Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32342d3234203d3e203631373332.roa
File:                     3137302e3234372e31362e302f32342d3234203d3e203631373332.roa (raw, json)
Hash identifier:          do2CKUoWCgfc9bh5ED3dzfoeo9pX0ySK9yYLSZ/GwEk=
Subject key identifier:   81:2A:BD:5C:4B:F4:CA:13:9D:7D:B6:37:5A:CB:74:2E:43:75:DB:0B
Certificate issuer:       /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial:       2981CF4DB6210152F159E57A6051AD07B6A9F5F5
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32342d3234203d3e203631373332.roa
Signing time:             Sat 27 May 2023 01:37:55 +0000
ROA not before:           Sat 27 May 2023 01:32:55 +0000
ROA not after:            Sat 25 May 2024 01:37:55 +0000
asID:                     61732
IP address blocks:        170.247.16.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:81:cf:4d:b6:21:01:52:f1:59:e5:7a:60:51:ad:07:b6:a9:f5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8529A7F829766A6E814929022549D58021B37145
        Validity
            Not Before: May 27 01:32:55 2023 GMT
            Not After : May 25 01:37:55 2024 GMT
        Subject: CN=812ABD5C4BF4CA139D7DB6375ACB742E4375DB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:cc:dc:f0:f3:17:d1:c5:42:d9:ac:46:3b:
                    68:9d:fd:3e:0f:2a:d9:a7:1a:4e:27:ce:ed:5a:c1:
                    3f:8c:fb:3f:d1:22:bc:83:9f:03:07:c9:28:f2:50:
                    f9:19:6c:ea:f3:03:6c:d5:94:33:18:ca:09:1f:34:
                    45:9f:b2:61:e1:83:6a:d0:73:4b:63:f2:eb:20:bf:
                    31:d7:88:f1:43:1d:c1:52:7f:dc:35:7b:4a:f0:fd:
                    4f:3e:55:8e:fb:ee:b9:18:d7:76:8c:75:41:d6:af:
                    f1:d5:18:15:b0:99:f2:2a:97:43:0e:7c:27:8c:5e:
                    9b:05:66:f6:97:ae:98:18:ad:4c:1e:47:30:63:00:
                    c7:89:9f:50:d0:48:57:28:4e:91:a6:e8:a2:97:3b:
                    2a:9a:b9:a7:e1:ae:8b:40:89:10:0b:62:c4:c6:6b:
                    1b:2f:4a:84:c8:33:f5:51:b5:15:fa:76:70:a2:eb:
                    85:3f:0b:75:9f:c5:1b:df:b2:83:d4:2c:8d:43:86:
                    ec:f0:95:9b:ed:1a:6f:31:25:66:1b:fa:22:27:aa:
                    92:13:23:e1:85:6e:e9:dd:bf:93:5a:31:7c:4f:e9:
                    d9:eb:98:73:ec:0d:c3:41:af:10:8b:4a:43:34:54:
                    01:d7:72:00:b8:72:bd:99:56:3b:26:d3:a7:b4:5e:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2A:BD:5C:4B:F4:CA:13:9D:7D:B6:37:5A:CB:74:2E:43:75:DB:0B
            X509v3 Authority Key Identifier:
                keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/3137302e3234372e31362e302f32342d3234203d3e203631373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:cc:8c:9a:a0:e9:ca:d0:26:5e:5d:c0:aa:7a:bc:66:78:
         be:a5:4d:3f:11:70:7f:2a:ed:a6:c1:ed:4b:2d:68:4b:3f:70:
         91:b1:4e:d1:04:b0:dc:8b:dd:ae:28:f5:33:f6:7c:1c:07:ac:
         2a:b9:c2:fb:80:84:9e:92:25:9f:ea:46:ec:e2:07:da:0a:c5:
         e8:19:31:2a:5f:2d:c3:8c:60:15:7d:ff:50:61:38:cc:bf:dc:
         ef:64:a0:2e:e5:bb:17:79:43:54:45:11:d3:40:f9:cd:02:a2:
         17:f4:0e:b8:c8:25:60:85:98:10:83:a9:cc:f6:6e:a1:a2:4d:
         33:a5:22:77:fd:db:de:d7:d4:d7:8f:98:b5:f6:83:62:43:d2:
         3f:d9:5f:e9:53:be:b5:a2:e4:29:86:82:3d:d7:f4:00:54:d8:
         28:ac:ca:dc:c7:ac:5a:48:7c:9b:df:1b:08:31:d6:6f:c5:28:
         d2:d6:cf:5c:77:42:6f:16:4f:43:97:06:7d:b6:7a:93:d9:c9:
         0d:b4:cf:55:4f:a6:b6:93:1d:d6:8b:d4:b2:94:9e:7e:de:f1:
         14:3b:81:84:e7:c2:5e:1a:38:82:36:f9:15:23:ac:32:17:85:
         85:80:c8:d2:e5:79:a0:57:ad:cf:aa:08:87:2a:61:cf:9b:f2:
         52:98:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 15:05:12 2023 by rpki-client on console-ams.rpki-client.org