Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
File:                     3137372e37302e3136302e302f32302d3234203d3e203533303139.roa (raw, json)
Hash identifier:          cSeBFlpY9CR6jqf0BWxXIOIZPyrckABzpdqb8a94xDQ=
Subject key identifier:   63:7B:4F:25:7C:30:8E:E1:66:23:4B:8B:08:28:0B:1E:1D:89:EB:A3
Certificate issuer:       /CN=313A191B06B02446EDEBC87D42685A96816A487A
Certificate serial:       192C2D95FAE154E57043C802A79974F3FC7E51F1
Authority key identifier: 31:3A:19:1B:06:B0:24:46:ED:EB:C8:7D:42:68:5A:96:81:6A:48:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/313A191B06B02446EDEBC87D42685A96816A487A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa
Signing time:             Thu 04 Apr 2024 02:05:07 +0000
ROA not before:           Thu 04 Apr 2024 02:00:07 +0000
ROA not after:            Thu 03 Apr 2025 02:05:07 +0000
asID:                     53019
IP address blocks:        177.70.160.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2c:2d:95:fa:e1:54:e5:70:43:c8:02:a7:99:74:f3:fc:7e:51:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313A191B06B02446EDEBC87D42685A96816A487A
        Validity
            Not Before: Apr  4 02:00:07 2024 GMT
            Not After : Apr  3 02:05:07 2025 GMT
        Subject: CN=637B4F257C308EE166234B8B08280B1E1D89EBA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:11:05:93:ad:73:1d:42:66:f1:87:85:88:c5:
                    69:b1:04:7e:5b:0c:e5:2c:5b:4e:46:a9:95:da:50:
                    af:a6:90:00:7b:4d:c1:53:4c:12:8e:af:00:3f:0f:
                    dd:0f:20:0a:f6:9b:99:a3:72:9e:71:49:d8:d4:da:
                    3c:b0:c4:af:c4:fb:41:86:03:ce:f1:86:dc:86:30:
                    ca:4f:a9:79:16:64:85:a7:b0:d4:1a:bc:c3:03:5d:
                    e7:8d:4f:6f:22:77:b7:ce:fb:7f:8f:53:31:47:c3:
                    02:78:21:3c:36:38:0b:ce:69:fe:36:eb:b9:86:af:
                    f8:fb:5e:5b:15:de:a8:f4:64:45:b0:aa:f0:f0:18:
                    40:c9:24:cc:47:2f:49:a2:d3:3f:e6:99:c0:f1:da:
                    e1:f4:dd:ff:63:26:93:37:f8:98:2b:0d:50:47:4b:
                    8b:eb:14:90:b7:2b:8e:6c:eb:fd:50:e7:9a:5e:e5:
                    13:e9:b3:00:32:bd:66:82:ad:57:03:10:90:a5:8b:
                    c4:49:b9:cc:a1:3b:56:e5:e7:cc:91:75:89:68:97:
                    a8:94:a5:f7:a6:7b:97:7b:fb:47:e5:12:a7:93:6f:
                    1c:4f:2b:81:73:44:8c:a4:7e:b6:ce:65:ef:0b:68:
                    54:d4:6d:00:43:82:12:58:56:15:cd:c9:ee:d1:62:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:4F:25:7C:30:8E:E1:66:23:4B:8B:08:28:0B:1E:1D:89:EB:A3
            X509v3 Authority Key Identifier:
                keyid:31:3A:19:1B:06:B0:24:46:ED:EB:C8:7D:42:68:5A:96:81:6A:48:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/313A191B06B02446EDEBC87D42685A96816A487A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/313A191B06B02446EDEBC87D42685A96816A487A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/3137372e37302e3136302e302f32302d3234203d3e203533303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:44:c0:c7:e6:91:0f:90:03:8e:80:5e:e1:ef:a4:f1:1c:9d:
         92:a5:3d:be:4e:de:ff:a6:5e:b0:74:4f:bb:de:de:d1:6d:66:
         ae:e9:7a:68:81:0f:ca:64:f8:14:b4:7c:3c:4a:a5:71:c2:85:
         3f:84:9d:ee:a5:3d:a3:68:41:df:ca:3f:05:ba:99:c2:aa:21:
         40:63:90:9f:fe:be:2b:e1:fd:c8:27:77:a1:81:76:6e:a6:1a:
         37:bc:71:29:24:6b:81:52:78:c0:11:ac:c3:49:a8:a8:87:6e:
         7c:5e:99:34:91:44:fd:c5:78:c0:1f:ff:b3:8c:d8:cc:40:d4:
         32:8e:95:65:fe:41:4e:45:73:2c:22:84:5c:72:c1:42:04:c3:
         82:d7:28:3a:e5:d2:e1:21:ef:83:26:8b:51:88:bb:ea:9b:ca:
         8c:4a:78:75:43:6f:8f:bb:12:29:31:aa:cd:dd:49:75:63:e9:
         6a:6f:16:39:71:98:00:ea:6b:52:71:f8:a3:9e:1f:1b:f9:a6:
         d3:1a:6b:5a:4c:5d:fc:9b:4c:9a:9f:83:00:fc:ba:6d:1a:5b:
         d0:36:6f:f4:3e:93:23:0b:43:5f:91:ee:c3:d6:79:74:0a:af:
         49:a3:89:13:c7:ad:79:f9:6d:eb:53:71:c7:f5:a9:e3:02:bc:
         4d:d7:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 13:33:18 2024 by rpki-client on console-ams.rpki-client.org