Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          EF3Vk0tLJRmFs/GU258yvgLYulNAU9dC3Q7EkGDuwvY=
Subject key identifier:   E0:2F:36:48:F0:94:42:E9:91:F5:B7:B9:9A:BC:D7:D1:A3:4A:F6:72
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       1C07562786689D0E0DF95B3256764DB364937E34
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:24 +0000
ROA not before:           Wed 03 Apr 2024 18:31:24 +0000
ROA not after:            Wed 02 Apr 2025 18:36:24 +0000
asID:                     266353
IP address blocks:        170.239.141.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:07:56:27:86:68:9d:0e:0d:f9:5b:32:56:76:4d:b3:64:93:7e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:24 2024 GMT
            Not After : Apr  2 18:36:24 2025 GMT
        Subject: CN=3082010A0282010100A918D4B8A197652F240BC8C6D3B95334F09DC4523C542308F1E17C46DD19B4C8F087996160C609610D6E7A361963CC380AC2E9BEA3CE3E3169FD8BFC2AC724D370B41E27E4C6A8BEA5EB5836F099F745CE7EC64C514A7EAAC877A9E75B3EAA7724CBA9E5001BE5C5F9D4D6B2442174E3EAC018A8EAD23B74DD788849749B4AB03BC3FB11EB72500783D7FE1C7D543F75527D794FB18C11F1A4DC78A50B7D3357DB84B407B1AC58DBF94C1213C377556A0BB5A9CD74C5EE6B303D712A03713E101AFDBE105E787F4C4F1BD62F2581F17C61E19D1FAA46BB11CCCBB181410E7EAEB1CDE6F16F6B24B90B1709233ADF08B341AE36670EE2EB2AB1B253B580F90F930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:d4:b8:a1:97:65:2f:24:0b:c8:c6:d3:b9:
                    53:34:f0:9d:c4:52:3c:54:23:08:f1:e1:7c:46:dd:
                    19:b4:c8:f0:87:99:61:60:c6:09:61:0d:6e:7a:36:
                    19:63:cc:38:0a:c2:e9:be:a3:ce:3e:31:69:fd:8b:
                    fc:2a:c7:24:d3:70:b4:1e:27:e4:c6:a8:be:a5:eb:
                    58:36:f0:99:f7:45:ce:7e:c6:4c:51:4a:7e:aa:c8:
                    77:a9:e7:5b:3e:aa:77:24:cb:a9:e5:00:1b:e5:c5:
                    f9:d4:d6:b2:44:21:74:e3:ea:c0:18:a8:ea:d2:3b:
                    74:dd:78:88:49:74:9b:4a:b0:3b:c3:fb:11:eb:72:
                    50:07:83:d7:fe:1c:7d:54:3f:75:52:7d:79:4f:b1:
                    8c:11:f1:a4:dc:78:a5:0b:7d:33:57:db:84:b4:07:
                    b1:ac:58:db:f9:4c:12:13:c3:77:55:6a:0b:b5:a9:
                    cd:74:c5:ee:6b:30:3d:71:2a:03:71:3e:10:1a:fd:
                    be:10:5e:78:7f:4c:4f:1b:d6:2f:25:81:f1:7c:61:
                    e1:9d:1f:aa:46:bb:11:cc:cb:b1:81:41:0e:7e:ae:
                    b1:cd:e6:f1:6f:6b:24:b9:0b:17:09:23:3a:df:08:
                    b3:41:ae:36:67:0e:e2:eb:2a:b1:b2:53:b5:80:f9:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:36:48:F0:94:42:E9:91:F5:B7:B9:9A:BC:D7:D1:A3:4A:F6:72
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134312e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:63:95:5b:36:b7:f9:06:ef:00:3f:a4:c6:a7:0c:3f:06:32:
         6e:e7:2d:6f:04:03:fa:3a:65:75:c2:10:e5:8c:c0:63:6b:55:
         0d:7e:86:d7:0a:17:03:2f:9a:ce:dd:d6:c2:86:a4:02:7a:4e:
         78:da:b6:2a:74:e3:b4:13:df:ba:5d:0b:6f:34:ca:2d:2d:3a:
         33:71:cc:bb:7d:7d:a1:91:9c:c0:70:2c:96:4a:df:03:cf:f2:
         08:0d:4e:d1:8d:45:26:e1:e3:1e:87:9b:14:4c:20:ec:3b:bf:
         f1:f6:a1:c3:5b:52:1f:b5:0e:27:2a:9a:65:f4:54:48:d3:1c:
         83:48:16:de:31:47:b2:f5:37:0e:b8:83:15:45:a6:57:4e:f2:
         d7:48:a0:53:2d:df:b7:4c:a8:02:64:5e:55:d6:18:8f:61:9f:
         7e:a7:d8:55:d6:ee:f3:44:0f:75:d2:91:ff:2a:f8:83:b2:20:
         bf:e5:5e:6a:0c:fe:42:7a:e5:04:53:bb:d2:40:e2:23:62:43:
         24:32:18:ad:67:65:ed:c1:6a:45:64:9f:a9:75:04:d9:f6:9f:
         cd:2a:3b:89:79:d5:2b:d1:3a:45:e5:1e:3b:f8:be:24:82:cf:
         16:dc:d4:d3:17:ca:98:79:bc:27:44:b2:70:84:98:f4:ab:0b:
         cd:a9:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org