Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa
File:                     3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa (raw, json)
Hash identifier:          MHQSo9v2ryIVxs++D8G1wdir126l2rAY9LXb2T5KXD8=
Subject key identifier:   F3:65:32:43:D4:41:63:05:6C:D5:C9:3B:29:BD:59:90:91:AB:6C:3E
Certificate issuer:       /CN=13294551CDF12A08FAFC2BB0A9B71E805FA26CE9
Certificate serial:       5406B21197F9C331CEAD4D795B8EB1FB0EB7377B
Authority key identifier: 13:29:45:51:CD:F1:2A:08:FA:FC:2B:B0:A9:B7:1E:80:5F:A2:6C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13294551CDF12A08FAFC2BB0A9B71E805FA26CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa
Signing time:             Thu 02 May 2024 20:48:16 +0000
ROA not before:           Thu 02 May 2024 20:43:16 +0000
ROA not after:            Thu 01 May 2025 20:48:16 +0000
asID:                     271262
IP address blocks:        200.106.176.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:06:b2:11:97:f9:c3:31:ce:ad:4d:79:5b:8e:b1:fb:0e:b7:37:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13294551CDF12A08FAFC2BB0A9B71E805FA26CE9
        Validity
            Not Before: May  2 20:43:16 2024 GMT
            Not After : May  1 20:48:16 2025 GMT
        Subject: CN=F3653243D44163056CD5C93B29BD599091AB6C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:51:86:e4:9d:77:0c:e1:b4:f8:75:1c:39:
                    27:2a:bb:8a:96:66:43:6c:b0:ca:ab:4f:a1:d2:08:
                    51:79:3b:d7:1b:85:17:95:41:3e:87:db:22:fb:db:
                    e7:ba:23:79:29:89:98:7f:b8:b0:3b:9d:8b:9f:ac:
                    e9:0f:e4:79:41:d9:41:30:4d:8f:c8:65:48:1f:05:
                    55:ec:14:46:86:cc:8e:5f:a7:26:9f:14:dd:99:da:
                    c2:68:0b:b5:ac:bf:f7:f8:08:d2:b4:b3:4b:df:7a:
                    76:08:59:42:d8:68:3e:25:1a:c5:9a:bb:cf:21:14:
                    58:3e:b0:3d:99:ad:f2:df:65:e3:65:b0:57:00:4c:
                    82:be:76:4e:5f:bf:42:65:eb:3a:f8:c0:f0:ad:ea:
                    c8:8c:2b:7c:f0:b3:28:0c:2f:52:db:02:ea:9f:be:
                    6d:ea:d1:a5:d5:66:bb:47:d2:32:be:61:36:90:82:
                    a3:45:8f:94:d3:25:3e:f5:0b:32:b7:70:36:97:aa:
                    e6:54:6b:7c:b5:a9:d4:6f:b2:91:2d:ee:48:6b:02:
                    0a:36:d5:56:94:7b:a2:08:60:7e:55:76:da:9e:72:
                    45:cd:0f:47:d6:a1:5b:ee:d8:6e:52:8e:bc:f4:57:
                    52:35:ea:aa:61:2b:ce:2b:e8:68:f5:8e:27:d4:96:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:32:43:D4:41:63:05:6C:D5:C9:3B:29:BD:59:90:91:AB:6C:3E
            X509v3 Authority Key Identifier:
                keyid:13:29:45:51:CD:F1:2A:08:FA:FC:2B:B0:A9:B7:1E:80:5F:A2:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/13294551CDF12A08FAFC2BB0A9B71E805FA26CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13294551CDF12A08FAFC2BB0A9B71E805FA26CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fXi5U94Hx8jnfcCT8H3MyQqaYtJYmrKx2GmC74boMtY/0/3230302e3130362e3137362e302f32322d3234203d3e20323731323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:92:ed:51:36:2c:c9:a7:cd:eb:52:d8:cc:63:b4:b9:92:
         77:92:fd:6e:11:d3:dc:a6:64:af:27:31:78:36:e9:06:13:4a:
         12:e8:ef:63:23:a7:55:b2:36:db:da:88:15:3a:2e:5d:ea:07:
         99:18:38:d3:d8:a1:c6:12:bd:97:c6:0f:2d:14:3c:37:08:10:
         96:50:2f:f0:bb:84:42:08:9d:e3:b1:68:94:65:cd:90:14:23:
         52:f0:69:4c:c9:6e:df:58:5b:9b:71:7a:84:4e:ef:11:f0:b7:
         cc:3c:ef:8b:00:ba:46:51:68:ee:85:32:1b:a9:38:59:b0:00:
         e8:85:33:b1:8a:0a:5f:fb:65:19:50:b0:5a:3b:55:fc:33:4a:
         b4:7b:3c:35:56:e3:39:be:8e:3e:bd:71:a9:64:c5:9b:e0:c0:
         53:37:67:35:a6:aa:1a:6d:30:80:da:db:48:98:ed:22:09:a6:
         ad:91:b0:e3:ca:fe:84:e2:13:7f:23:c3:df:2f:f7:c3:be:67:
         86:d6:f5:64:34:53:75:3b:25:9b:cc:1c:d3:5c:e9:a2:45:f7:
         ff:47:b1:91:69:87:b5:3e:5c:cd:6c:b0:e7:c7:5d:eb:e7:7a:
         69:83:5f:47:de:f7:5a:20:a2:fe:b0:51:c6:b9:d2:3c:a4:11:
         f4:09:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 04:44:33 2024 by rpki-client on console-fra.rpki-client.org