Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/1/3137302e38312e37362e302f32322d3332203d3e20323636333934.roa
File:                     3137302e38312e37362e302f32322d3332203d3e20323636333934.roa (raw, json)
Hash identifier:          FSwmLAgh55lw1PfdamOG5fXJIgeUmKnywkPtehMNXR8=
Subject key identifier:   34:A4:57:16:FB:C4:16:29:F0:E3:E4:93:0B:39:25:18:E1:A1:8B:57
Certificate issuer:       /CN=9E4A32E5331DF001ED002B3B3429B1D83BACC0BE
Certificate serial:       5900DE7673F632DDABCBED6F4BF2947E2CDBD4FC
Authority key identifier: 9E:4A:32:E5:33:1D:F0:01:ED:00:2B:3B:34:29:B1:D8:3B:AC:C0:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4A32E5331DF001ED002B3B3429B1D83BACC0BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/1/3137302e38312e37362e302f32322d3332203d3e20323636333934.roa
Signing time:             Wed 03 Apr 2024 23:41:56 +0000
ROA not before:           Wed 03 Apr 2024 23:36:56 +0000
ROA not after:            Wed 02 Apr 2025 23:41:56 +0000
asID:                     266394
IP address blocks:        170.81.76.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:00:de:76:73:f6:32:dd:ab:cb:ed:6f:4b:f2:94:7e:2c:db:d4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E4A32E5331DF001ED002B3B3429B1D83BACC0BE
        Validity
            Not Before: Apr  3 23:36:56 2024 GMT
            Not After : Apr  2 23:41:56 2025 GMT
        Subject: CN=34A45716FBC41629F0E3E4930B392518E1A18B57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:05:33:95:8f:da:61:7c:54:1c:db:aa:04:
                    47:ca:35:ab:53:5a:95:16:66:57:db:95:3e:60:bd:
                    d6:72:86:3f:18:1a:5c:a7:6d:d5:89:71:14:d7:0f:
                    7f:18:92:98:e1:7b:8b:4b:c2:16:00:d9:f5:92:d9:
                    21:aa:f0:53:44:de:c2:db:73:b3:9a:91:34:9e:89:
                    52:39:9a:1c:7e:20:70:0b:61:51:2a:11:24:8a:23:
                    47:6b:9f:e2:2f:81:5e:6e:98:0f:14:de:87:e1:c6:
                    2c:1c:0d:61:f1:af:12:a0:61:c0:04:d3:c6:08:46:
                    c6:90:14:c9:bf:91:8b:28:29:83:e5:e0:79:6c:ed:
                    c3:d6:25:18:e2:0c:97:46:d9:e6:62:9d:9d:5b:8a:
                    e3:cd:c3:2f:76:b6:aa:0c:ef:48:30:f2:97:05:fe:
                    f4:00:a7:e9:b2:9d:d0:1d:52:60:4b:0b:35:05:77:
                    55:b5:0d:3d:c1:0c:35:66:4b:ca:d0:32:8c:f5:8c:
                    33:19:03:65:ef:a7:0f:db:8e:57:25:0f:dd:11:59:
                    11:cf:e9:ad:5b:7c:14:cf:fb:a4:cb:8e:32:e9:b8:
                    d5:ef:22:63:1d:db:15:25:28:4f:1f:db:a7:ab:c7:
                    26:0a:da:b6:63:db:9f:ae:6f:23:ce:dd:e8:15:bf:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:57:16:FB:C4:16:29:F0:E3:E4:93:0B:39:25:18:E1:A1:8B:57
            X509v3 Authority Key Identifier:
                keyid:9E:4A:32:E5:33:1D:F0:01:ED:00:2B:3B:34:29:B1:D8:3B:AC:C0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/1/9E4A32E5331DF001ED002B3B3429B1D83BACC0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E4A32E5331DF001ED002B3B3429B1D83BACC0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/1/3137302e38312e37362e302f32322d3332203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:4c:9a:b7:45:63:25:85:fd:33:b9:d5:98:56:7e:92:f3:
         e0:c7:4c:45:18:b6:63:62:95:0b:fa:fb:31:46:82:75:20:7b:
         8f:62:d3:35:bf:4d:af:e4:50:8d:39:34:73:df:8f:be:9f:eb:
         d2:6b:28:e0:a9:49:5f:3f:8e:07:c9:4b:e7:52:ba:de:3f:fc:
         bf:a4:99:b1:36:7b:62:68:a3:9a:39:2d:0c:77:7c:0d:a1:f5:
         e8:9e:40:c3:e3:f4:f9:63:d6:8e:7c:20:a0:fa:65:60:19:3f:
         39:0e:b4:9f:07:0e:41:44:46:77:c4:a0:3c:81:1f:fe:12:f5:
         ce:e8:ee:a3:6b:27:0d:80:bb:83:ef:f8:bc:8c:8b:9c:5e:1a:
         b8:f6:27:6e:e3:6c:67:d8:ec:f1:d6:e8:5c:58:59:a7:50:b0:
         84:10:f4:ea:97:91:03:76:aa:7e:70:72:58:21:2d:21:6e:c5:
         7c:8e:0f:7c:74:f9:14:44:22:c4:31:e7:d1:aa:8a:c0:3b:d4:
         5b:1d:f2:d1:e1:8f:fe:0d:4c:e7:57:48:2f:d9:22:7c:98:39:
         03:e3:27:20:61:88:59:55:7a:f9:f1:fe:6f:77:4c:6f:78:39:
         32:e2:f9:c0:aa:1a:fd:e7:fb:b1:0f:db:32:39:82:01:35:06:
         d4:1a:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 01:55:42 2024 by rpki-client on console-fra.rpki-client.org