Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa
File:                     3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa (raw, json)
Hash identifier:          2jr/uqExmAndMcO1U4WB2IiFjNf6CxKWVaVUZkW1TIk=
Subject key identifier:   D4:C7:E9:FC:EC:13:D0:33:E9:BF:E0:15:20:BE:93:00:17:7E:AB:41
Certificate issuer:       /CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
Certificate serial:       780FD09663614F4EA0A79124F5750E73E2AB7687
Authority key identifier: 78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa
Signing time:             Mon 29 Apr 2024 18:04:11 +0000
ROA not before:           Mon 29 Apr 2024 17:59:11 +0000
ROA not after:            Mon 28 Apr 2025 18:04:11 +0000
asID:                     53087
IP address blocks:        201.216.120.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0f:d0:96:63:61:4f:4e:a0:a7:91:24:f5:75:0e:73:e2:ab:76:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E0E3DA12B6955DA5A7545389B2671B15D7C570
        Validity
            Not Before: Apr 29 17:59:11 2024 GMT
            Not After : Apr 28 18:04:11 2025 GMT
        Subject: CN=D4C7E9FCEC13D033E9BFE01520BE9300177EAB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:09:b6:6c:39:05:56:e1:ae:cb:70:cb:bc:
                    37:f0:a4:a1:a6:d7:a4:87:46:f7:39:5b:9b:17:64:
                    f3:44:34:d7:ea:ab:c3:68:cc:ec:d5:00:ce:15:97:
                    21:b7:b0:bd:04:e6:01:d7:7d:c7:2d:e0:d5:26:05:
                    61:e7:3b:e5:a8:d9:06:ef:1b:ec:fd:1f:6a:c3:a0:
                    73:7c:38:1f:05:5f:3f:24:32:c6:8d:67:34:fb:61:
                    ac:0c:4c:48:58:6f:c9:af:4e:f1:f0:d8:50:c7:39:
                    ea:83:36:d6:44:81:78:04:a7:27:1c:56:85:79:b5:
                    c0:9d:94:2b:55:03:25:6d:12:c0:30:9f:d0:84:9e:
                    9a:c0:47:08:e6:75:29:82:ef:b3:23:a5:a9:3c:2d:
                    13:a9:6e:91:cf:fd:43:07:e7:ac:99:2f:4b:71:7e:
                    c2:7a:f4:f5:41:da:ed:a7:91:da:da:42:ae:23:cf:
                    b1:42:23:e0:ce:b7:a7:38:93:1f:c3:18:98:21:f0:
                    e1:a2:81:eb:fd:16:1a:a6:0d:d7:3f:4a:e1:c4:94:
                    e1:62:3c:f5:d8:af:5c:02:07:be:10:90:14:9e:a1:
                    5c:5c:29:04:de:64:50:ef:17:e5:0a:26:28:24:ac:
                    9f:bb:3d:9d:ca:e9:8e:f7:23:14:8c:34:cb:82:35:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C7:E9:FC:EC:13:D0:33:E9:BF:E0:15:20:BE:93:00:17:7E:AB:41
            X509v3 Authority Key Identifier:
                keyid:78:E0:E3:DA:12:B6:95:5D:A5:A7:54:53:89:B2:67:1B:15:D7:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/78E0E3DA12B6955DA5A7545389B2671B15D7C570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E0E3DA12B6955DA5A7545389B2671B15D7C570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/3230312e3231362e3132302e302f32342d3234203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:10:f8:d0:1e:d6:da:b6:a8:06:d2:98:08:4a:22:8d:a4:2b:
         38:b0:cf:68:99:84:19:b3:56:c3:a0:33:66:1e:f9:12:1e:b6:
         cb:19:bc:e8:0c:1f:13:43:74:01:aa:10:68:05:ec:fd:d2:9e:
         46:33:70:0f:ec:77:fd:ca:11:36:f6:02:d2:89:b9:2c:5f:e4:
         63:12:a9:b4:c0:fe:2e:7c:5b:79:91:cb:06:57:55:5b:d3:76:
         4a:64:85:d5:b8:9b:90:dc:af:e1:19:81:00:7f:50:52:c5:01:
         ca:5a:d9:1e:9d:be:60:d2:0f:63:22:e7:7a:91:50:f7:8b:36:
         64:e4:0b:39:91:e0:fe:04:6b:17:1e:4a:b0:95:18:95:b6:db:
         93:67:a6:b2:a4:f5:9f:f0:60:74:bd:28:bf:f2:e1:07:bb:83:
         bd:e7:45:9a:e2:d4:3e:41:43:37:c8:8a:e1:e0:91:64:1a:38:
         da:7c:50:3c:0a:49:74:73:54:17:4c:76:c8:61:e0:85:63:ab:
         e5:cc:76:d5:81:5a:82:f7:15:25:8c:85:d9:21:b6:a5:79:f9:
         a4:eb:c8:95:2b:ee:c8:fb:f0:dd:69:c9:00:ff:e3:76:4f:14:
         34:db:9f:a0:c4:40:3c:1f:01:93:dc:a8:7c:ab:ca:b6:1e:14:
         11:70:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:45:54 2024 by rpki-client on console-fra.rpki-client.org