Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3137302e38312e3132322e302f32332d3234203d3e20323636343036.roa
File:                     3137302e38312e3132322e302f32332d3234203d3e20323636343036.roa (raw, json)
Hash identifier:          /dMwDJn4rixyDnMMkzzP+7q4PSDzl/h4JDpbPDJL3oA=
Subject key identifier:   F9:30:93:2C:21:EF:BE:5A:96:38:F7:44:6B:1A:85:F1:DC:65:1F:BC
Certificate issuer:       /CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
Certificate serial:       1DC7701B881656C75C06652D0B91A105D6C345F0
Authority key identifier: 3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3137302e38312e3132322e302f32332d3234203d3e20323636343036.roa
Signing time:             Mon 07 Oct 2024 17:03:00 +0000
ROA not before:           Mon 07 Oct 2024 16:58:00 +0000
ROA not after:            Mon 06 Oct 2025 17:03:00 +0000
asID:                     266406
IP address blocks:        170.81.122.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c7:70:1b:88:16:56:c7:5c:06:65:2d:0b:91:a1:05:d6:c3:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D
        Validity
            Not Before: Oct  7 16:58:00 2024 GMT
            Not After : Oct  6 17:03:00 2025 GMT
        Subject: CN=F930932C21EFBE5A9638F7446B1A85F1DC651FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8e:57:d0:84:75:70:1c:28:15:29:ea:03:26:
                    53:14:67:b0:e9:a4:94:93:1b:88:08:b5:42:2d:47:
                    7d:2d:cc:c8:b2:ec:46:f5:d5:03:2c:24:26:d3:d4:
                    9c:fc:f9:81:d9:ab:38:4a:48:a8:46:ac:97:38:3f:
                    64:f7:bf:64:e9:c7:73:3f:ac:79:02:10:7c:c7:e2:
                    d7:6a:ed:e2:6e:f9:89:78:06:05:75:e6:69:ec:cd:
                    47:79:d4:d9:6a:c8:8d:59:22:16:50:f2:7d:20:9f:
                    5b:7d:ea:b2:f0:4b:3f:4c:0b:ab:9c:de:f1:21:e0:
                    63:98:4e:78:8f:19:dc:0d:dd:0c:96:0d:4c:d8:53:
                    2a:14:3d:a9:b6:0d:09:28:29:73:3e:ee:5f:bd:35:
                    bc:9b:71:d2:70:ca:af:5b:5c:ab:a1:96:9e:ae:77:
                    be:e0:68:a7:98:08:09:55:b9:45:ff:f6:6e:39:3c:
                    9d:26:8c:fe:4c:36:c6:5d:eb:81:11:9b:ec:8b:ce:
                    a6:05:2a:15:a0:f5:b2:b7:ff:60:3f:5b:58:a7:84:
                    19:8d:81:2c:d5:1a:80:43:6a:01:e1:cd:14:12:1d:
                    c8:3b:10:06:a4:aa:5b:c0:c8:64:4a:31:7d:f6:fd:
                    d2:c0:9a:96:a2:ee:f8:b6:5f:14:ef:12:8c:2c:3b:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:93:2C:21:EF:BE:5A:96:38:F7:44:6B:1A:85:F1:DC:65:1F:BC
            X509v3 Authority Key Identifier:
                keyid:3E:32:FB:0E:A1:4C:66:D3:AE:07:1D:BE:07:6F:53:DC:CF:58:E1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E32FB0EA14C66D3AE071DBE076F53DCCF58E11D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZiQGd6uE3oibpryY54SagnPhgpsWbrHyuXy7vwzyBmr/1/3137302e38312e3132322e302f32332d3234203d3e20323636343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:74:5b:5a:6b:9c:28:5e:83:9f:68:ad:e4:0a:32:f7:69:dc:
         6a:0a:2e:08:14:51:9d:75:58:19:a0:a1:74:3c:80:be:70:90:
         85:f4:b7:4a:d7:bd:66:64:6e:2d:b3:92:5d:2f:f4:76:50:ab:
         6f:ac:2a:1f:2c:04:be:5b:c6:43:9e:0a:ec:24:5d:a8:7a:71:
         2e:88:c3:4f:fe:a3:f9:c5:e3:7d:af:95:91:f0:5d:36:9c:da:
         d5:14:54:27:42:a5:11:a0:f3:b5:56:a4:1d:5a:00:2b:22:b8:
         20:7c:22:a2:95:c0:61:3d:7f:43:c4:93:86:b8:df:b3:46:c9:
         4a:36:6a:16:73:a2:f3:40:db:fd:f8:38:7c:34:c2:4c:ab:f0:
         49:f7:e8:cb:b4:01:ea:f1:ca:9f:37:67:ef:49:a8:7b:6b:03:
         70:3e:28:a7:32:16:90:8b:4b:83:3b:49:57:83:bb:73:73:c3:
         48:88:c0:13:ce:fc:bd:b3:ac:0c:5b:c0:56:9d:a3:df:52:84:
         f9:0f:64:37:f2:bc:44:5b:6e:91:92:5c:c5:f9:5f:6e:cb:09:
         1d:fc:3d:f8:b4:9d:08:13:5b:6e:0a:42:a0:88:5a:5a:19:52:
         72:41:68:d7:35:cb:2e:02:08:0e:d6:76:21:06:f4:ce:14:6c:
         ad:06:ef:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 01:20:27 2024 by rpki-client on console-fra.rpki-client.org