Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137302e3234372e3139362e302f32322d3332203d3e203533303134.roa
File:                     3137302e3234372e3139362e302f32322d3332203d3e203533303134.roa (raw, json)
Hash identifier:          sD69IwC+NJGvxEn8wwaS63E3tQuVnlTJngMVtOa37k4=
Subject key identifier:   D2:95:E8:58:15:FE:0A:EF:13:84:1D:DC:A6:13:F1:1B:D6:1B:2E:D8
Certificate issuer:       /CN=FEAEF81974D8C58C36C81BB87666B0C4F005AC34
Certificate serial:       19381DD0440C5F6C59F0C9FF6CFCA20066520FF9
Authority key identifier: FE:AE:F8:19:74:D8:C5:8C:36:C8:1B:B8:76:66:B0:C4:F0:05:AC:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137302e3234372e3139362e302f32322d3332203d3e203533303134.roa
Signing time:             Wed 08 May 2024 21:27:39 +0000
ROA not before:           Wed 08 May 2024 21:22:39 +0000
ROA not after:            Wed 07 May 2025 21:27:39 +0000
asID:                     53014
IP address blocks:        170.247.196.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:38:1d:d0:44:0c:5f:6c:59:f0:c9:ff:6c:fc:a2:00:66:52:0f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAEF81974D8C58C36C81BB87666B0C4F005AC34
        Validity
            Not Before: May  8 21:22:39 2024 GMT
            Not After : May  7 21:27:39 2025 GMT
        Subject: CN=D295E85815FE0AEF13841DDCA613F11BD61B2ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:92:4c:1e:ae:5d:70:cd:46:e1:86:7e:0c:
                    c1:1e:5c:00:b4:27:ae:11:2b:c4:cf:1e:79:23:93:
                    52:11:46:b7:64:15:56:44:45:b6:3b:17:e2:d1:f4:
                    60:28:cf:ba:19:13:85:63:b9:11:3b:25:9c:eb:98:
                    95:2d:1c:92:e2:c3:4b:eb:76:3b:af:b2:f0:66:23:
                    65:b0:b8:5c:2e:d1:87:99:9e:1a:e2:01:bf:9d:3a:
                    ca:81:a9:59:70:42:9a:11:00:d1:4a:9f:e7:d8:33:
                    29:a7:0b:47:29:97:df:d4:de:9a:c5:a5:65:5b:13:
                    22:e1:e9:ed:9a:87:a6:bf:fa:a6:93:1d:fd:bf:24:
                    aa:d5:ba:f4:b6:d5:7f:0f:68:8c:34:b6:a8:80:8a:
                    40:bf:93:92:cd:20:06:02:20:14:bd:97:0c:3b:18:
                    98:26:6f:e5:88:19:90:88:9c:4c:b3:ee:ce:6b:22:
                    c7:21:43:76:48:a8:a5:7b:26:21:c7:ba:3e:13:8f:
                    a1:53:b3:fa:c9:41:9d:af:f9:b3:36:16:d4:c2:66:
                    db:6a:73:e0:98:9d:6c:61:19:82:85:fc:1d:d7:12:
                    5e:69:f8:1b:db:55:48:41:27:97:c4:41:78:11:a8:
                    0e:bb:f9:11:c6:43:cd:74:5b:47:56:73:88:66:17:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:95:E8:58:15:FE:0A:EF:13:84:1D:DC:A6:13:F1:1B:D6:1B:2E:D8
            X509v3 Authority Key Identifier:
                keyid:FE:AE:F8:19:74:D8:C5:8C:36:C8:1B:B8:76:66:B0:C4:F0:05:AC:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEAEF81974D8C58C36C81BB87666B0C4F005AC34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3v2t2iJUXQcBGxWQrd99CK1n5Ef1ETFgvgdEQ1bhrZFh/0/3137302e3234372e3139362e302f32322d3332203d3e203533303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:8a:c9:75:70:30:8e:d1:ce:4f:65:32:1b:23:57:30:c2:
         2f:8a:9a:01:b4:ad:e6:42:58:73:eb:e1:c1:ad:5f:a1:ee:d2:
         ec:e6:a9:f2:84:47:24:66:01:64:a7:bb:2b:c6:9f:46:52:12:
         af:29:9c:81:cb:7a:38:b2:16:69:54:b5:61:bf:92:3d:51:7e:
         1b:90:98:d0:31:43:0e:02:b6:19:4d:9b:e6:f8:5b:d6:52:2a:
         1a:73:16:a0:1a:cf:a3:d3:77:0c:7c:09:a1:0f:6b:fb:27:52:
         cb:2b:33:88:2e:bc:22:03:01:17:c0:b0:0e:1a:2a:bb:28:46:
         67:2e:03:7b:ae:83:fa:1f:97:71:de:97:fa:3f:d1:cb:fc:40:
         07:47:32:82:77:02:59:5a:1b:b6:e3:64:aa:c0:57:7c:53:24:
         52:cf:14:af:cb:d2:b2:1c:af:10:72:0c:26:fc:e3:e6:13:ee:
         8c:22:e8:97:cd:9b:07:77:0e:3a:c6:9c:4c:db:be:4e:95:0a:
         a4:02:64:68:39:fd:d8:00:94:48:a2:34:be:82:88:b6:7d:6f:
         59:a7:04:59:8e:a6:9c:6b:4d:e1:2b:55:62:2b:86:c1:0e:33:
         c0:80:dd:24:fa:b5:7c:a6:33:5e:f7:0b:61:a4:7a:ed:78:e1:
         f4:a1:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 00:33:33 2024 by rpki-client on console-ams.rpki-client.org