Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa (raw, json)
Hash identifier:          L7UDSsamfjUXbKKUzhKItE5bvqtnve4WhKJ05HdaQ8A=
Subject key identifier:   E6:46:15:95:09:78:1D:15:C2:C1:C9:59:B2:34:85:F2:78:9E:6D:B9
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       1E645C02FE6A980984238E3F170DBD011082303D
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:24 +0000
ROA not before:           Wed 03 Apr 2024 18:31:24 +0000
ROA not after:            Wed 02 Apr 2025 18:36:24 +0000
asID:                     266353
IP address blocks:        170.239.140.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:64:5c:02:fe:6a:98:09:84:23:8e:3f:17:0d:bd:01:10:82:30:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:24 2024 GMT
            Not After : Apr  2 18:36:24 2025 GMT
        Subject: CN=3082010A0282010100CBFDB475515C09A3132B28C103BB6FEA703509E3D41F7133C73C9A62385F452AD6A2FA4D4F5C59EB47E01BD41A9EB1F1EE3F2D4CA75194196276E75CD7AFC84D8EA36391F3F3D39F6E6C4C04CD85CC233074088DC562C606AEA6FD2683B4C010810106665B1187C72EA9223B56B2FD2064D291CB13F86096C374B54639A38D9323C10BC946C973F579A26FEF44AEDCF69764180AD66FC40C8A6906AB8BFE8CBF62589137D8C6A8492A18850DE81DF6DB59392A87F87287222ABE2C4665B309A96E1D6C67808B8DBB9E465F6949EA3A5EB3FBB3AD6106148EA109A98887C1DBCE59B9ECEBD8E89E5C6C81C73FB46EA183332BB9C64D9CB50D4471D0B05727CDCB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:b4:75:51:5c:09:a3:13:2b:28:c1:03:bb:
                    6f:ea:70:35:09:e3:d4:1f:71:33:c7:3c:9a:62:38:
                    5f:45:2a:d6:a2:fa:4d:4f:5c:59:eb:47:e0:1b:d4:
                    1a:9e:b1:f1:ee:3f:2d:4c:a7:51:94:19:62:76:e7:
                    5c:d7:af:c8:4d:8e:a3:63:91:f3:f3:d3:9f:6e:6c:
                    4c:04:cd:85:cc:23:30:74:08:8d:c5:62:c6:06:ae:
                    a6:fd:26:83:b4:c0:10:81:01:06:66:5b:11:87:c7:
                    2e:a9:22:3b:56:b2:fd:20:64:d2:91:cb:13:f8:60:
                    96:c3:74:b5:46:39:a3:8d:93:23:c1:0b:c9:46:c9:
                    73:f5:79:a2:6f:ef:44:ae:dc:f6:97:64:18:0a:d6:
                    6f:c4:0c:8a:69:06:ab:8b:fe:8c:bf:62:58:91:37:
                    d8:c6:a8:49:2a:18:85:0d:e8:1d:f6:db:59:39:2a:
                    87:f8:72:87:22:2a:be:2c:46:65:b3:09:a9:6e:1d:
                    6c:67:80:8b:8d:bb:9e:46:5f:69:49:ea:3a:5e:b3:
                    fb:b3:ad:61:06:14:8e:a1:09:a9:88:87:c1:db:ce:
                    59:b9:ec:eb:d8:e8:9e:5c:6c:81:c7:3f:b4:6e:a1:
                    83:33:2b:b9:c6:4d:9c:b5:0d:44:71:d0:b0:57:27:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:15:95:09:78:1D:15:C2:C1:C9:59:B2:34:85:F2:78:9E:6D:B9
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32332d3233203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:7a:d5:27:45:56:43:f7:0f:96:c8:02:39:29:63:4b:53:
         81:9f:61:5e:42:f2:b1:ba:4d:54:91:ae:df:08:db:df:10:fc:
         d4:fa:69:8d:42:73:7a:30:36:42:63:d8:9b:5b:f4:d5:09:24:
         63:77:e0:c4:7d:ea:14:bd:82:72:f8:c1:25:bb:c6:b3:8e:4e:
         67:7e:7e:da:0e:8e:63:30:ec:8b:0d:9a:c3:8c:54:ac:83:d4:
         8c:85:e1:6a:f4:b0:0c:ab:c7:e2:fc:c8:c1:d7:5e:9a:27:da:
         49:47:6b:69:4a:a2:d7:bc:49:c7:81:a2:52:07:95:6b:8a:eb:
         d5:8b:e1:fe:1a:d4:64:33:1f:5d:24:ca:36:3a:4d:71:f9:1a:
         3d:ae:38:3d:8d:db:4a:72:91:23:9a:70:3a:16:5d:65:71:e0:
         81:1b:81:4f:61:a0:19:8e:5f:61:8a:6b:86:43:9b:ba:b0:e0:
         14:90:14:c0:43:16:d4:39:f5:81:e7:dc:7d:61:e4:28:d6:0e:
         ad:20:ef:42:24:56:a0:cd:e8:e2:c8:f0:50:53:7d:6c:08:bd:
         be:1f:5b:5d:71:83:93:5d:e7:5d:6f:f8:3f:d5:07:f6:82:f9:
         02:7d:b8:7a:a5:a0:61:4e:6c:06:96:c1:79:46:2e:2d:e9:e3:
         8a:69:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org