Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa
File:                     3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa (raw, json)
Hash identifier:          cmubC//DTPijga5lI3QLD6VeH8LHtEYsCPpBenWInrA=
Subject key identifier:   FD:78:1C:B6:80:4A:79:0C:70:07:D0:B8:B5:3F:34:D6:DB:F6:54:18
Certificate issuer:       /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial:       4902CEE8A7F6B01B0914C331D61D9C0FDF084872
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa
Signing time:             Thu 04 Apr 2024 12:47:31 +0000
ROA not before:           Thu 04 Apr 2024 12:42:31 +0000
ROA not after:            Thu 03 Apr 2025 12:47:31 +0000
asID:                     270834
IP address blocks:        200.229.241.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:02:ce:e8:a7:f6:b0:1b:09:14:c3:31:d6:1d:9c:0f:df:08:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
        Validity
            Not Before: Apr  4 12:42:31 2024 GMT
            Not After : Apr  3 12:47:31 2025 GMT
        Subject: CN=FD781CB6804A790C7007D0B8B53F34D6DBF65418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:4a:ec:e9:4b:c9:bc:b7:62:80:df:f7:1f:
                    1d:92:44:a4:3b:7a:8d:7f:aa:81:d3:a7:55:4f:76:
                    2b:db:c4:48:7d:39:27:33:90:61:80:35:7e:5d:9d:
                    63:43:65:9c:85:31:b9:c9:80:40:b4:df:31:d1:bf:
                    74:e8:a5:5a:e5:71:77:fd:95:46:d5:56:cc:87:47:
                    76:bc:aa:9c:f0:df:b9:f6:78:df:58:38:b5:33:9e:
                    27:db:f1:a9:e8:0b:1d:93:38:5e:b5:af:16:25:f6:
                    f6:69:02:5e:dc:eb:46:5a:67:df:5f:4d:49:28:de:
                    eb:ca:4d:fe:f0:8f:02:e7:e2:e1:71:a6:6e:ce:f1:
                    2c:be:df:01:25:f3:ff:11:7f:f6:ca:a2:29:73:46:
                    30:89:43:65:94:40:da:cc:3c:20:cf:9c:87:16:6f:
                    20:7c:f1:37:ed:da:77:55:54:32:ba:3c:9c:c9:18:
                    7b:9f:c7:b3:a3:b0:d3:83:7c:e4:cc:4d:10:14:de:
                    8e:90:0e:18:48:ac:cc:a9:df:c5:d0:e1:24:75:dc:
                    70:3c:0c:70:a2:76:de:be:20:fb:67:91:77:49:06:
                    1a:3e:a2:f9:01:12:c1:75:c6:0d:73:06:c6:f4:65:
                    d5:45:68:13:e5:10:f3:1d:5f:15:4a:2a:a7:43:c3:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:78:1C:B6:80:4A:79:0C:70:07:D0:B8:B5:3F:34:D6:DB:F6:54:18
            X509v3 Authority Key Identifier:
                keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234312e302f32342d3234203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:f9:43:54:0f:f4:1f:6b:df:47:1e:7f:c1:ef:3c:4e:97:
         14:18:c4:ec:de:79:52:5c:11:fd:88:5c:91:75:5c:33:bb:4e:
         42:68:bf:bd:d9:fa:9b:e3:0d:41:1b:16:aa:f0:f8:d9:e9:dc:
         bf:42:4c:b2:69:58:1b:0a:2e:a8:8b:86:1a:89:a4:5e:d8:99:
         cb:2d:45:ce:8d:f3:6a:56:58:37:d7:4b:4a:2d:be:f3:23:5f:
         ea:d6:48:ac:fa:6a:88:77:ec:40:aa:45:e0:38:a1:42:99:97:
         bc:c6:a6:db:a2:dd:c1:0d:1c:71:d9:89:a5:5e:3e:79:12:3b:
         21:ef:b5:a1:c9:d5:23:86:e2:50:f7:a4:cd:56:6b:53:a7:a7:
         23:05:34:2c:89:09:0e:8d:6d:9c:2b:ab:82:13:5a:fc:c0:63:
         af:e3:d6:44:be:56:b7:bb:ad:15:d8:e4:1f:8d:b6:35:86:aa:
         70:7c:78:29:61:7b:9a:43:db:0d:5c:87:fa:44:8d:fa:da:f4:
         83:c6:2d:c5:28:e3:7e:f0:26:a5:16:7d:74:dc:09:c0:68:7e:
         ff:f1:98:08:3e:d5:a2:cf:a0:1d:96:44:aa:9f:f9:04:d5:2b:
         4b:f1:90:e7:b3:52:f5:61:d9:87:37:83:f2:ea:97:0f:3a:32:
         22:59:8c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:07:15 2024 by rpki-client on console-ams.rpki-client.org