Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa
File:                     3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa (raw, json)
Hash identifier:          dWyVIgc6CLl4ysSQC4IjnS5YDFqadD+jpMx01vgy000=
Subject key identifier:   C9:90:97:4F:BA:7F:08:F6:0E:7F:6F:5A:0C:DE:F0:23:8E:E6:8F:EF
Certificate issuer:       /CN=FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE
Certificate serial:       7BA600891F779F7AACD168B07750AA3C343667C2
Authority key identifier: FB:C6:2A:8A:E7:DA:6C:CE:75:A9:14:AB:58:C1:F6:98:47:F5:7E:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa
Signing time:             Mon 17 Jun 2024 01:11:49 +0000
ROA not before:           Mon 17 Jun 2024 01:06:49 +0000
ROA not after:            Mon 16 Jun 2025 01:11:49 +0000
asID:                     266413
IP address blocks:        170.81.100.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a6:00:89:1f:77:9f:7a:ac:d1:68:b0:77:50:aa:3c:34:36:67:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE
        Validity
            Not Before: Jun 17 01:06:49 2024 GMT
            Not After : Jun 16 01:11:49 2025 GMT
        Subject: CN=C990974FBA7F08F60E7F6F5A0CDEF0238EE68FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:30:3c:24:dc:5b:99:25:b0:a1:ba:b3:38:
                    a7:40:20:86:97:50:5a:fa:50:3b:b1:00:5e:0f:98:
                    4e:34:1f:95:9f:41:c1:67:3e:1b:47:04:25:d2:1b:
                    d6:30:44:dc:2f:c7:3a:76:8e:64:e2:f4:cc:a6:b0:
                    5b:ab:b2:53:e0:8d:05:4f:1f:03:46:2c:eb:23:b0:
                    05:e3:7e:27:60:8d:62:d5:91:5c:97:67:5e:32:4b:
                    88:c6:60:c9:d4:bb:b7:61:9b:2c:9b:fd:5f:1d:9d:
                    26:75:10:ca:c5:bd:6e:77:ed:29:e4:00:e8:7a:62:
                    77:e3:46:82:4f:bf:4c:8a:64:b2:52:83:32:83:1c:
                    ea:d8:b1:e6:f7:43:6d:d5:65:0f:08:da:52:ff:c1:
                    80:64:7c:f5:12:c4:df:c0:ba:e6:12:14:d7:72:3d:
                    13:31:00:3d:b2:73:05:fa:84:36:d9:8c:41:31:7b:
                    88:83:9c:a0:f0:b4:76:14:f2:7b:3d:6d:05:00:f1:
                    25:dc:de:2c:7a:bd:c4:e0:7b:0c:3a:2b:ce:44:41:
                    e0:b4:dd:d5:2f:ad:a9:53:87:81:a9:3f:21:3e:7d:
                    1b:47:8a:ec:67:6c:da:ea:05:5c:a0:bb:71:72:a8:
                    3c:5c:c7:4f:9b:01:4b:62:8f:a1:04:35:95:1e:89:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:90:97:4F:BA:7F:08:F6:0E:7F:6F:5A:0C:DE:F0:23:8E:E6:8F:EF
            X509v3 Authority Key Identifier:
                keyid:FB:C6:2A:8A:E7:DA:6C:CE:75:A9:14:AB:58:C1:F6:98:47:F5:7E:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC62A8AE7DA6CCE75A914AB58C1F69847F57ECE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3x89Kq9jL1Wodh8sHSBGiPeYgmXTWjRXHwCMNcAGyfDg/1/3137302e38312e3130302e302f32322d3234203d3e20323636343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:62:11:a4:51:74:24:ea:54:eb:2d:d6:6a:e3:d2:26:93:ba:
         7d:2d:3f:d0:1b:2e:42:a7:3e:a7:f4:5a:d4:29:a3:65:37:c6:
         91:e2:4f:5a:04:7e:12:9b:c3:d7:20:0d:6f:e2:3b:06:05:13:
         f2:b5:c8:ca:35:6f:f2:26:f1:ff:0d:f1:dd:a8:3c:17:bc:b5:
         6f:25:d2:7a:0b:01:c6:eb:65:95:f0:66:74:a7:98:e8:fd:3a:
         9a:77:e8:30:64:3f:09:ff:6d:07:64:7a:6a:0a:7b:c7:9f:f5:
         13:e2:f1:a1:ec:07:46:9c:bd:0b:24:c8:63:2c:c6:4d:27:f3:
         6a:70:e3:bb:94:53:13:c8:69:bf:79:43:01:57:71:19:c4:58:
         a1:33:db:ce:92:5b:ca:4f:ad:fd:75:49:82:77:36:e7:de:50:
         96:08:15:42:9d:ad:f2:c2:68:96:3c:2f:6d:e4:49:7d:3e:7b:
         26:b7:bb:24:33:ff:87:68:85:1c:25:d4:eb:e2:11:1f:15:61:
         f6:ea:e1:49:0a:b9:92:46:25:4c:f7:35:22:1e:e7:5d:f4:cd:
         bf:b5:fd:ec:cd:ec:d5:b9:76:3f:39:f2:fb:12:96:11:f9:b2:
         63:7c:03:3c:14:aa:af:fd:fe:37:e4:2a:8d:3d:13:e6:6c:97:
         58:40:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 00:30:25 2024 by rpki-client on console-ams.rpki-client.org