Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa
File:                     3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa (raw, json)
Hash identifier:          QPNWJMPt5eb/4ZrdGx0LPCtnIBNetpZjiR/uyHuFwSI=
Subject key identifier:   3E:23:89:82:15:1A:01:C6:E4:E6:CD:4A:F9:E6:8C:61:16:82:C7:A2
Certificate issuer:       /CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
Certificate serial:       0D86270B13009008CC36E7722700EC244130A706
Authority key identifier: 3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa
Signing time:             Thu 04 Apr 2024 12:47:30 +0000
ROA not before:           Thu 04 Apr 2024 12:42:30 +0000
ROA not after:            Thu 03 Apr 2025 12:47:30 +0000
asID:                     270834
IP address blocks:        200.229.242.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:86:27:0b:13:00:90:08:cc:36:e7:72:27:00:ec:24:41:30:a7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2
        Validity
            Not Before: Apr  4 12:42:30 2024 GMT
            Not After : Apr  3 12:47:30 2025 GMT
        Subject: CN=3E238982151A01C6E4E6CD4AF9E68C611682C7A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:5c:45:60:f4:65:5c:19:16:69:94:f2:37:
                    1f:2f:c8:57:27:5a:32:4a:68:70:87:11:8e:1f:d5:
                    86:5d:76:80:43:9e:4c:71:74:d6:52:78:65:c2:dd:
                    ee:29:f6:57:0c:f4:fc:2d:85:82:9a:71:79:50:3b:
                    9f:a6:b3:d3:9e:e9:38:69:85:a8:37:5f:e6:ab:55:
                    f1:e6:5d:96:ab:5f:17:7b:93:72:7f:18:e7:d3:76:
                    c5:78:38:54:9e:73:e9:21:2b:c1:c8:f2:35:05:67:
                    ed:c2:2c:26:82:4d:b5:a3:39:8d:68:46:22:25:33:
                    73:a8:d1:5a:5d:f8:c2:1a:4b:69:5e:9a:ad:8c:f0:
                    ed:f2:cc:85:dc:d1:d4:79:a9:87:ea:6b:e1:c2:99:
                    25:c2:07:e4:be:e3:9e:03:bf:a6:34:72:49:9c:df:
                    78:85:5b:3e:6b:a7:ed:04:ff:d7:dc:79:13:c1:5d:
                    f6:35:db:f8:ad:06:6f:bd:e7:ba:6a:ae:66:9c:1d:
                    da:3e:b2:d0:38:52:fa:5b:47:69:a0:d5:dc:ab:12:
                    11:4c:18:11:58:7b:c3:20:ad:e9:f5:f3:33:4e:48:
                    58:d0:3a:ae:94:84:87:d3:db:fa:2b:6a:ed:a8:fa:
                    0d:f2:11:fd:66:53:30:49:55:2b:b3:43:c4:5c:3c:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:23:89:82:15:1A:01:C6:E4:E6:CD:4A:F9:E6:8C:61:16:82:C7:A2
            X509v3 Authority Key Identifier:
                keyid:3D:DC:A3:FF:8F:B2:42:D0:C2:C2:1E:F1:43:B4:74:D1:E0:3F:7A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDCA3FF8FB242D0C2C21EF143B474D1E03F7AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDqZwftGNNdEovkKK37qK15hmZSxv2ib6y4t8Hhnps5c/1/3230302e3232392e3234322e302f32342d3234203d3e20323730383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:a4:91:40:f3:24:5d:f1:87:04:e2:8c:aa:85:22:0e:77:
         47:40:51:b8:a3:2f:e2:30:af:cc:a1:16:a9:2b:71:7f:d4:ca:
         1b:30:70:90:4c:5a:c6:36:fe:99:0a:43:c5:3a:9b:5f:47:82:
         16:b4:cb:a2:e5:67:90:95:8e:8c:45:c4:b6:75:e3:4a:55:a0:
         e9:b6:c3:8f:3d:02:7a:a9:7a:94:b8:4e:73:06:0d:76:33:20:
         ea:38:12:a5:9e:eb:0e:6c:05:cc:dd:31:00:d9:46:5a:83:63:
         20:0e:d4:40:1d:a9:51:fd:71:61:44:f9:cb:ba:87:43:07:57:
         8c:98:0d:42:8b:3a:a3:e0:e4:77:ad:ac:76:0c:bd:36:8f:43:
         ed:2c:e2:c2:fd:c8:78:30:31:ca:c2:28:97:ac:69:8e:42:47:
         8a:28:da:86:b7:7e:ab:9d:8e:c3:63:71:dd:c4:f7:04:9d:7f:
         2e:dc:09:0f:d8:5d:50:52:08:3c:97:0f:7f:fb:03:4f:de:c1:
         e2:dd:a4:a8:d9:f3:59:77:15:26:1d:71:6e:94:da:d2:e4:d6:
         d7:c3:f7:e0:06:dd:fc:8f:2f:45:e6:bd:8c:e3:d9:c8:3b:ec:
         bc:34:9d:c5:0e:c0:7b:15:9c:58:ac:c5:f8:e8:a8:d5:0f:72:
         13:f7:20:88
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDYYnCxMAkAjMNudyJwDsJEEwpwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0REQ0EzRkY4RkIyNDJEMEMyQzIxRUYxNDNCNDc0RDFF
MDNGN0FFMjAeFw0yNDA0MDQxMjQyMzBaFw0yNTA0MDMxMjQ3MzBaMDMxMTAvBgNV
BAMTKDNFMjM4OTgyMTUxQTAxQzZFNEU2Q0Q0QUY5RTY4QzYxMTY4MkM3QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYVxFYPRlXBkWaZTyNx8vyFcn
WjJKaHCHEY4f1YZddoBDnkxxdNZSeGXC3e4p9lcM9PwthYKacXlQO5+ms9Oe6Thp
hag3X+arVfHmXZarXxd7k3J/GOfTdsV4OFSec+khK8HI8jUFZ+3CLCaCTbWjOY1o
RiIlM3Oo0Vpd+MIaS2lemq2M8O3yzIXc0dR5qYfqa+HCmSXCB+S+454Dv6Y0ckmc
33iFWz5rp+0E/9fceRPBXfY12/itBm+957pqrmacHdo+stA4UvpbR2mg1dyrEhFM
GBFYe8Mgren18zNOSFjQOq6UhIfT2/orau2o+g3yEf1mUzBJVSuzQ8RcPFgFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPiOJghUaAcbk5s1K+eaMYRaCx6IwHwYDVR0j
BBgwFoAUPdyj/4+yQtDCwh7xQ7R00eA/euIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRxWndmdEdOTmRFb3ZrS0szN3FLMTVobVpTeHYyaWI2eTR0OEhobnBz
NWMvMS8zRERDQTNGRjhGQjI0MkQwQzJDMjFFRjE0M0I0NzREMUUwM0Y3QUUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNERENBM0ZGOEZCMjQyRDBD
MkMyMUVGMTQzQjQ3NEQxRTAzRjdBRTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pEcVp3ZnRHTk5kRW92a0tLMzdxSzE1aG1aU3h2MmliNnk0dDhIaG5wczVjLzEv
MzIzMDMwMmUzMjMyMzkyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl8jANBgkqhkiG9w0BAQsFAAOCAQEAVsik
kUDzJF3xhwTijKqFIg53R0BRuKMv4jCvzKEWqStxf9TKGzBwkExaxjb+mQpDxTqb
X0eCFrTLouVnkJWOjEXEtnXjSlWg6bbDjz0Ceql6lLhOcwYNdjMg6jgSpZ7rDmwF
zN0xANlGWoNjIA7UQB2pUf1xYUT5y7qHQwdXjJgNQos6o+Dkd62sdgy9No9D7Szi
wv3IeDAxysIol6xpjkJHiijahrd+q52Ow2Nx3cT3BJ1/LtwJD9hdUFIIPJcPf/sD
T97B4t2kqNnzWXcVJh1xbpTa0uTW18P34Abd/I8vRea9jOPZyDvsvDSdxQ7AexWc
WKzF+Oio1Q9yE/cgiA==
-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:26 2024 by rpki-client on console-fra.rpki-client.org