Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e332e302f32342d3234203d3e20323632323936.roa
File:                     3137302e38312e332e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          Pl9S+Ep43HZcObjCOqqqH02f+VA4bvAJj2+tNWO9xX0=
Subject key identifier:   13:99:67:9B:63:0D:29:29:04:40:DF:35:2F:2C:FE:55:3C:B7:93:BA
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       4EC769294C0461E85AF64D6B6A3D694D438D31F0
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e332e302f32342d3234203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:08 +0000
ROA not before:           Thu 10 Oct 2024 19:27:08 +0000
ROA not after:            Thu 09 Oct 2025 19:32:08 +0000
asID:                     262296
IP address blocks:        170.81.3.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c7:69:29:4c:04:61:e8:5a:f6:4d:6b:6a:3d:69:4d:43:8d:31:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:08 2024 GMT
            Not After : Oct  9 19:32:08 2025 GMT
        Subject: CN=1399679B630D29290440DF352F2CFE553CB793BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:58:82:61:6d:9e:43:d1:7f:04:b9:cd:96:
                    5b:02:f1:6d:6b:be:fe:a1:e2:ef:0a:b4:09:92:db:
                    af:f6:9e:4e:4d:40:79:c9:89:b4:53:45:0c:b5:ba:
                    37:85:12:e9:22:7c:e4:8c:21:f6:8b:96:01:9c:52:
                    b0:e7:ea:22:6d:31:ed:cd:6d:67:86:ce:a8:1b:bf:
                    b9:2c:f8:35:fd:ff:92:83:0f:5c:9c:1b:f3:7f:18:
                    dd:36:3d:4a:72:9f:9f:ff:71:97:dc:e5:2a:d3:05:
                    19:2a:e9:bd:3c:7c:6d:9a:0b:4f:4a:5b:b7:90:07:
                    c9:25:cf:a9:f5:9f:cf:3e:1e:f8:3b:b2:9b:8a:56:
                    1f:c1:44:a8:d1:97:ad:73:8d:92:fc:a3:e0:33:99:
                    57:c5:d5:07:1d:bb:a5:65:f7:9d:dc:5f:66:fa:46:
                    40:39:27:3c:f1:5d:58:18:5e:b6:87:55:60:70:e5:
                    75:ed:c6:bc:35:31:40:d0:b1:f4:4c:85:be:da:52:
                    37:4c:81:6d:18:25:7b:97:7a:ad:fb:84:c7:04:b0:
                    58:dc:23:83:e6:d6:d6:01:39:1b:dc:08:e5:d4:b1:
                    7f:6a:f1:6c:71:d5:e0:8e:1c:dd:9b:55:11:18:94:
                    c1:70:4f:6c:ec:f6:e9:28:a6:ff:78:8c:d2:02:d6:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:99:67:9B:63:0D:29:29:04:40:DF:35:2F:2C:FE:55:3C:B7:93:BA
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e332e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:66:9f:39:79:6f:ff:bd:e1:f0:da:f4:b3:9f:9c:2f:d6:50:
         40:8b:9f:a3:43:05:bb:de:42:54:6c:e8:03:24:35:a0:96:ec:
         d1:56:3a:5f:dc:ff:55:82:db:41:35:4c:26:fa:12:16:ff:1f:
         9a:37:8d:a8:11:16:bf:96:9b:5a:c5:38:26:78:5e:6e:21:f1:
         7a:85:ae:cf:17:27:df:a9:2c:87:b3:01:d3:1d:2a:fa:0a:6b:
         7a:39:13:d3:8b:b5:1e:ef:c7:ba:ea:bd:56:55:a7:8f:e5:38:
         32:38:54:3c:7b:98:2f:80:1d:cf:d4:83:0e:ff:f2:fe:eb:ba:
         dc:de:62:34:44:b7:37:c7:c5:3e:c7:3d:22:c4:30:b8:5f:f6:
         9b:df:19:e8:a9:5f:56:f2:dd:ef:64:bd:e7:ef:94:99:62:3a:
         a2:a7:fd:92:f6:27:a1:f6:c4:cd:7c:34:93:51:33:7d:f3:42:
         b1:71:9f:ee:37:65:be:b7:e4:1b:98:a7:f2:10:11:a9:4e:48:
         63:19:40:05:79:f5:16:d3:87:6f:87:90:b7:bb:de:db:b7:2c:
         a3:d7:ba:b6:ae:5b:65:b6:9f:ad:00:8b:49:d6:68:96:23:7a:
         42:22:c1:2b:b0:3f:e6:91:04:a6:ae:3c:83:17:e4:1f:cd:2f:
         be:76:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org