Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137322e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3137322e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          RIKa2UDCLDMTPMHVH5IcA8eR0VInSAifFXuo3o+K5oY=
Subject key identifier:   A3:DC:62:2E:E7:53:FD:DD:46:69:6D:FE:EA:EF:B3:05:3D:6C:06:C8
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       3EAB70948169AD487C3C273DC3335548E2AD729D
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137322e302f32342d3234203d3e20323632353835.roa
Signing time:             Wed 30 Oct 2024 21:27:43 +0000
ROA not before:           Wed 30 Oct 2024 21:22:43 +0000
ROA not after:            Wed 29 Oct 2025 21:27:43 +0000
asID:                     262585
IP address blocks:        201.55.172.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ab:70:94:81:69:ad:48:7c:3c:27:3d:c3:33:55:48:e2:ad:72:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 30 21:22:43 2024 GMT
            Not After : Oct 29 21:27:43 2025 GMT
        Subject: CN=A3DC622EE753FDDD46696DFEEAEFB3053D6C06C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6d:18:ba:86:5e:7a:45:d0:26:97:e8:f2:91:
                    b7:e2:3b:ec:36:ca:5b:46:ba:66:e5:d6:5c:87:e1:
                    3e:00:63:36:01:74:84:94:01:7b:5f:61:ea:fd:d2:
                    50:aa:5b:86:c7:9a:02:f8:b4:04:5e:ba:62:8c:3f:
                    2e:8a:25:9a:2a:54:c2:e8:7a:35:96:e5:3a:71:59:
                    e8:06:15:f6:b7:9f:d7:fa:bd:6b:75:7e:98:2d:81:
                    23:c8:9a:5f:29:4f:53:7f:6a:a7:59:47:2f:65:67:
                    66:33:46:5e:cf:e2:54:ff:f7:14:5f:9a:a4:72:65:
                    dc:a6:54:5b:b9:38:b7:0d:37:7c:e5:d8:0f:38:b5:
                    9e:5c:4e:03:18:fd:b3:9b:a2:fe:a3:ba:e2:63:aa:
                    27:d7:3d:a6:86:b9:7e:47:15:cf:92:6d:15:60:c2:
                    0f:6c:38:0f:26:10:dc:82:13:33:52:68:ec:38:40:
                    1a:c3:4b:ba:36:6b:f5:af:d3:ca:49:9b:3e:1d:2a:
                    17:e3:1f:1e:63:66:80:c7:0d:e8:f0:9e:0f:de:3e:
                    a0:f8:0b:46:b8:05:97:15:5b:bd:0c:56:99:1d:a1:
                    9b:55:80:5d:ad:11:4d:d4:37:f9:49:b8:4b:7f:f8:
                    94:c9:2f:b2:be:fd:3c:0a:a3:4e:5b:14:76:e1:d5:
                    98:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:62:2E:E7:53:FD:DD:46:69:6D:FE:EA:EF:B3:05:3D:6C:06:C8
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137322e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:7b:e4:26:d3:de:74:7a:3e:93:49:59:e8:f4:59:ed:b2:
         08:4d:f6:0d:95:cc:6b:19:c7:ae:1b:eb:a7:ea:5f:23:fd:d8:
         3e:4f:45:8e:5f:6d:af:33:58:6d:b5:f7:43:e9:8b:ea:cc:1d:
         e8:0f:0c:07:cf:03:ba:de:13:eb:60:af:19:60:76:c3:dc:d5:
         db:a5:58:e2:67:ff:f6:47:db:33:61:7a:92:72:43:6f:9a:9d:
         89:a8:cd:ad:51:41:37:21:b3:a5:cd:82:cd:65:67:81:d4:f0:
         4e:7f:fb:0d:5d:58:bd:05:35:92:7c:5a:d3:69:a4:34:82:ed:
         60:74:32:28:c8:b5:20:bb:dd:dd:14:64:12:7a:a6:3e:76:64:
         96:37:54:0d:98:3c:f8:2f:30:a0:be:d7:63:98:a6:60:36:5b:
         c9:64:bd:71:fb:bc:ec:ae:ff:9b:b9:6d:88:98:87:9f:37:81:
         79:b9:aa:d3:53:b4:18:0f:d6:29:a3:f7:af:4e:30:13:15:5d:
         18:72:69:46:3d:cf:4a:d9:12:b6:f4:53:ca:99:52:6d:8b:c3:
         84:60:1d:5a:e6:23:4f:df:b8:e4:06:59:dd:2a:a8:98:0e:91:
         8b:ce:cc:fc:06:f4:ce:d9:96:ea:0e:20:b1:7b:7e:94:8d:3a:
         22:c2:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 19:50:06 2024 by rpki-client on console-fra.rpki-client.org