Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e302e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          J/aUOS+jeWMpRa2ZpI1OSYP98ICoJar37Ds5r67hv98=
Subject key identifier:   9C:6A:31:CF:14:F4:4C:8C:78:25:2A:B7:34:02:77:37:E7:2B:D0:25
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       2724ECC7D42BFB01B1A789C16663F2D477AD4D9F
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:38 +0000
ROA not before:           Fri 20 Sep 2024 16:22:38 +0000
ROA not after:            Fri 19 Sep 2025 16:27:38 +0000
asID:                     262296
IP address blocks:        170.81.0.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:24:ec:c7:d4:2b:fb:01:b1:a7:89:c1:66:63:f2:d4:77:ad:4d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:38 2024 GMT
            Not After : Sep 19 16:27:38 2025 GMT
        Subject: CN=9C6A31CF14F44C8C78252AB734027737E72BD025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:c0:28:26:e2:c6:10:d5:8c:28:f8:c9:92:
                    31:9a:5e:c7:62:3e:cb:18:57:a8:9e:0e:13:f2:a9:
                    49:a7:e8:8b:c4:e5:f7:db:de:93:77:1f:da:50:7f:
                    23:15:c5:10:af:cd:35:c3:f2:5b:b0:8f:98:86:23:
                    18:29:73:8e:46:64:4a:7f:1d:03:61:76:19:f4:75:
                    5d:63:52:36:7d:54:d3:21:81:0d:68:f8:cd:86:95:
                    f0:f8:37:bc:75:89:04:dd:11:7e:1a:17:2b:c6:7d:
                    a9:57:89:87:e1:08:f4:b7:3f:4c:c5:a1:2d:08:7d:
                    1f:5f:8e:a5:b3:43:6a:ea:72:8b:6b:cd:35:c7:cb:
                    af:9f:de:8f:62:66:be:0e:78:67:85:9a:82:ab:4f:
                    cd:a9:c4:00:dd:c6:0b:89:95:76:7a:ee:09:bf:38:
                    05:20:7b:cf:29:8b:39:4b:3b:60:56:03:25:2d:4c:
                    b4:e4:1a:92:c8:c7:86:7c:84:2d:f9:88:0b:59:16:
                    34:7b:43:a5:69:5c:02:69:b3:5b:a7:1d:00:24:6b:
                    9a:4f:0e:22:46:6c:73:dd:a0:5a:72:2c:4c:46:46:
                    4c:ae:b9:63:b5:70:ea:e1:ba:6e:72:bf:0a:01:c1:
                    de:11:07:d7:e1:dc:6c:60:48:ef:ec:86:6e:c2:c2:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:31:CF:14:F4:4C:8C:78:25:2A:B7:34:02:77:37:E7:2B:D0:25
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:7a:d1:61:db:a2:19:fd:cc:ba:78:e2:47:0b:dc:df:47:
         8f:59:4a:51:64:28:82:3f:5d:bd:da:1e:93:6f:cc:4d:26:e5:
         ae:21:5c:9b:45:e1:6d:ad:ca:34:59:b1:d7:c8:e6:28:c0:c6:
         09:18:f4:06:3f:1d:f0:57:67:04:f5:08:f9:ea:58:0c:42:65:
         f9:96:fa:9a:4f:cf:56:ef:fe:63:a3:3b:4b:6a:91:7d:f7:0e:
         95:aa:a7:f6:69:5c:3e:7d:1d:1b:85:8f:7f:0d:6e:54:b0:87:
         59:19:ea:13:a8:71:fd:36:40:8c:dd:cc:8c:1a:0d:0e:cb:a9:
         d2:9a:f0:77:2b:57:9b:b8:90:a7:75:03:c3:df:59:50:b8:71:
         94:ed:e5:28:5b:e1:18:96:56:91:24:7a:02:5a:65:19:d2:4b:
         26:28:5a:3e:82:0b:94:6b:a0:33:b8:c0:3f:c4:9d:41:8f:81:
         7a:d1:94:44:9b:bf:a0:f2:55:f3:a4:10:fd:2d:23:13:81:46:
         a3:3f:e9:92:5a:a2:54:98:d6:36:9f:d6:48:36:8e:7b:40:93:
         b2:ef:17:d6:8f:a3:81:82:a8:48:af:a5:bd:8d:bc:88:4c:2d:
         7f:7c:68:52:af:de:ff:91:fa:56:67:3b:c4:76:a7:7b:fd:76:
         d0:aa:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org