033423A6AA320F09578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:cf:58:4a:ea:05:23:0f:9c:16:bb:97:23:
                    3c:f8:83:78:07:ce:64:ee:a5:fe:84:d6:c6:c2:ca:
                    48:51:e3:7b:ac:9f:08:b8:32:ab:e7:fe:8e:ea:29:
                    80:9f:9e:8f:71:80:b4:57:38:4d:65:9f:d4:44:c0:
                    20:80:ae:be:f3:97:f4:b1:b1:a3:6e:64:ad:d7:74:
                    f8:a7:40:5c:f6:42:db:e7:f2:25:e7:1a:42:15:23:
                    4f:4f:90:89:1f:46:fa:d4:9d:43:e2:e7:2b:96:33:
                    32:6d:a2:45:df:ff:f3:e2:97:74:d5:c7:86:8b:23:
                    46:70:56:6c:f1:f7:eb:72:ae:0f:7a:72:81:41:36:
                    c5:b7:74:39:1f:b0:fc:94:f4:56:32:bb:b4:29:a4:
                    78:fa:ca:05:4c:f0:38:eb:c7:d8:3c:59:f1:f9:d6:
                    d3:d7:6b:9c:25:7a:9f:68:f5:ed:ec:2d:5c:84:a0:
                    fa:c6:50:2a:ed:27:3e:fe:27:35:51:8b:6d:37:f6:
                    bb:f6:cc:df:06:a4:bc:c0:d3:20:8e:f8:84:e6:88:
                    50:a1:c3:d8:5e:12:49:1f:78:88:3f:1c:6f:f5:85:
                    fd:2d:18:e9:08:e1:ff:9a:8a:5e:84:89:11:bf:ee:
                    a5:8f:a1:ac:67:cc:61:62:2a:78:11:63:b7:48:aa:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:F3:6B:1B:6B:F2:8C:5F:11:00:33:42:3A:6A:A3:20:F0:95:78
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:92:16:df:7e:44:70:00:f0:07:48:e4:7a:69:86:a2:66:ba:
         91:8b:c8:e9:e3:e0:45:95:37:dc:69:76:fd:d0:3e:51:86:6b:
         60:40:3b:df:31:24:fd:67:2a:5d:58:9b:72:14:ba:75:7a:d1:
         90:df:00:4d:85:af:fd:3d:1e:44:14:60:32:dd:d2:26:d4:4b:
         11:f3:63:1d:e6:e0:6c:c9:99:8b:ac:38:61:15:17:ac:e0:93:
         cd:a0:41:89:8b:15:35:6b:11:21:0b:fc:f7:0f:65:1f:12:e3:
         fe:40:4f:21:c3:85:7e:b8:60:d0:47:28:7e:0d:57:8d:ab:0f:
         ac:78:12:4f:92:28:9e:28:07:f9:6d:fc:9d:06:c7:5a:0a:13:
         20:b3:b1:b0:50:77:0e:9b:32:75:2b:34:5f:ab:78:33:a4:eb:
         4a:8c:0a:32:e3:41:09:dc:d0:65:22:52:fb:6c:c5:03:53:0c:
         e8:01:3d:32:2a:38:ec:14:ca:2c:d8:49:04:33:31:ad:37:39:
         19:b8:03:41:a2:e3:b3:00:13:3f:4b:be:c3:d1:d5:de:77:bc:
         ce:6e:2c:bf:33:69:1c:55:8c:3f:7d:9a:f9:07:d8:0e:e2:f4:
         c9:6a:3c:80:67:24:d0:f0:0c:a1:00:25:c7:76:4a:9f:95:bd:
         59:83:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 19:50:06 2024 by rpki-client on console-fra.rpki-client.org