Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa
File:                     3230302e37312e38322e302f32332d3233203d3e20323731323030.roa (raw, json)
Hash identifier:          ilgUUA2IbNanDMFHVipDHvIYkcDPbSaJftalHlU3z+Y=
Subject key identifier:   50:8F:78:B2:45:2D:71:79:36:0B:E2:13:6E:9E:7D:AF:1B:CD:8A:0E
Certificate issuer:       /CN=87AE99ED75888247248D5B8495AEF61EE8970759
Certificate serial:       188907187034BE1EE8BF9F741187BC9B4D7EE462
Authority key identifier: 87:AE:99:ED:75:88:82:47:24:8D:5B:84:95:AE:F6:1E:E8:97:07:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AE99ED75888247248D5B8495AEF61EE8970759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa
Signing time:             Tue 03 Sep 2024 08:04:49 +0000
ROA not before:           Tue 03 Sep 2024 07:59:49 +0000
ROA not after:            Tue 02 Sep 2025 08:04:49 +0000
asID:                     271200
IP address blocks:        200.71.82.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:89:07:18:70:34:be:1e:e8:bf:9f:74:11:87:bc:9b:4d:7e:e4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AE99ED75888247248D5B8495AEF61EE8970759
        Validity
            Not Before: Sep  3 07:59:49 2024 GMT
            Not After : Sep  2 08:04:49 2025 GMT
        Subject: CN=508F78B2452D7179360BE2136E9E7DAF1BCD8A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:fa:a0:dc:af:43:1b:9a:53:a8:29:ad:14:
                    a5:37:69:de:41:15:08:01:cb:00:9b:d6:73:db:8d:
                    49:af:be:9f:28:63:4e:2d:c1:da:3a:57:8b:a4:a6:
                    30:f9:98:40:61:b3:09:d7:fc:0e:67:82:a6:c4:72:
                    d5:c3:ec:0c:cc:8c:64:57:9f:35:a3:4d:0c:2d:8a:
                    9d:5d:72:b5:a9:a6:8e:fd:ba:0a:14:a7:97:83:03:
                    28:78:86:f4:ac:df:e7:db:40:14:40:8b:7e:e5:3e:
                    84:5b:10:96:a2:b0:2e:fd:4b:7f:c6:b2:41:cc:49:
                    66:bb:70:47:5f:47:c5:82:8b:59:2c:9c:55:57:b3:
                    00:c9:c0:c1:a6:0c:c1:00:94:42:53:33:70:4a:c6:
                    ee:66:73:45:f9:52:56:a5:3b:14:89:bb:ac:f9:59:
                    02:e3:f4:0b:fe:63:e5:92:0e:49:2e:2d:0d:9c:3c:
                    00:b3:56:97:f2:33:ed:0d:6f:e1:50:53:48:25:83:
                    7e:33:1b:30:d6:a3:39:5d:56:83:88:92:ec:9a:ac:
                    e8:68:15:23:bf:56:38:5b:f9:12:41:51:71:2e:2a:
                    26:f3:cb:30:ec:3b:39:d9:14:d9:9e:6b:05:cb:d3:
                    85:79:1b:db:bd:2a:e4:0c:13:da:eb:a9:a9:8d:37:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8F:78:B2:45:2D:71:79:36:0B:E2:13:6E:9E:7D:AF:1B:CD:8A:0E
            X509v3 Authority Key Identifier:
                keyid:87:AE:99:ED:75:88:82:47:24:8D:5B:84:95:AE:F6:1E:E8:97:07:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/87AE99ED75888247248D5B8495AEF61EE8970759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AE99ED75888247248D5B8495AEF61EE8970759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38322e302f32332d3233203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:53:ed:69:42:8e:d5:68:3b:b5:40:07:be:1b:4b:b2:4e:fd:
         ab:7d:43:57:19:91:4f:27:c8:32:71:a7:c2:68:d4:44:60:96:
         ef:bf:cb:28:ca:8a:d2:f9:a1:0f:d3:c0:63:22:b3:24:61:87:
         fc:8e:be:42:c6:4e:02:11:6e:f0:88:ec:0b:24:d9:3b:ed:af:
         8f:a0:78:85:77:1d:df:26:c0:bc:1d:05:d5:f6:14:6a:27:8a:
         9f:ba:3e:65:fb:1e:2c:a7:98:c9:ed:11:62:56:e2:0a:59:d7:
         39:8d:d1:6d:e1:33:7d:1c:84:44:52:3f:a2:df:8f:a0:d8:7e:
         26:d3:10:a8:b8:e4:c2:50:03:45:37:8c:4c:29:31:6e:d7:d3:
         7f:81:0e:58:dc:41:4e:0b:8d:21:c6:b7:36:36:91:a8:89:3d:
         19:53:e4:1a:a4:ab:b5:73:ba:57:e1:10:d5:f6:16:dc:fd:ff:
         e2:31:83:c8:d7:ff:6f:75:ef:2a:ab:72:97:19:90:15:57:29:
         e6:da:d7:8b:ab:8a:bf:f1:77:b7:7f:b7:26:fb:5b:39:ec:9c:
         8c:27:c8:c7:d3:ea:9b:3a:ea:28:48:85:ae:1c:17:55:e1:5a:
         cb:a6:fe:90:12:ad:af:a3:17:2b:bd:44:dc:45:9f:d1:5b:a9:
         09:56:69:6e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUGIkHGHA0vh7ov590EYe8m01+5GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBRTk5RUQ3NTg4ODI0NzI0OEQ1Qjg0OTVBRUY2MUVF
ODk3MDc1OTAeFw0yNDA5MDMwNzU5NDlaFw0yNTA5MDIwODA0NDlaMDMxMTAvBgNV
BAMTKDUwOEY3OEIyNDUyRDcxNzkzNjBCRTIxMzZFOUU3REFGMUJDRDhBMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Bvqg3K9DG5pTqCmtFKU3ad5B
FQgBywCb1nPbjUmvvp8oY04twdo6V4ukpjD5mEBhswnX/A5ngqbEctXD7AzMjGRX
nzWjTQwtip1dcrWppo79ugoUp5eDAyh4hvSs3+fbQBRAi37lPoRbEJaisC79S3/G
skHMSWa7cEdfR8WCi1ksnFVXswDJwMGmDMEAlEJTM3BKxu5mc0X5UlalOxSJu6z5
WQLj9Av+Y+WSDkkuLQ2cPACzVpfyM+0Nb+FQU0glg34zGzDWozldVoOIkuyarOho
FSO/Vjhb+RJBUXEuKibzyzDsOznZFNmeawXL04V5G9u9KuQME9rrqamNNzndAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUUI94skUtcXk2C+ITbp59rxvNig4wHwYDVR0j
BBgwFoAUh66Z7XWIgkckjVuEla72HuiXB1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YQXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5V
LzAvODdBRTk5RUQ3NTg4ODI0NzI0OEQ1Qjg0OTVBRUY2MUVFODk3MDc1OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84N0FFOTlFRDc1ODg4MjQ3MjQ4
RDVCODQ5NUFFRjYxRUU4OTcwNzU5LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
QXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5VLzAvMzIz
MDMwMmUzNzMxMmUzODMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzIz
MDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQByEdSMA0GCSqGSIb3DQEBCwUAA4IBAQACU+1pQo7VaDu1
QAe+G0uyTv2rfUNXGZFPJ8gycafCaNREYJbvv8soyorS+aEP08BjIrMkYYf8jr5C
xk4CEW7wiOwLJNk77a+PoHiFdx3fJsC8HQXV9hRqJ4qfuj5l+x4sp5jJ7RFiVuIK
Wdc5jdFt4TN9HIREUj+i34+g2H4m0xCouOTCUANFN4xMKTFu19N/gQ5Y3EFOC40h
xrc2NpGoiT0ZU+QapKu1c7pX4RDV9hbc/f/iMYPI1/9vde8qq3KXGZAVVynm2teL
q4q/8Xe3f7cm+1s57JyMJ8jH0+qbOuooSIWuHBdV4VrLpv6QEq2voxcrvUTcRZ/R
W6kJVmlu
-----END CERTIFICATE-----
Generated at Thu Oct 3 05:59:13 2024 by rpki-client on console-fra.rpki-client.org