Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa
File:                     3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa (raw, json)
Hash identifier:          h+5JY00cJjxuTLI05wYbl0awTZjdgRSw2hZlApgLV4I=
Subject key identifier:   E7:35:9D:DF:D3:2C:70:72:67:B4:A3:41:BB:46:3D:97:A5:2B:D0:5D
Certificate issuer:       /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial:       6E3DB21ED0473D592E9641E19A58DC50544CD8DB
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa
Signing time:             Fri 05 Apr 2024 00:27:25 +0000
ROA not before:           Fri 05 Apr 2024 00:22:25 +0000
ROA not after:            Fri 04 Apr 2025 00:27:25 +0000
asID:                     265085
IP address blocks:        170.233.25.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3d:b2:1e:d0:47:3d:59:2e:96:41:e1:9a:58:dc:50:54:4c:d8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
        Validity
            Not Before: Apr  5 00:22:25 2024 GMT
            Not After : Apr  4 00:27:25 2025 GMT
        Subject: CN=E7359DDFD32C707267B4A341BB463D97A52BD05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:fe:8d:93:27:d8:9a:1b:9a:a6:e5:e7:60:
                    9d:06:2d:2d:27:28:78:9f:00:49:01:63:88:c0:c5:
                    3a:8c:29:5a:c5:a7:08:10:c3:28:35:fa:4f:3a:08:
                    3a:2c:95:c4:62:ac:22:3b:bb:7d:4a:4e:24:7c:e5:
                    f3:54:22:ea:a6:93:bb:b3:d3:7e:d2:33:ce:58:d3:
                    da:c9:86:33:b8:bf:f1:f5:03:cc:8f:72:a8:59:53:
                    f4:dc:ff:51:3f:e3:82:32:7a:d5:b3:3c:32:a6:f4:
                    61:ca:a1:85:81:b8:34:71:f5:97:d4:9a:60:35:18:
                    3a:b4:da:f9:34:9a:73:dd:27:13:a3:aa:63:b9:40:
                    61:dd:66:e0:e6:c2:a2:a4:8f:de:75:88:a8:85:c3:
                    12:0c:cc:01:25:30:a3:ce:82:b1:9b:a0:f7:fd:3c:
                    4e:c8:f6:d8:1c:05:a6:06:3e:5e:7f:c0:3a:21:40:
                    8a:71:f6:84:02:a5:7e:52:bc:a1:fd:80:6f:58:7c:
                    02:bc:d9:26:9d:37:90:e7:6f:bc:01:1d:42:06:89:
                    04:69:84:77:e7:61:e6:60:20:d4:88:21:3a:98:9b:
                    00:cc:48:f3:6f:b2:92:23:00:7f:78:9f:d2:04:85:
                    b8:dc:3b:c1:9b:e0:2c:9a:d6:22:fd:20:5e:be:8c:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:35:9D:DF:D3:2C:70:72:67:B4:A3:41:BB:46:3D:97:A5:2B:D0:5D
            X509v3 Authority Key Identifier:
                keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32352e302f32342d3234203d3e20323635303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:4a:a2:c2:55:74:0d:a1:7c:ba:bf:41:9f:9f:40:8e:4c:e8:
         1e:42:fd:7a:55:b0:fb:3e:7a:53:6a:b4:43:d4:7b:38:88:c8:
         59:d3:dc:c9:c9:c5:95:56:c9:53:ad:95:8e:ac:c3:43:ec:e3:
         a0:5d:2d:85:b9:e0:ca:7a:43:5a:e9:89:d5:f0:f2:de:cd:5b:
         da:cb:03:7e:7c:a7:e5:83:39:ba:e2:fa:31:66:04:90:e5:e2:
         ed:d2:42:39:65:f2:c8:ad:12:a5:62:dd:e1:a5:eb:01:02:29:
         22:89:ff:fd:36:dc:fb:ea:f3:ed:48:35:a5:71:b0:01:97:9d:
         32:3c:86:80:ab:06:30:39:7a:d0:d6:08:0f:b1:e5:03:8e:73:
         12:58:50:82:c1:64:e3:91:55:1d:6f:2e:a1:e3:72:1f:0d:b7:
         cc:cb:ad:24:fe:d5:f6:24:3f:1e:8c:7d:64:d4:55:02:d8:12:
         1d:2b:f0:ab:0e:dc:d1:37:1a:9f:1b:8a:90:64:44:52:41:28:
         7f:75:10:8a:fe:06:6a:e2:7c:f1:93:da:4a:eb:8e:aa:e1:6b:
         f4:75:53:ad:40:3c:20:91:9e:7b:4c:03:8e:bc:af:8a:da:76:
         cd:04:7e:cf:ed:c4:e1:00:d7:f2:72:d2:a4:ef:0f:9c:70:b1:
         1d:48:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 06:47:04 2024 by rpki-client on console-fra.rpki-client.org