Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3134332e3133372e38342e302f32322d3234203d3e20323632383437.roa
File:                     3134332e3133372e38342e302f32322d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          vxHu6U3gqidyaSLwzvm0oDoqMXohmGbVRlsrsohS8t4=
Subject key identifier:   B7:B8:C7:B6:26:62:2B:1C:69:CF:E0:4E:F5:DA:17:C0:DF:0D:CB:D4
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       7D861CB27CBC6B139FAD4924A5A91287155B7DBA
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3134332e3133372e38342e302f32322d3234203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:35 +0000
ROA not before:           Thu 04 Apr 2024 16:07:35 +0000
ROA not after:            Thu 03 Apr 2025 16:12:35 +0000
asID:                     262847
IP address blocks:        143.137.84.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:1c:b2:7c:bc:6b:13:9f:ad:49:24:a5:a9:12:87:15:5b:7d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:35 2024 GMT
            Not After : Apr  3 16:12:35 2025 GMT
        Subject: CN=B7B8C7B626622B1C69CFE04EF5DA17C0DF0DCBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:c1:a1:ac:e6:af:89:8d:8a:9b:b4:24:37:
                    8a:4e:cf:8e:e4:6e:45:0c:ad:1b:7c:06:7e:f1:fe:
                    5e:50:61:13:9b:bd:52:5c:ce:a4:02:38:78:45:75:
                    0c:f8:66:5d:4c:c5:66:21:ba:80:21:93:e8:6e:84:
                    48:c1:99:51:46:32:fb:87:f2:63:89:2c:e4:9d:44:
                    29:4a:93:e2:fd:ed:55:19:eb:16:42:ee:55:00:b4:
                    0f:15:15:47:e3:1b:f0:c1:14:fe:c6:4d:0a:c1:8e:
                    42:d5:c0:bb:bf:59:91:e9:ca:3a:6e:7d:69:9e:58:
                    d1:d7:2e:ce:13:46:c7:0a:3d:71:fd:8e:32:b7:ff:
                    71:c5:bd:ee:1c:f9:a3:f6:01:07:eb:a9:a8:7d:e6:
                    40:e4:16:75:3e:60:31:7d:82:fa:63:c2:37:04:ec:
                    ca:8d:04:60:ea:bc:f4:48:85:82:72:b9:6f:d7:2b:
                    f1:2f:13:fd:c3:ca:b2:d5:91:38:b5:fa:3f:f0:af:
                    a3:4b:85:e5:8c:78:d8:e9:58:63:cc:af:ed:57:88:
                    49:62:92:88:11:0e:ba:4f:86:d7:94:d5:40:95:13:
                    b8:2f:a5:bd:a3:8b:0a:ce:58:13:d8:fe:be:d2:bc:
                    30:60:16:2f:8a:59:1b:99:f2:8c:d4:2d:a4:87:fe:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:C7:B6:26:62:2B:1C:69:CF:E0:4E:F5:DA:17:C0:DF:0D:CB:D4
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/3134332e3133372e38342e302f32322d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:19:c6:6a:f3:e7:62:be:f2:0b:b1:af:74:95:18:bd:ae:6f:
         0b:3a:57:67:d9:91:cd:95:a3:bf:e5:34:08:bb:d9:77:86:b5:
         93:45:92:b8:cc:f2:07:6a:79:e5:7b:11:07:e9:f9:a3:ab:61:
         6c:b7:2b:85:3c:58:24:52:73:da:4b:c8:7e:80:20:59:8c:03:
         b0:d6:54:5d:db:ca:a0:ea:4c:49:e4:cc:05:75:67:78:d2:19:
         15:db:3b:57:86:a6:58:67:22:5a:82:b5:b5:9d:2f:c8:f0:e8:
         7e:00:b3:77:1d:eb:22:61:92:6c:6c:3e:0b:f9:fd:ff:88:d8:
         40:fc:af:95:ee:98:f9:bf:84:3f:e6:e4:e6:7d:6a:72:8e:57:
         0f:a5:b1:42:a8:e2:5b:78:9c:da:8f:68:79:47:f7:04:c5:e3:
         e9:dc:13:3b:cd:7a:d2:7f:e5:73:f9:4d:5e:a7:cd:bc:2a:ee:
         11:cc:39:42:82:52:17:fd:26:d2:68:b5:c0:c8:fc:f2:2d:9a:
         a1:14:22:db:be:8f:6e:86:28:d0:61:a2:87:79:7e:65:7d:46:
         44:0b:9f:99:c4:f3:73:07:7a:97:04:a3:90:54:b6:ff:dd:42:
         75:8a:21:9f:25:cb:72:86:95:5f:44:32:81:20:b2:4a:4c:fa:
         c4:7c:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:41:55 2024 by rpki-client on console-ams.rpki-client.org