Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37382e302f32342d3332203d3e20323636333934.roa
File:                     3137302e38312e37382e302f32342d3332203d3e20323636333934.roa (raw, json)
Hash identifier:          3kO/Eou0Bt31P78p8nmyuV+xjmK9noIBp2zVrpY42wE=
Subject key identifier:   B9:0A:D0:7D:A2:DE:F9:9F:B1:35:65:A3:41:3B:49:C6:2E:C7:8E:5C
Certificate issuer:       /CN=4F987340E53D5A3A07D027B2DACD493A3757DC0F
Certificate serial:       0B47D96BEFBC04B631A49519C9733B6BB29890C6
Authority key identifier: 4F:98:73:40:E5:3D:5A:3A:07:D0:27:B2:DA:CD:49:3A:37:57:DC:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F987340E53D5A3A07D027B2DACD493A3757DC0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37382e302f32342d3332203d3e20323636333934.roa
Signing time:             Tue 30 Jul 2024 17:53:58 +0000
ROA not before:           Tue 30 Jul 2024 17:48:58 +0000
ROA not after:            Tue 29 Jul 2025 17:53:58 +0000
asID:                     266394
IP address blocks:        170.81.78.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:47:d9:6b:ef:bc:04:b6:31:a4:95:19:c9:73:3b:6b:b2:98:90:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F987340E53D5A3A07D027B2DACD493A3757DC0F
        Validity
            Not Before: Jul 30 17:48:58 2024 GMT
            Not After : Jul 29 17:53:58 2025 GMT
        Subject: CN=B90AD07DA2DEF99FB13565A3413B49C62EC78E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:8e:a2:1b:a4:cb:64:9e:34:1f:70:09:c3:
                    61:1e:7d:70:14:0e:18:4c:ba:90:3e:f3:82:1d:7b:
                    ae:34:d2:bc:7c:5a:2c:e9:88:68:88:db:9e:c4:ea:
                    90:69:fc:35:50:58:41:dd:d3:bd:1c:6b:2c:64:bc:
                    88:e8:cd:06:c8:e3:31:ee:f0:d1:93:1c:33:15:c6:
                    2b:84:7a:45:57:85:16:6b:20:81:9e:17:f6:13:07:
                    b3:57:29:45:2e:02:94:aa:6a:94:ac:d5:fc:30:36:
                    6d:6c:01:81:88:3f:30:32:0d:11:70:ee:9d:d6:1e:
                    c0:ca:15:34:d6:c9:fa:f1:df:bb:2b:8b:ed:7c:f8:
                    f9:92:9c:a4:31:cf:42:06:74:ac:bf:b1:3c:3a:5e:
                    1c:79:85:a7:f9:98:6a:dd:47:aa:8b:69:b7:c5:dd:
                    49:ab:5e:f1:5b:71:c7:cd:1d:ac:09:09:19:67:3e:
                    e2:ff:a4:5b:08:61:97:fc:b1:38:91:c2:42:8f:5b:
                    d3:e1:9d:15:51:35:40:d1:2c:8c:41:54:e0:20:78:
                    31:cc:52:cc:38:a5:a2:f2:5d:03:64:9c:88:16:e6:
                    19:d3:06:13:24:c6:62:b0:b7:7d:37:34:5e:f6:f2:
                    7c:09:35:d0:38:fd:50:cc:11:fc:9a:0d:dd:db:4e:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:D0:7D:A2:DE:F9:9F:B1:35:65:A3:41:3B:49:C6:2E:C7:8E:5C
            X509v3 Authority Key Identifier:
                keyid:4F:98:73:40:E5:3D:5A:3A:07:D0:27:B2:DA:CD:49:3A:37:57:DC:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/4F987340E53D5A3A07D027B2DACD493A3757DC0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F987340E53D5A3A07D027B2DACD493A3757DC0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/3137302e38312e37382e302f32342d3332203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:82:56:33:f4:2b:cd:bc:f1:7b:e7:fa:c4:65:a2:68:89:13:
         1f:d8:61:2a:bf:a6:40:cf:85:a9:28:8c:af:e9:1c:cb:f0:16:
         62:5a:e8:3d:d1:95:24:f0:da:0f:d6:2c:74:5e:76:21:f7:39:
         12:39:ce:11:9e:d6:91:7d:30:3e:26:8e:3a:67:19:47:aa:d1:
         24:27:48:43:bf:2d:f8:a0:64:f9:5b:9e:7d:10:ca:9d:c1:0c:
         16:38:cd:6c:50:10:28:9e:ba:c2:9c:b7:60:de:0f:3e:91:fd:
         fc:24:5b:fb:12:0e:71:7b:07:49:62:e8:b2:3a:55:4b:a4:04:
         15:03:96:3c:72:a1:ec:94:f0:df:ef:58:d8:c5:92:16:f0:d0:
         b7:66:36:72:24:9d:6b:aa:ae:e2:af:40:7c:b1:e7:72:26:e3:
         18:d9:62:48:17:db:ae:3c:c6:cb:a6:b0:f1:b5:fc:76:e6:81:
         80:f3:cd:e2:d4:f7:70:86:e5:fa:53:b2:ba:2a:2f:a4:c8:53:
         98:67:30:a2:44:f1:33:e6:84:d1:a2:43:68:6c:fc:73:e8:bc:
         ad:7c:4e:d9:9e:2c:45:86:e8:63:96:c7:1b:95:ba:b4:48:ee:
         0b:42:ee:be:b8:85:15:0d:2f:ce:f7:65:05:6d:fc:51:e9:13:
         4c:3a:d6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 13:33:18 2024 by rpki-client on console-ams.rpki-client.org