Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
File:                     3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (raw, json)
Hash identifier:          wCcXHs5DcT6VSpire+mcKFWdGTdiZ9GHFXQKDRZfs30=
Subject key identifier:   39:A5:3B:32:1F:7F:F4:2D:94:FD:B2:87:A4:EE:5F:C3:81:42:76:D8
Certificate issuer:       /CN=5D18B697A5B088EC543EE5DA1B461A1DD606BE88
Certificate serial:       2D54C95845B1CBFB3721594D469D53985EB93EBC
Authority key identifier: 5D:18:B6:97:A5:B0:88:EC:54:3E:E5:DA:1B:46:1A:1D:D6:06:BE:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa
Signing time:             Thu 04 Apr 2024 17:35:52 +0000
ROA not before:           Thu 04 Apr 2024 17:30:52 +0000
ROA not after:            Thu 03 Apr 2025 17:35:52 +0000
asID:                     266304
IP address blocks:        170.79.200.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:54:c9:58:45:b1:cb:fb:37:21:59:4d:46:9d:53:98:5e:b9:3e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18B697A5B088EC543EE5DA1B461A1DD606BE88
        Validity
            Not Before: Apr  4 17:30:52 2024 GMT
            Not After : Apr  3 17:35:52 2025 GMT
        Subject: CN=39A53B321F7FF42D94FDB287A4EE5FC3814276D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:ef:9f:20:13:0b:f2:eb:69:29:71:ed:dd:
                    fd:35:39:ef:17:6d:a3:5e:75:32:38:8b:44:8c:76:
                    0c:8e:f8:15:73:24:ae:14:0e:06:e4:04:33:80:f8:
                    3f:e5:98:f8:e2:e2:bc:92:9a:a7:ee:7a:40:18:4c:
                    1a:e5:cf:32:ef:e0:21:55:41:0f:8d:9a:01:94:88:
                    cc:f9:94:e7:90:af:cf:4e:6b:f6:a0:1c:5a:1a:74:
                    b9:42:1c:ef:bd:38:fc:5f:96:73:8c:55:08:0a:a0:
                    a8:4d:04:95:4f:aa:e8:8b:56:ad:9c:31:f1:91:a7:
                    b5:d7:45:dc:cf:04:f8:b4:ba:01:a6:f4:94:de:77:
                    0f:ab:43:bb:d3:1a:fc:7b:55:6f:be:15:42:13:fb:
                    7c:32:ea:2f:60:34:c7:b7:bb:d5:7a:e9:cf:22:71:
                    d3:48:3c:d6:ef:6c:74:1a:37:b8:f9:6b:e3:cc:fa:
                    e9:58:4b:67:9c:4a:17:ed:ae:77:59:16:2f:e5:19:
                    d3:04:d8:e5:23:16:57:84:60:33:c3:21:f2:71:31:
                    6f:06:14:48:0f:15:ad:9a:6c:f0:23:cb:62:e2:f5:
                    d3:81:a8:0c:91:23:41:75:f6:ec:6c:e9:0a:0b:a4:
                    d8:18:20:17:04:81:0f:b2:bd:c7:1f:17:4b:1e:fe:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A5:3B:32:1F:7F:F4:2D:94:FD:B2:87:A4:EE:5F:C3:81:42:76:D8
            X509v3 Authority Key Identifier:
                keyid:5D:18:B6:97:A5:B0:88:EC:54:3E:E5:DA:1B:46:1A:1D:D6:06:BE:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D18B697A5B088EC543EE5DA1B461A1DD606BE88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/1/3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:97:9d:3d:a4:1f:55:7e:49:25:be:e8:37:6a:f6:0e:d3:
         41:17:4a:f5:81:a0:a8:cd:31:3f:d0:e0:2a:4c:ca:15:69:46:
         98:34:68:82:32:67:a5:ff:bd:ba:a4:9c:6c:c4:82:5b:ad:ce:
         9c:ba:bc:bc:e3:8a:68:4f:3d:8a:47:06:9d:1a:de:5d:85:62:
         2a:30:fc:7e:2d:10:8c:60:8b:01:80:be:1b:2b:18:46:f4:11:
         ad:8f:76:0b:c2:1f:7a:5e:ad:ea:01:7e:a3:ec:fd:10:e9:82:
         cf:15:6c:f8:0e:96:1a:e3:58:96:2f:6d:3b:d4:8b:86:bb:12:
         f3:87:9d:51:bd:5a:cb:f2:6b:f8:62:bb:25:d8:90:ab:dd:d2:
         8f:13:ce:92:4f:ec:cc:18:78:61:e0:5b:bf:7c:f1:4f:fe:9e:
         06:f1:5d:2e:19:6f:b6:38:0f:3b:e2:f2:ca:fb:eb:d4:2d:ac:
         87:4d:3f:0d:27:5c:e4:b9:7e:33:bd:eb:59:6d:92:16:59:1a:
         ba:1c:89:3c:d4:4c:ee:9e:84:fa:29:18:34:8c:80:6a:06:1c:
         3f:c9:52:2b:70:70:f5:13:4e:33:81:e0:1e:09:95:13:53:bd:
         13:09:45:de:5e:58:08:be:d7:8c:98:45:16:bd:15:ae:ba:7d:
         88:9a:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:10:15 2024 by rpki-client on console-fra.rpki-client.org