Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          1of8DeinXc5+EbEuNxwjhEJdgmshZGx++RVsVYYNn7g=
Subject key identifier:   32:14:AB:E2:09:2F:A3:9B:03:F3:46:DA:86:B5:24:7D:CB:87:12:9C
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       5CCBC01E76A124C46EDEE4061F048474D83BCBB1
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:24 +0000
ROA not before:           Wed 03 Apr 2024 18:31:24 +0000
ROA not after:            Wed 02 Apr 2025 18:36:24 +0000
asID:                     266353
IP address blocks:        170.239.140.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:cb:c0:1e:76:a1:24:c4:6e:de:e4:06:1f:04:84:74:d8:3b:cb:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:24 2024 GMT
            Not After : Apr  2 18:36:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:42:aa:7a:cd:06:5f:f2:cd:10:49:4f:d6:39:
                    08:d6:87:d5:ef:ca:80:f8:84:74:59:47:db:19:b8:
                    44:b7:79:9c:03:59:bd:50:6b:73:73:55:74:7f:f0:
                    02:4b:22:b1:3b:10:12:f4:de:56:cc:75:6c:00:13:
                    71:b5:67:5f:68:e6:83:cf:90:50:af:bc:c7:39:90:
                    bc:17:3b:7d:3e:e2:8b:95:93:d9:cb:13:f8:06:4a:
                    57:94:14:a2:29:f3:13:64:e2:21:9b:bc:24:4b:75:
                    c9:46:e1:0f:b9:59:0b:31:74:ca:48:8d:ac:55:31:
                    e9:af:a8:d3:04:59:57:9b:3b:c2:e4:2d:6a:8a:6e:
                    2b:72:23:1b:cb:4f:25:0d:bb:02:ba:cc:4c:84:23:
                    43:9c:30:ba:18:b4:07:84:3e:2a:10:ff:98:75:97:
                    95:8e:13:df:51:c9:0b:c1:6b:e9:50:b4:ed:a2:7c:
                    1f:14:d9:04:16:19:71:2c:53:01:65:f8:b5:c0:97:
                    b4:2d:04:c0:af:40:1d:df:8a:41:c6:c6:56:db:a8:
                    3e:33:d1:12:bb:03:2c:bc:10:7d:ab:ab:59:9a:a4:
                    07:3d:17:13:4d:98:7c:ca:51:4a:c6:a8:12:cc:25:
                    76:c6:a3:5a:97:48:11:89:03:7b:24:ae:33:aa:f5:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:14:AB:E2:09:2F:A3:9B:03:F3:46:DA:86:B5:24:7D:CB:87:12:9C
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134302e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:92:e4:77:87:48:20:bf:32:3a:73:06:d2:ee:35:35:24:e2:
         15:8f:e8:79:63:fb:b0:49:e2:99:64:ae:ab:8c:3e:72:cd:3d:
         27:6c:d5:b0:80:99:37:d4:27:98:39:60:85:db:38:e2:78:a8:
         20:43:63:f9:ed:8d:6b:67:07:ad:0c:43:74:56:9c:d8:df:92:
         24:36:4a:43:2d:5f:4a:1a:ae:5f:41:2c:31:22:71:b4:01:b0:
         7f:e0:62:3a:46:af:84:68:99:70:ab:da:34:4f:f2:83:cc:86:
         27:32:b5:b1:ba:64:df:ff:c1:de:97:61:ee:7b:0f:5f:46:e2:
         87:f9:68:03:db:97:b3:bf:ca:ab:34:02:ca:40:b6:61:e5:73:
         7a:5a:11:1a:85:45:43:6c:af:81:4a:c9:9a:f9:08:ad:b8:b3:
         54:78:58:1d:c1:1c:cc:0e:62:f3:94:78:b2:42:ef:12:0f:53:
         3b:6b:b0:7b:fb:49:8a:da:3a:f3:33:f6:7a:54:58:18:58:f3:
         e9:41:dc:88:3e:8d:48:00:d4:87:db:b7:41:19:3a:8b:5e:5d:
         be:3b:d8:35:96:61:db:c4:68:8d:7c:0f:fd:e4:90:c8:b9:61:
         f5:ce:cd:ed:57:17:96:fa:d3:ea:77:de:47:fa:c1:8c:4a:b6:
         9f:2f:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 14:17:13 2024 by rpki-client on console-ams.rpki-client.org