Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137352e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3137352e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          Bb10EPn7n/qrHDRU9CrVUXaJnU91el+LEYx0m3u+mhA=
Subject key identifier:   6C:98:89:ED:0E:CE:0D:12:4B:1A:F8:4A:69:7C:3D:39:89:1A:ED:8A
Certificate issuer:       /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial:       2149DCAE7856D7BC480984E23A9DC553015F731C
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137352e302f32342d3234203d3e20323632353835.roa
Signing time:             Wed 30 Oct 2024 21:26:40 +0000
ROA not before:           Wed 30 Oct 2024 21:21:40 +0000
ROA not after:            Wed 29 Oct 2025 21:26:40 +0000
asID:                     262585
IP address blocks:        201.55.175.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:dc:ae:78:56:d7:bc:48:09:84:e2:3a:9d:c5:53:01:5f:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
        Validity
            Not Before: Oct 30 21:21:40 2024 GMT
            Not After : Oct 29 21:26:40 2025 GMT
        Subject: CN=6C9889ED0ECE0D124B1AF84A697C3D39891AED8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:82:e4:be:ca:05:c9:5e:54:56:05:17:b0:
                    ea:15:8d:f0:5b:0d:71:fe:8d:a7:67:1d:57:52:09:
                    19:99:28:a5:8e:d8:db:e4:94:01:fa:86:a7:a6:d2:
                    2a:e0:e5:a0:5b:c2:3b:ae:4e:30:cf:c3:af:a4:8e:
                    37:56:7f:16:4a:34:1d:ea:96:0b:71:17:c1:81:02:
                    1d:90:d4:2b:7a:d5:0c:2f:f6:6d:a3:75:2b:25:2b:
                    a2:d8:f6:ae:b3:ad:56:9e:33:17:35:7f:fa:02:c6:
                    ce:0f:c3:9e:7c:bb:9e:f6:fe:1f:8b:3e:19:c2:40:
                    a1:f2:cc:19:5e:ed:7c:b8:af:89:6a:09:b2:9e:a7:
                    3f:c2:21:10:27:34:8d:b4:4e:fe:2e:c0:c2:ee:3f:
                    9f:cd:4c:c9:ff:2f:80:1c:83:95:34:d3:45:52:03:
                    8b:9f:0c:95:a8:83:d8:e8:f9:72:32:78:96:51:d7:
                    d8:c0:bc:4c:32:f6:68:04:6e:e6:77:7a:f2:0c:bc:
                    44:64:75:b9:b2:70:3d:7d:84:f0:9a:eb:5c:c2:02:
                    bb:33:70:94:d1:5b:30:84:a7:9c:a6:42:41:8c:85:
                    f1:8a:30:39:af:38:b2:b7:9e:e9:56:7b:83:52:88:
                    bd:ed:d3:cf:29:02:31:af:97:56:b7:e5:78:82:97:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:89:ED:0E:CE:0D:12:4B:1A:F8:4A:69:7C:3D:39:89:1A:ED:8A
            X509v3 Authority Key Identifier:
                keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137352e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:2b:7b:a9:3b:59:49:4b:0d:46:aa:a8:2a:55:db:7b:e5:
         3a:9b:02:1c:58:c6:f8:8a:10:f8:71:e2:57:d6:70:8f:c2:05:
         22:32:06:92:54:64:60:51:b8:62:9a:9c:d3:16:66:eb:b3:e9:
         6f:33:a5:52:0a:c2:73:6b:73:eb:68:3a:c7:a4:75:42:88:ca:
         d1:93:e9:18:ee:d1:c3:b5:2b:32:a9:71:0a:b2:91:04:67:1a:
         25:55:0e:66:2d:98:7b:12:1b:e4:ac:9f:be:41:58:6b:89:0c:
         04:ae:3f:9c:d4:b0:e6:05:0d:ea:92:1e:ff:27:36:20:05:d6:
         98:28:90:3d:3d:5a:28:08:19:3e:b7:8e:6b:77:fc:4b:75:1f:
         fe:cf:ff:12:6f:8e:e0:12:a9:03:76:11:08:04:33:92:ca:01:
         7d:7a:03:92:c5:75:5b:c2:af:1d:20:86:47:b1:92:b8:11:be:
         eb:a8:87:a3:de:43:d8:fd:40:71:29:21:ca:70:e2:c2:04:bb:
         46:25:b9:13:e2:59:d7:df:6d:51:f5:3a:0d:ef:f0:24:81:89:
         46:e8:d8:e6:1f:80:e7:d5:6d:32:6c:d9:8c:04:d4:8e:ce:b1:
         02:a2:b9:e2:3c:50:ae:63:be:b7:52:1f:41:69:53:d9:1c:11:
         fe:67:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org