Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa
File:                     3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa (raw, json)
Hash identifier:          oXE7DEOYVlwLt5O5YyRIVVCDc2CZCCj0XgYWuhsesIE=
Subject key identifier:   75:93:D5:34:C2:08:CB:00:C7:A1:5D:7E:AE:9B:FA:2A:5C:20:E4:87
Certificate issuer:       /CN=6A31ED73EA2E8D933750653A7FFBEF8E01E53F79
Certificate serial:       0B43B3F75268420B779BB3F7B4F36C3782D6EF7F
Authority key identifier: 6A:31:ED:73:EA:2E:8D:93:37:50:65:3A:7F:FB:EF:8E:01:E5:3F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa
Signing time:             Mon 27 May 2024 17:39:07 +0000
ROA not before:           Mon 27 May 2024 17:34:07 +0000
ROA not after:            Mon 26 May 2025 17:39:07 +0000
asID:                     270800
IP address blocks:        200.219.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:43:b3:f7:52:68:42:0b:77:9b:b3:f7:b4:f3:6c:37:82:d6:ef:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A31ED73EA2E8D933750653A7FFBEF8E01E53F79
        Validity
            Not Before: May 27 17:34:07 2024 GMT
            Not After : May 26 17:39:07 2025 GMT
        Subject: CN=7593D534C208CB00C7A15D7EAE9BFA2A5C20E487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5c:62:77:e2:dc:fb:f3:e0:3e:c7:37:1a:6e:
                    a4:47:96:fb:2f:4c:aa:11:c4:15:82:ab:5b:88:46:
                    bd:b5:1a:4a:8d:c5:77:da:e4:54:74:a7:21:9e:97:
                    8f:02:5c:a5:03:8b:42:33:d4:77:e6:9c:bb:f5:43:
                    55:cb:79:d6:e7:cb:0b:09:10:6b:54:7e:7f:40:8c:
                    e0:46:ad:a8:fa:b5:53:80:5f:7b:4b:84:ae:6e:ca:
                    18:e0:dc:f4:f6:bd:6f:ee:aa:4b:28:07:00:2e:d9:
                    94:5d:8c:64:46:e5:6a:c4:7e:9b:f7:0f:cc:ed:a3:
                    da:e0:85:45:6d:67:62:1b:88:b8:9e:ce:9f:6e:de:
                    b5:85:1c:55:77:03:9c:fb:73:6d:fa:86:a2:a6:de:
                    9d:e3:60:c2:1c:4c:6d:cd:08:dd:7e:2b:cd:10:9a:
                    11:8d:0e:b4:0c:8e:0d:da:96:98:7d:8e:a8:04:1c:
                    ef:a8:6b:16:9c:1f:fe:9e:08:11:06:51:c6:f2:67:
                    80:6c:e9:e2:e3:8e:ab:2f:09:8e:1c:48:a2:65:19:
                    c2:b0:72:2a:8b:3e:df:7a:23:3a:26:e1:3d:42:d9:
                    2f:e5:53:af:5e:2a:7c:9e:53:69:de:a0:ad:be:f4:
                    e6:f4:0f:a6:e2:34:76:64:4d:72:7b:e4:cb:1d:71:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:D5:34:C2:08:CB:00:C7:A1:5D:7E:AE:9B:FA:2A:5C:20:E4:87
            X509v3 Authority Key Identifier:
                keyid:6A:31:ED:73:EA:2E:8D:93:37:50:65:3A:7F:FB:EF:8E:01:E5:3F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A31ED73EA2E8D933750653A7FFBEF8E01E53F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/1/3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:81:14:ae:1e:5a:53:47:51:be:d4:1c:05:d7:5e:81:17:06:
         a8:33:7d:8f:e9:e0:fd:18:49:10:a4:94:e4:37:48:60:d7:d7:
         08:7c:8e:ad:d9:6e:46:e9:5c:c9:e9:2b:23:81:3c:6d:9b:dd:
         8d:98:d8:67:45:90:b4:e5:2e:68:4b:8a:83:e3:90:52:93:73:
         49:82:b6:27:98:5e:65:be:3b:b1:ca:fb:fc:de:d1:7a:51:ff:
         af:b4:d0:20:28:d1:53:b7:a0:1d:72:89:0c:57:72:07:10:f5:
         e4:2b:ac:4e:d5:63:24:45:3c:b4:0f:41:18:bf:fb:4c:90:55:
         19:36:24:56:8a:26:a4:d1:7b:63:30:4f:23:e5:98:ef:de:de:
         94:bb:6a:8c:32:2e:74:ea:41:50:04:0f:b7:1b:6e:b8:e7:e0:
         e2:35:20:13:2d:5e:ea:ee:a1:85:24:b8:5d:13:7b:3b:d7:e6:
         22:9d:31:a6:ab:7c:ec:49:92:6d:7d:f1:72:35:d0:43:60:e6:
         c6:43:40:41:e9:87:1b:96:b6:b9:72:2e:83:c9:6c:34:6d:30:
         2e:ff:27:8b:3a:15:38:d9:ef:a7:2c:1c:9b:27:1e:df:97:ba:
         40:6f:14:be:79:83:92:71:b1:6e:72:e4:e0:56:d1:6b:31:10:
         34:29:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 06:36:35 2024 by rpki-client on console-fra.rpki-client.org