Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134332e302f32342d3234203d3e20323636333533.roa
File:                     3137302e3233392e3134332e302f32342d3234203d3e20323636333533.roa (raw, json)
Hash identifier:          gtzsG0YLTgoiGwHPrY/2S6TBKNfDhCOpDivMFEVy7YY=
Subject key identifier:   9D:59:D1:56:FB:A8:6F:7E:68:33:BD:52:45:0F:B3:39:98:98:4C:40
Certificate issuer:       /CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
Certificate serial:       039A36F3A686CDD933B9611E1B4308E6D2440D17
Authority key identifier: EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134332e302f32342d3234203d3e20323636333533.roa
Signing time:             Wed 03 Apr 2024 18:36:24 +0000
ROA not before:           Wed 03 Apr 2024 18:31:24 +0000
ROA not after:            Wed 02 Apr 2025 18:36:24 +0000
asID:                     266353
IP address blocks:        170.239.143.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9a:36:f3:a6:86:cd:d9:33:b9:61:1e:1b:43:08:e6:d2:44:0d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE
        Validity
            Not Before: Apr  3 18:31:24 2024 GMT
            Not After : Apr  2 18:36:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:35:85:28:4a:b0:ca:87:d5:66:23:7d:36:
                    86:26:8b:9f:06:e9:09:a7:2d:b9:f6:6c:b7:e6:dc:
                    8c:78:52:7a:7c:b9:ce:8a:91:ca:17:bd:ec:38:ab:
                    9c:b5:0d:ae:1a:4c:31:4e:07:a7:0e:32:8a:1b:20:
                    2e:a9:be:1f:00:93:ad:2d:cf:af:f3:34:b9:2f:cb:
                    0d:d4:cc:4d:0a:95:a8:8c:f1:ae:d7:ae:f2:ef:19:
                    c6:eb:25:df:a3:fb:70:c8:b2:b2:ec:67:68:4b:1b:
                    44:20:08:3e:0a:f4:7b:59:31:44:89:81:9c:2b:80:
                    e7:cf:bd:c0:63:95:e1:cf:25:38:29:30:34:5a:99:
                    7a:0e:c8:56:eb:fe:1e:05:a6:7e:2b:96:da:4f:23:
                    a3:7f:ef:f2:62:87:54:5a:a6:88:bc:c0:c6:39:df:
                    c2:ce:f6:53:7f:c6:82:9b:27:ae:ee:27:99:d7:89:
                    1c:b3:32:92:ea:8d:0b:b3:89:a9:84:c6:54:f5:de:
                    27:5b:c7:59:eb:1b:fd:81:a4:7a:ce:a4:be:ca:cf:
                    b7:91:22:e7:c8:2e:47:ee:27:0c:b2:94:31:e4:24:
                    72:db:53:1f:a8:e3:6e:bb:59:f6:ec:fb:b2:da:d0:
                    57:90:7e:b1:ca:cb:1c:62:c2:68:0f:95:00:92:f6:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:59:D1:56:FB:A8:6F:7E:68:33:BD:52:45:0F:B3:39:98:98:4C:40
            X509v3 Authority Key Identifier:
                keyid:EE:A2:45:08:90:E4:2A:8F:9A:48:9F:90:BB:42:D3:B2:A1:1A:1C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA2450890E42A8F9A489F90BB42D3B2A11A1CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/2/3137302e3233392e3134332e302f32342d3234203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:e5:ac:ac:d4:89:ca:92:70:31:26:d0:53:7d:3c:a3:b2:
         71:89:41:bc:a8:04:e7:e5:0b:b4:86:d3:f4:3d:c2:55:68:d5:
         b8:eb:68:72:d2:9c:35:22:27:34:58:4f:37:75:9b:52:fe:91:
         2f:20:9b:fd:32:57:d8:f0:d9:ae:32:80:10:59:a3:2d:00:b0:
         74:b5:18:4e:43:75:97:d8:65:4e:71:00:e6:6c:58:9f:32:84:
         36:47:69:f7:c7:17:11:b7:c3:11:4e:73:09:9c:97:dd:b2:41:
         f6:c0:13:6d:81:bf:8d:19:9f:4e:e7:4e:18:55:d2:19:27:a1:
         53:37:23:b5:99:4d:e4:62:c8:87:32:ad:99:27:f7:19:dc:27:
         4a:62:09:e6:88:29:4c:6c:5f:54:69:46:e4:3f:1d:7f:9e:d7:
         42:8e:c0:13:dd:2e:f5:8e:de:4e:60:9f:03:f8:43:c1:07:29:
         5b:7a:2b:2d:fc:c3:57:af:86:44:22:5c:fe:81:c3:a0:db:9e:
         0c:ea:c1:af:23:d3:ee:26:cf:79:00:10:5b:5e:0f:73:0f:4e:
         3c:89:49:75:a2:65:df:18:5f:5a:4d:c1:55:48:77:31:eb:8f:
         c1:0b:71:df:66:6b:66:83:37:c3:9f:9b:31:07:21:3d:80:0f:
         59:0c:b9:35
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUA5o286aGzdkzuWEeG0MI5tJEDRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBMjQ1MDg5MEU0MkE4RjlBNDg5RjkwQkI0MkQzQjJB
MTFBMUNCRTAeFw0yNDA0MDMxODMxMjRaFw0yNTA0MDIxODM2MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ5QTM1ODUyODRBQjBDQTg3
RDU2NjIzN0QzNjg2MjY4QjlGMDZFOTA5QTcyREI5RjY2Q0I3RTZEQzhDNzg1MjdB
N0NCOUNFOEE5MUNBMTdCREVDMzhBQjlDQjUwREFFMUE0QzMxNEUwN0E3MEUzMjhB
MUIyMDJFQTlCRTFGMDA5M0FEMkRDRkFGRjMzNEI5MkZDQjBERDRDQzREMEE5NUE4
OENGMUFFRDdBRUYyRUYxOUM2RUIyNURGQTNGQjcwQzhCMkIyRUM2NzY4NEIxQjQ0
MjAwODNFMEFGNDdCNTkzMTQ0ODk4MTlDMkI4MEU3Q0ZCREMwNjM5NUUxQ0YyNTM4
MjkzMDM0NUE5OTdBMEVDODU2RUJGRTFFMDVBNjdFMkI5NkRBNEYyM0EzN0ZFRkYy
NjI4NzU0NUFBNjg4QkNDMEM2MzlERkMyQ0VGNjUzN0ZDNjgyOUIyN0FFRUUyNzk5
RDc4OTFDQjMzMjkyRUE4RDBCQjM4OUE5ODRDNjU0RjVERTI3NUJDNzU5RUIxQkZE
ODFBNDdBQ0VBNEJFQ0FDRkI3OTEyMkU3QzgyRTQ3RUUyNzBDQjI5NDMxRTQyNDcy
REI1MzFGQThFMzZFQkI1OUY2RUNGQkIyREFEMDU3OTA3RUIxQ0FDQjFDNjJDMjY4
MEY5NTAwOTJGNkY2MzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxJo1hShKsMqH1WYjfTaGJoufBukJpy259my35tyMeFJ6fLnOipHK
F73sOKuctQ2uGkwxTgenDjKKGyAuqb4fAJOtLc+v8zS5L8sN1MxNCpWojPGu167y
7xnG6yXfo/twyLKy7GdoSxtEIAg+CvR7WTFEiYGcK4Dnz73AY5XhzyU4KTA0Wpl6
DshW6/4eBaZ+K5baTyOjf+/yYodUWqaIvMDGOd/CzvZTf8aCmyeu7ieZ14kcszKS
6o0Ls4mphMZU9d4nW8dZ6xv9gaR6zqS+ys+3kSLnyC5H7icMspQx5CRy21MfqONu
u1n27Puy2tBXkH6xysscYsJoD5UAkvb2NwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FJ1Z0Vb7qG9+aDO9UkUPszmYmExAMB8GA1UdIwQYMBaAFO6iRQiQ5CqPmkifkLtC
07KhGhy+MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNQWTNvaW1QWnJEb1Fm
QkdobVpCaGRlVGpUdVlaaGE4UHlUbTN5TTZuak5wLzIvRUVBMjQ1MDg5MEU0MkE4
RjlBNDg5RjkwQkI0MkQzQjJBMTFBMUNCRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FRUEyNDUwODkwRTQyQThGOUE0ODlGOTBCQjQyRDNCMkExMUEx
Q0JFLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zUFkzb2ltUFpyRG9RZkJHaG1a
QmhkZVRqVHVZWmhhOFB5VG0zeU02bmpOcC8yLzMxMzczMDJlMzIzMzM5MmUzMTM0
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACq748wDQYJKoZIhvcNAQELBQADggEBAApg5ays1InKknAxJtBTfTyjsnGJQbyo
BOflC7SG0/Q9wlVo1bjraHLSnDUiJzRYTzd1m1L+kS8gm/0yV9jw2a4ygBBZoy0A
sHS1GE5DdZfYZU5xAOZsWJ8yhDZHaffHFxG3wxFOcwmcl92yQfbAE22Bv40Zn07n
ThhV0hknoVM3I7WZTeRiyIcyrZkn9xncJ0piCeaIKUxsX1RpRuQ/HX+e10KOwBPd
LvWO3k5gnwP4Q8EHKVt6Ky38w1evhkQiXP6Bw6Dbngzqwa8j0+4mz3kAEFteD3MP
TjyJSXWiZd8YX1pNwVVIdzHrj8ELcd9ma2aDN8OfmzEHIT2AD1kMuTU=
-----END CERTIFICATE-----
Generated at Sat Oct 12 16:10:32 2024 by rpki-client on console-fra.rpki-client.org