Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3234203d3e20323634303039.roa
File:                     3134332e302e3134302e302f32322d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          OmRTt+xJZjzMfxpiJOUHBJNGs3HnKDihL/g8eb9vg/Q=
Subject key identifier:   9F:C4:9D:4A:3F:2F:69:32:21:23:F0:62:DE:F1:7F:45:74:41:23:72
Certificate issuer:       /CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
Certificate serial:       095A82F7C2384BFACC71E52C40D73E825E9B6A7D
Authority key identifier: 17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3234203d3e20323634303039.roa
Signing time:             Wed 07 Aug 2024 17:22:47 +0000
ROA not before:           Wed 07 Aug 2024 17:17:47 +0000
ROA not after:            Wed 06 Aug 2025 17:22:47 +0000
asID:                     264009
IP address blocks:        143.0.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5a:82:f7:c2:38:4b:fa:cc:71:e5:2c:40:d7:3e:82:5e:9b:6a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7
        Validity
            Not Before: Aug  7 17:17:47 2024 GMT
            Not After : Aug  6 17:22:47 2025 GMT
        Subject: CN=9FC49D4A3F2F69322123F062DEF17F4574412372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:15:71:75:36:b5:96:85:e0:25:b3:68:16:
                    dd:46:4e:2e:35:a8:21:ba:30:ff:1f:fe:67:8a:8f:
                    60:48:10:b0:3a:f6:cc:85:8a:98:b3:60:46:da:31:
                    7a:a8:bd:52:ad:8d:52:5c:24:23:4f:be:23:36:aa:
                    2a:e3:bc:e8:42:da:2b:bb:f9:76:6b:98:34:e0:07:
                    ef:69:69:46:0f:45:66:d6:78:93:7e:dd:55:eb:62:
                    d1:7b:09:44:20:b8:f2:8f:90:13:9f:53:fa:ce:6c:
                    32:79:13:83:9a:24:4f:79:0f:64:d9:8c:0c:a7:3a:
                    1e:20:aa:1b:45:49:78:e0:ba:a4:b9:27:5b:d0:9f:
                    09:ec:ba:f3:76:37:56:af:00:e9:9d:24:e8:97:bd:
                    98:ae:a6:2a:ec:d3:23:a9:ce:48:df:00:e4:71:cb:
                    5c:dc:0e:9c:44:99:fc:44:fc:ce:b1:7e:e0:e6:b2:
                    f1:bf:63:9e:85:b0:45:ed:27:4f:23:1e:eb:93:55:
                    6c:fc:27:b9:4b:f2:40:2e:6e:76:0f:21:07:d2:1b:
                    74:61:ac:32:06:df:45:eb:8d:98:cf:9b:67:ef:80:
                    43:49:e8:60:91:1f:e0:19:a7:af:72:83:7b:7c:66:
                    fb:6a:2f:5d:07:37:6c:00:95:90:63:7a:4d:8a:5a:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C4:9D:4A:3F:2F:69:32:21:23:F0:62:DE:F1:7F:45:74:41:23:72
            X509v3 Authority Key Identifier:
                keyid:17:39:75:B1:E1:0A:2D:F9:D0:D5:CE:2B:D4:DC:F5:4E:A9:BE:45:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173975B1E10A2DF9D0D5CE2BD4DCF54EA9BE45E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:59:ce:0e:9a:9a:72:21:f9:2b:cd:1a:2e:e6:f6:1c:b2:
         a8:5b:55:8f:f4:56:b3:3f:29:a2:79:84:46:53:53:dc:75:7a:
         75:ac:a8:91:ee:56:ae:af:5c:4a:b3:cd:9b:39:63:f5:8a:12:
         6b:8d:7f:0a:d0:6b:85:c4:16:48:15:1c:39:42:d9:20:ec:d8:
         3a:2f:6d:37:40:6d:da:ec:e5:ca:c2:13:e4:03:9d:c2:1c:17:
         f4:e4:da:ca:b3:45:a1:f5:87:7e:ad:33:09:4b:01:55:18:71:
         5c:3a:b3:f3:db:cc:c0:de:e6:b4:0d:f5:97:29:45:08:47:77:
         4b:82:58:1c:ba:78:19:68:86:fc:07:d5:a8:b8:95:6a:f8:73:
         83:2b:8b:77:a1:5a:48:fa:d6:5b:e1:3c:75:07:31:11:55:94:
         a4:9c:97:cb:95:21:d7:db:23:ce:a2:4d:01:25:2e:80:36:5e:
         7a:99:b7:00:16:2f:a8:f1:08:d8:26:79:e9:45:6d:00:e5:2c:
         19:cb:fb:3d:81:28:56:00:f7:df:76:3c:12:fa:23:e8:52:06:
         3f:cc:de:51:f7:01:93:72:1f:b8:a4:d8:2e:35:4d:6b:cc:f6:
         c5:b2:bc:28:d7:da:c0:cf:cb:da:d7:ef:4b:67:67:e3:6b:a8:
         ef:9e:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 07:50:00 2024 by rpki-client on console-ams.rpki-client.org