Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3234203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32322d3234203d3e20323730393135.roa (raw, json)
Hash identifier:          f29vOsZBAMCFaMNN9/FmBn+lJQj1SzMaKQXS8x/MLG4=
Subject key identifier:   02:E6:17:94:16:5D:A4:9A:42:DF:6A:A0:30:EE:3F:AD:17:D3:42:FE
Certificate issuer:       /CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
Certificate serial:       7935DC2D59881D76BBF6B4BF9223893D237F07C6
Authority key identifier: 6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3234203d3e20323730393135.roa
Signing time:             Thu 21 Mar 2024 00:05:57 +0000
ROA not before:           Thu 21 Mar 2024 00:00:57 +0000
ROA not after:            Thu 20 Mar 2025 00:05:57 +0000
asID:                     270915
IP address blocks:        201.140.216.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:dc:2d:59:88:1d:76:bb:f6:b4:bf:92:23:89:3d:23:7f:07:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2
        Validity
            Not Before: Mar 21 00:00:57 2024 GMT
            Not After : Mar 20 00:05:57 2025 GMT
        Subject: CN=02E61794165DA49A42DF6AA030EE3FAD17D342FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:4a:e5:c1:00:2d:9e:5f:80:89:d7:08:7b:
                    81:9c:eb:b3:c4:e3:b5:65:e1:97:29:94:4f:5f:6f:
                    a4:b8:02:fd:27:f3:81:5b:4b:83:30:ed:93:2a:68:
                    7a:d2:4c:0a:35:5a:ef:64:b3:0a:a2:23:3e:bb:98:
                    49:61:26:2f:ea:b0:e2:26:54:2f:a9:c5:4b:27:53:
                    8c:5f:12:9c:d9:f3:f9:55:b1:d6:1e:fc:10:b8:5e:
                    33:de:79:25:72:16:cf:7a:f3:96:dc:01:35:f1:f6:
                    ab:63:ac:c3:3a:32:d1:fd:d2:0f:b9:c9:fa:9d:01:
                    8e:b4:38:ed:7e:73:04:51:4c:12:d4:6a:3e:71:8a:
                    91:74:2c:b2:02:bd:1b:a1:42:1b:8b:4a:bc:73:82:
                    ca:b3:73:af:e4:ae:1e:fc:23:52:89:f5:b5:24:4c:
                    02:a1:c4:f2:88:4a:31:21:42:f9:a6:bf:33:8d:08:
                    4f:9e:c7:3a:e4:9d:c5:e6:d2:71:ca:54:37:ef:4a:
                    82:4f:df:a7:a4:ed:de:0d:91:a0:ed:9f:65:64:6a:
                    a1:f5:24:d9:1b:92:35:4c:51:e4:f1:41:47:a2:02:
                    97:ac:88:21:bc:c0:67:c0:4b:80:d4:cc:c7:44:24:
                    08:c5:04:90:f7:11:94:bb:b6:b9:e3:4b:c3:ec:b5:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:17:94:16:5D:A4:9A:42:DF:6A:A0:30:EE:3F:AD:17:D3:42:FE
            X509v3 Authority Key Identifier:
                keyid:6D:4A:90:70:C4:DB:0A:47:FF:D6:2E:0A:BD:47:B6:70:F8:5F:4B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4A9070C4DB0A47FFD62E0ABD47B670F85F4BA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3234203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:76:63:87:e6:40:27:cc:3a:4a:3f:99:a2:20:15:50:54:fb:
         53:88:af:55:31:4d:79:c5:a3:f2:7b:52:7a:16:69:c5:be:76:
         46:47:6f:6c:6e:df:61:ac:03:68:31:5a:23:21:ca:35:36:81:
         80:d1:ba:9e:77:cf:58:e6:af:95:62:f3:29:7d:e9:f4:c9:bb:
         79:88:11:9b:de:75:d1:fc:b4:17:6f:4f:53:d7:7e:e1:5e:6e:
         ad:b1:43:e8:a0:f1:70:39:b1:95:79:87:36:d2:d5:6e:43:3a:
         23:6b:e6:17:1d:ad:86:a8:30:db:90:f0:f4:1a:ba:11:fb:63:
         f1:92:a2:3c:c4:bd:56:1a:b1:78:8c:8c:2d:92:3a:1f:d9:9a:
         f6:9a:f1:92:1e:eb:a6:18:77:1d:70:9a:ae:24:5b:6a:e8:ac:
         24:13:35:8b:6d:7d:74:13:18:a8:19:95:09:e6:ac:22:6c:a6:
         19:21:8b:64:ee:ae:c8:62:f6:2f:de:be:e6:c6:de:31:29:97:
         99:14:1c:e2:6f:18:68:5a:8e:d4:e9:04:c9:ef:b0:75:b2:2a:
         b4:7d:7c:ac:dc:ec:b7:5a:0a:2e:88:fd:54:43:2a:b7:6a:76:
         98:6f:e5:b1:2f:c6:ab:09:4f:de:72:d7:c9:f6:44:cf:61:e6:
         2b:46:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 23:41:02 2024 by rpki-client on console.sobornost.net