Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          94IzcJ8entnDyXZz9MEcYYeWxfFifrQQawW74doJyiY=
Subject key identifier:   62:B8:1E:F0:A9:A2:2A:55:78:5D:68:76:0E:58:69:B1:0A:4D:C1:FC
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       457227704E9BDB09A2B6C8F29090F8623ED8341C
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:24 +0000
ROA not before:           Wed 03 Apr 2024 18:31:24 +0000
ROA not after:            Wed 02 Apr 2025 18:36:24 +0000
asID:                     266353
IP address blocks:        170.239.142.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:27:70:4e:9b:db:09:a2:b6:c8:f2:90:90:f8:62:3e:d8:34:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:24 2024 GMT
            Not After : Apr  2 18:36:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:85:50:b4:13:75:6e:c1:4c:90:b5:11:d6:
                    fc:51:b1:ac:30:10:fe:b9:aa:26:0d:b4:99:a1:d7:
                    59:d5:8c:f1:73:51:ec:dc:e7:10:dc:c5:a2:59:c9:
                    e2:72:f9:b0:af:6d:25:ba:dd:20:f3:74:be:de:e3:
                    bd:65:e5:ec:c1:cd:96:06:af:0e:3b:49:77:26:17:
                    1f:ab:53:f4:af:55:80:69:10:8b:ee:6f:2d:ba:9a:
                    ac:4b:6b:27:95:c9:ff:c0:15:8f:bd:a8:c7:01:1e:
                    14:92:83:4a:57:ad:fe:5c:5d:cf:08:21:ed:4e:79:
                    7b:ea:c8:d3:51:9b:33:b4:e9:af:21:d6:0d:7f:72:
                    75:fd:33:9e:ed:7a:7a:3b:8c:f4:7c:06:5b:58:d5:
                    99:06:68:94:f1:a7:4d:3e:c2:55:fe:2d:aa:4e:f2:
                    b1:04:1c:6b:49:17:fb:79:2c:15:8d:46:7b:d7:90:
                    4e:91:10:b8:f3:4b:9c:6c:1c:8b:fa:c6:04:de:f6:
                    cf:71:59:38:e4:95:d1:7f:ec:12:a2:e6:af:06:f8:
                    f3:56:5e:e9:02:24:5d:3c:89:fc:2f:f7:de:36:00:
                    b4:ea:31:7a:43:20:7a:00:3a:59:55:fb:c3:d9:b1:
                    4a:db:82:d9:aa:7f:45:78:48:be:1a:ff:78:c1:88:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:1E:F0:A9:A2:2A:55:78:5D:68:76:0E:58:69:B1:0A:4D:C1:FC
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134322e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:a7:15:ad:ac:1f:78:4c:e2:ce:53:87:6e:75:19:77:0b:fd:
         ca:54:c6:9d:45:35:a7:16:88:25:0c:51:fa:7f:e9:e3:e6:6b:
         a2:d5:f0:89:74:ec:cc:aa:2d:a4:47:15:a8:14:79:55:a9:58:
         f3:e4:eb:1a:51:b5:4d:44:65:fc:d7:85:70:5c:49:86:7d:90:
         a3:76:02:f8:5d:bb:43:01:f1:4c:fa:cf:c9:03:e2:b5:40:01:
         bf:7e:3b:85:61:55:d0:fe:08:08:26:36:a0:f1:58:5f:0c:fd:
         f1:47:f5:cc:61:b0:2a:46:b6:6b:7b:53:f9:b9:94:a3:12:fc:
         fb:44:53:9a:be:f2:78:ff:49:1c:1a:85:59:c4:cf:ac:18:38:
         6d:8d:87:e1:c4:58:09:8d:57:3e:84:58:ee:b6:7f:88:0e:b3:
         61:8d:e5:af:84:f3:b5:dd:c2:3c:b4:eb:6c:c7:fd:90:f1:98:
         e2:54:87:56:0a:f3:3f:20:0a:b6:d9:e2:28:d5:b3:2d:2d:cf:
         6b:a7:c9:0c:7b:34:a1:e9:74:a1:2d:45:8b:85:07:6d:bb:4e:
         00:b7:04:3b:6e:fb:3f:dc:eb:bc:a4:ae:47:b9:c2:c3:1c:c0:
         c0:ab:1e:34:e4:c1:ca:aa:1a:50:3a:21:31:e6:b8:35:31:4d:
         d7:e7:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org