Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa (raw, json)
Hash identifier:          5QnXw14gvS0tanAmVkzX8lej+mGj9QA0YAL2wEVs2dg=
Subject key identifier:   A5:F6:82:13:F9:D5:E8:24:D6:F9:97:F9:E0:16:3E:6F:C2:E7:B2:6E
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       796107BCD79CE916D92A513DF4957D69340A689F
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:23 +0000
ROA not before:           Wed 03 Apr 2024 18:31:23 +0000
ROA not after:            Wed 02 Apr 2025 18:36:23 +0000
asID:                     266353
IP address blocks:        170.239.140.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:61:07:bc:d7:9c:e9:16:d9:2a:51:3d:f4:95:7d:69:34:0a:68:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:23 2024 GMT
            Not After : Apr  2 18:36:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:28:b6:79:3d:a4:9b:5d:3a:60:72:ec:a4:
                    69:49:33:15:9f:c6:a1:d0:93:cf:b3:f6:7a:da:5d:
                    db:48:73:13:f0:29:03:eb:73:15:84:bf:fa:08:d4:
                    30:09:e6:4d:53:b3:31:24:c1:c5:09:8c:c8:2a:5c:
                    ca:2e:a4:13:dc:ef:38:16:bb:47:ec:40:ca:58:2f:
                    c0:0b:3a:87:9f:37:23:fa:b2:39:23:1c:88:60:b7:
                    8f:ff:65:15:1d:54:96:ef:dd:87:ef:e7:49:76:59:
                    4a:d1:02:10:d7:76:ea:90:ba:ec:55:9c:14:7c:89:
                    73:cb:ba:0c:9a:f6:23:a7:e5:49:49:59:12:60:96:
                    41:74:03:0c:28:c2:f3:1a:f2:ed:8d:db:e9:f5:e4:
                    49:cd:dc:cb:09:85:87:8e:9f:1a:fd:37:b7:9a:e5:
                    a0:e8:47:e7:34:1a:f2:e7:e9:71:8d:ca:2f:b1:48:
                    34:6d:65:74:6c:0c:8b:91:d8:10:d1:40:3b:f7:23:
                    af:08:a4:92:58:f1:65:e9:98:10:ee:6e:72:90:13:
                    a4:3a:f5:bc:a6:7f:d5:fe:97:d1:2f:26:c8:cf:34:
                    71:08:4d:86:3c:ad:44:9e:cf:1c:18:aa:b4:f6:2e:
                    01:5d:53:66:bf:c2:1c:5f:7b:ff:3f:48:c4:03:1a:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F6:82:13:F9:D5:E8:24:D6:F9:97:F9:E0:16:3E:6F:C2:E7:B2:6E
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32322d3232203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:3a:62:26:07:5a:e6:c2:00:3e:9c:19:be:c1:b0:34:65:
         af:63:fa:ae:f4:63:75:32:0b:61:05:98:be:0d:fc:67:f1:ea:
         13:85:2b:2c:d4:01:9f:72:28:92:2e:b7:f4:11:ac:f2:72:ad:
         23:fd:6e:cc:39:e1:eb:69:e6:55:be:76:38:de:ea:f0:f0:0c:
         05:20:d7:dc:21:b1:a1:c8:66:b4:d6:29:46:f1:54:1e:97:e6:
         81:71:ad:f1:20:cf:f7:60:fe:3e:c6:cf:e7:2e:f2:6a:80:4d:
         8d:5a:d7:3e:3b:4b:2b:26:47:7f:5b:2b:8c:01:0a:24:b2:ec:
         19:48:cc:4a:08:d8:be:6e:9d:d2:1f:9c:87:13:33:85:a2:f4:
         89:62:c2:68:cc:ed:78:91:f8:2f:cb:db:c5:3e:c0:2d:20:53:
         6d:98:cd:ea:21:1c:44:62:a1:4c:2e:f5:ea:8a:14:48:e0:58:
         8f:2a:55:b6:27:f5:a0:10:39:02:33:a6:51:83:d3:53:75:5e:
         69:07:83:95:4f:1a:7e:0a:bf:e4:70:fc:aa:c7:8c:0e:cf:8e:
         99:dd:30:85:e7:49:78:9b:44:91:23:53:94:47:91:95:8f:68:
         76:ac:1f:20:b3:7d:4d:f4:2b:c0:a0:07:17:fd:6f:ff:3e:17:
         94:1b:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org