Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3234203d3e20323731323030.roa
File:                     3230302e37312e38332e302f32342d3234203d3e20323731323030.roa (raw, json)
Hash identifier:          yhdy7YxU61jjsPrU6NT/gftXGgoeBGU3Q8mdh5DiOEI=
Subject key identifier:   EA:F0:6E:80:7C:CB:5E:D2:82:03:AF:9F:C1:0B:3F:1C:93:2B:B6:F5
Certificate issuer:       /CN=87AE99ED75888247248D5B8495AEF61EE8970759
Certificate serial:       3B2FF9083A68377A8C10549DE8B30F4207631A75
Authority key identifier: 87:AE:99:ED:75:88:82:47:24:8D:5B:84:95:AE:F6:1E:E8:97:07:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AE99ED75888247248D5B8495AEF61EE8970759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3234203d3e20323731323030.roa
Signing time:             Tue 03 Sep 2024 08:04:57 +0000
ROA not before:           Tue 03 Sep 2024 07:59:57 +0000
ROA not after:            Tue 02 Sep 2025 08:04:57 +0000
asID:                     271200
IP address blocks:        200.71.83.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:f9:08:3a:68:37:7a:8c:10:54:9d:e8:b3:0f:42:07:63:1a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AE99ED75888247248D5B8495AEF61EE8970759
        Validity
            Not Before: Sep  3 07:59:57 2024 GMT
            Not After : Sep  2 08:04:57 2025 GMT
        Subject: CN=EAF06E807CCB5ED28203AF9FC10B3F1C932BB6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:6d:82:2c:80:de:50:fe:8b:7b:6a:d8:8b:
                    8f:5a:6d:d8:1a:88:fe:f6:8a:48:4e:6b:2b:c3:ca:
                    b1:bb:6b:9a:3a:0f:62:b5:98:5d:3f:3a:d8:d5:75:
                    81:4b:e0:5f:1d:fa:78:ec:11:63:5a:e1:21:44:b7:
                    60:58:04:0b:62:e7:08:8e:4a:40:e8:64:2f:f1:57:
                    ef:35:60:d5:84:09:3d:aa:19:86:ea:ec:28:df:4d:
                    63:23:1c:e7:06:f2:da:83:aa:0b:2d:73:36:52:33:
                    ec:48:7e:6c:a3:0a:d9:77:55:65:75:0d:26:46:aa:
                    75:3b:70:cc:6c:55:96:5c:7d:0b:a9:06:6c:99:ce:
                    7c:1c:fa:39:36:77:40:a2:76:fa:11:e1:05:bd:2d:
                    cb:cb:33:8c:3a:b0:95:66:28:c3:78:8a:50:0f:b6:
                    c4:fb:67:00:12:87:88:7d:21:d4:7a:92:21:7f:63:
                    87:55:83:a3:92:54:ef:d5:17:14:ba:9f:85:8d:97:
                    b8:2d:cc:0e:c8:83:58:60:ff:8d:d5:ee:99:91:ed:
                    20:06:41:99:f3:e8:e2:d7:6b:64:53:cc:af:7e:8a:
                    8f:cf:26:33:7c:c1:b4:c8:63:75:38:14:88:78:0b:
                    bd:f6:6c:28:9f:13:6c:d6:6d:2d:9b:4b:5f:77:2f:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:6E:80:7C:CB:5E:D2:82:03:AF:9F:C1:0B:3F:1C:93:2B:B6:F5
            X509v3 Authority Key Identifier:
                keyid:87:AE:99:ED:75:88:82:47:24:8D:5B:84:95:AE:F6:1E:E8:97:07:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/87AE99ED75888247248D5B8495AEF61EE8970759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AE99ED75888247248D5B8495AEF61EE8970759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3230302e37312e38332e302f32342d3234203d3e20323731323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:da:a0:d1:26:33:1e:47:e8:65:e9:08:45:41:a1:3a:77:
         00:d2:32:81:72:c5:b8:65:a8:83:e2:ec:46:a8:3e:5b:47:03:
         e6:a2:bd:b6:3c:4c:4a:0e:55:a2:90:f3:3f:e8:9d:25:c5:1b:
         bd:eb:e8:ad:eb:ba:2a:56:91:91:89:16:32:58:b0:de:43:bd:
         2f:76:c8:03:f8:15:41:1b:f5:9b:13:74:29:45:d2:22:57:1f:
         be:4e:a3:5e:47:8a:15:eb:ac:cc:29:9d:4d:4c:64:4e:fe:17:
         65:2d:46:83:fd:f2:e6:b7:34:b2:9b:13:ee:02:e9:19:a8:df:
         cc:f6:0a:f4:9f:23:b6:6d:4b:9b:19:74:21:f7:b3:08:b3:61:
         d0:f1:50:e0:96:dd:01:a9:9d:93:68:1e:f3:b2:e0:16:a0:db:
         06:4d:87:a5:36:c8:84:3b:ab:e1:b1:a0:95:cb:41:d2:22:be:
         61:2d:24:42:f5:e6:93:19:24:98:76:7c:8b:2a:df:8a:17:9d:
         f8:7c:a7:80:72:fd:f4:68:63:71:c0:8e:c3:b4:59:c8:21:36:
         dc:57:0f:96:56:74:c8:05:d9:05:e2:02:72:4e:dc:c7:53:d9:
         3c:61:92:b6:a9:d6:55:2b:94:ab:fa:8b:de:fa:2b:fc:24:7f:
         57:06:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 07:10:28 2024 by rpki-client on console-ams.rpki-client.org