Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3137302e38312e3132302e302f32332d3234203d3e20323636343036.roa
File:                     3137302e38312e3132302e302f32332d3234203d3e20323636343036.roa (raw, json)
Hash identifier:          nG6OJRoSLms7zw+C/sE1zu90KRLuqRoyaYxygeZnHRQ=
Subject key identifier:   EA:C6:C3:78:9E:05:ED:5C:2C:2D:DE:45:8C:F5:2A:69:7F:D8:0B:D1
Certificate issuer:       /CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
Certificate serial:       15B2B45DE03BBFD84F37AED35E373EFFFDDD2EFA
Authority key identifier: 3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3137302e38312e3132302e302f32332d3234203d3e20323636343036.roa
Signing time:             Mon 07 Oct 2024 17:03:00 +0000
ROA not before:           Mon 07 Oct 2024 16:58:00 +0000
ROA not after:            Mon 06 Oct 2025 17:03:00 +0000
asID:                     266406
IP address blocks:        170.81.120.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b2:b4:5d:e0:3b:bf:d8:4f:37:ae:d3:5e:37:3e:ff:fd:dd:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
        Validity
            Not Before: Oct  7 16:58:00 2024 GMT
            Not After : Oct  6 17:03:00 2025 GMT
        Subject: CN=EAC6C3789E05ED5C2C2DDE458CF52A697FD80BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:87:10:70:0b:51:01:8c:dd:96:58:7e:be:
                    32:29:9c:82:88:e5:38:6c:32:44:c7:2b:36:f9:66:
                    e1:f1:6e:25:25:bb:12:32:35:3e:12:9b:f8:ad:c9:
                    7c:66:d7:8e:8d:f5:c1:a9:f9:25:73:43:55:31:59:
                    80:e5:dd:6f:b8:64:95:9b:81:04:cb:d9:ed:a0:34:
                    07:b5:d4:04:11:aa:fc:29:36:b5:43:c1:85:0e:f8:
                    c8:a8:40:6b:69:06:75:37:91:fd:48:ba:0c:ce:b9:
                    7d:6d:55:fa:65:65:ec:64:a0:40:50:15:9e:22:39:
                    ce:83:82:2d:4e:87:e7:05:6c:43:be:93:74:c2:3d:
                    d8:b7:12:ab:10:a4:75:a7:c4:71:f3:3a:32:ec:d8:
                    31:84:fe:72:76:1a:cb:53:5c:fe:96:f9:d1:5c:44:
                    91:5d:1d:ba:61:b8:97:3b:ca:66:0f:cf:25:6e:d8:
                    dc:7e:c5:92:a0:74:b7:13:ee:a9:9d:06:31:1d:ea:
                    09:d8:50:d1:b8:1c:5a:84:49:3d:99:57:60:be:82:
                    3d:7b:d4:71:97:60:cd:fb:52:82:4e:12:72:64:7a:
                    b1:2a:72:40:b7:0b:f2:82:45:cf:07:26:a7:db:06:
                    6d:e2:d6:96:4c:ee:a1:f1:11:be:83:14:6f:01:5f:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C6:C3:78:9E:05:ED:5C:2C:2D:DE:45:8C:F5:2A:69:7F:D8:0B:D1
            X509v3 Authority Key Identifier:
                keyid:3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3137302e38312e3132302e302f32332d3234203d3e20323636343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:85:b4:60:df:2e:00:4f:5b:75:31:8e:3d:63:e2:4f:3f:8d:
         f0:a2:85:34:a3:a8:a9:43:24:3e:c9:94:86:ec:d5:e6:e1:77:
         16:03:e4:15:8b:1a:39:83:aa:a8:b4:8f:15:17:7c:04:92:34:
         e7:cc:1b:85:31:ab:cb:8c:5b:6a:d2:b4:cb:5e:5a:7f:47:9d:
         ef:28:f1:6c:6f:63:7c:48:8f:e1:29:db:67:2f:fc:b1:3f:2d:
         4d:bc:a1:a4:0a:01:c4:98:35:76:2a:cc:c6:65:f2:b8:d0:e6:
         ec:39:34:d9:ea:5d:73:5e:cf:90:1f:5d:5a:a4:07:7d:7b:56:
         e5:c8:ee:ef:c2:cf:fe:37:89:46:3a:1b:97:9c:93:92:5d:18:
         97:4b:c3:a3:ae:ad:60:df:ab:0d:f3:b3:85:96:5e:a3:65:3f:
         b0:87:91:64:e5:94:89:5d:28:48:ea:1a:d6:b8:72:b6:9a:c4:
         8c:15:75:e5:14:be:d6:e1:94:b2:54:1b:0f:45:13:a5:b3:e0:
         11:ea:60:08:59:e7:6c:71:34:c7:5f:57:6d:08:99:d0:1e:b7:
         57:e5:67:25:b4:c5:8e:2d:8c:f7:bd:a7:d0:3e:04:79:c5:1a:
         fa:4b:5e:f1:7e:29:49:a8:9d:2d:df:b5:2a:48:ef:44:fb:fd:
         5f:70:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 01:20:27 2024 by rpki-client on console-fra.rpki-client.org