Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa
File:                     3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa (raw, json)
Hash identifier:          eutLNixakHiRPDOsNCIUFQgCXCDJMyN0jRoMdMQu7mU=
Subject key identifier:   D8:BD:06:69:A6:99:0D:CD:76:3F:30:18:4D:F4:DA:68:78:9D:F9:39
Certificate issuer:       /CN=2FEB984B03AE182A25501462242A224C191703BF
Certificate serial:       132013169B49D0E0328A2C5B62A1326C5B11CAF7
Authority key identifier: 2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa
Signing time:             Wed 27 Nov 2024 21:10:50 +0000
ROA not before:           Wed 27 Nov 2024 21:05:50 +0000
ROA not after:            Wed 26 Nov 2025 21:10:50 +0000
asID:                     270288
IP address blocks:        200.123.235.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:20:13:16:9b:49:d0:e0:32:8a:2c:5b:62:a1:32:6c:5b:11:ca:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FEB984B03AE182A25501462242A224C191703BF
        Validity
            Not Before: Nov 27 21:05:50 2024 GMT
            Not After : Nov 26 21:10:50 2025 GMT
        Subject: CN=D8BD0669A6990DCD763F30184DF4DA68789DF939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:d6:2c:f5:0c:72:8a:c8:55:f2:3f:f6:34:
                    79:ec:96:e1:a2:71:bd:de:9c:2e:bd:ec:cf:d4:25:
                    e7:38:5b:e4:bc:b2:3b:e1:0b:06:ab:6b:1b:88:e3:
                    3b:3e:38:92:4f:e6:ab:50:8c:7b:b4:d0:61:18:a4:
                    6c:1b:bf:f3:c9:8f:30:54:1c:1a:88:ed:71:b5:6a:
                    91:57:87:16:c4:93:55:90:4a:13:02:a7:22:90:29:
                    da:56:c2:1c:8e:52:b7:e5:f8:86:c0:9a:02:e2:e5:
                    06:d0:8a:65:9c:28:ee:d5:82:e0:75:4d:b2:ab:2e:
                    68:7f:a6:f3:13:9b:0f:08:21:e7:4a:c1:59:21:70:
                    89:06:a4:10:6c:6a:73:71:23:e5:60:bd:1f:69:bd:
                    df:6f:2b:eb:6b:59:e8:e6:a0:74:ca:a1:26:69:f0:
                    bb:2b:46:2f:62:d5:f8:ea:74:f0:7b:28:3b:89:37:
                    f9:26:03:56:34:02:06:69:88:5d:f8:31:ac:7b:d8:
                    b0:45:7b:b2:71:11:f5:c8:d2:49:ab:06:e4:98:3f:
                    14:0c:ec:a5:2a:23:c9:a8:65:f1:f0:38:9a:9d:b1:
                    4d:b6:99:65:82:03:9e:91:8a:77:da:f5:92:53:5c:
                    e6:71:ab:33:fc:f6:dc:6d:e1:5e:f2:53:ac:c6:c7:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BD:06:69:A6:99:0D:CD:76:3F:30:18:4D:F4:DA:68:78:9D:F9:39
            X509v3 Authority Key Identifier:
                keyid:2F:EB:98:4B:03:AE:18:2A:25:50:14:62:24:2A:22:4C:19:17:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/2FEB984B03AE182A25501462242A224C191703BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FEB984B03AE182A25501462242A224C191703BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233352e302f32342d3234203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:78:27:29:d0:23:dc:50:c9:44:8b:f9:80:a4:28:fc:1f:b2:
         64:af:d7:26:72:25:48:b9:cd:0b:82:6a:c8:37:5c:bb:98:60:
         e5:59:27:16:5e:b0:c9:ff:a0:5a:2b:e4:8a:1a:e4:79:ad:d1:
         ff:3b:53:f1:ee:27:a1:3a:e5:8b:10:52:7c:0b:04:29:6b:b8:
         2d:03:68:4e:ec:a8:c5:f3:9d:01:57:b4:58:19:8e:51:2b:4b:
         33:64:84:df:83:d5:6c:8a:fb:de:5e:ac:cc:e9:ce:9a:b5:fc:
         3f:51:5b:e1:59:7d:d5:63:27:05:38:fe:a4:85:ac:68:58:24:
         31:2c:ba:3c:f7:e1:04:da:63:12:33:7b:69:1f:54:a9:c6:6c:
         1e:67:64:b2:32:60:29:45:97:09:49:65:68:8b:80:a4:9c:77:
         9b:8b:4a:dd:ef:21:f4:30:3b:6a:10:b6:3f:22:63:ce:0d:a8:
         f2:3f:b4:3f:d1:fb:74:7e:12:ed:82:63:26:56:62:75:4f:38:
         37:f8:22:f3:e9:57:25:e2:b1:9c:27:6f:13:b9:24:52:24:7a:
         a0:79:83:a0:0d:4a:1a:bd:af:75:76:5b:e4:51:3d:c0:74:46:
         3d:b2:fe:98:fd:27:f5:51:0c:89:de:96:3e:fb:81:c8:ba:5e:
         85:27:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 6 11:56:14 2024 by rpki-client on console.sobornost.net