Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa
File:                     3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          KEc2TukS3FR+b9kS0kl2NvleEW2nh/gQIKWjSTxJwdE=
Subject key identifier:   D8:44:61:46:AD:E7:10:68:D9:08:6E:B1:AB:6F:43:C1:BF:90:F0:63
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       16A3D18DE04D36399DF6269E85029A7B9E8BA4D8
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:56 +0000
ROA not before:           Thu 19 Sep 2024 14:06:56 +0000
ROA not after:            Thu 18 Sep 2025 14:11:56 +0000
asID:                     262494
IP address blocks:        170.82.125.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a3:d1:8d:e0:4d:36:39:9d:f6:26:9e:85:02:9a:7b:9e:8b:a4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:56 2024 GMT
            Not After : Sep 18 14:11:56 2025 GMT
        Subject: CN=D8446146ADE71068D9086EB1AB6F43C1BF90F063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:92:01:cf:a6:c6:16:7d:51:2b:7a:63:28:
                    d7:3d:aa:9d:96:d8:29:26:99:61:8d:4b:e2:0f:f9:
                    7f:f1:66:62:c5:0e:fa:84:76:23:c3:66:36:89:ae:
                    ab:45:40:63:57:f2:98:bb:0b:3c:15:61:44:6c:74:
                    7e:8f:6b:24:ac:a3:77:50:87:29:d4:71:8d:b7:15:
                    ab:b6:25:71:90:d5:88:2a:c0:56:a9:f9:01:dd:f0:
                    f6:e0:4f:88:09:e6:dc:bd:0f:71:91:49:01:25:fe:
                    d2:91:9c:85:e0:70:8f:5e:6f:3e:7e:da:4b:41:b0:
                    8c:4d:ef:70:b0:1b:cd:e5:da:dd:b5:31:c5:7a:24:
                    d9:54:c4:e6:70:f7:dd:95:2a:ce:3f:49:60:27:50:
                    4c:81:4e:46:6b:3e:eb:fe:cd:94:1e:3d:dd:ca:11:
                    ae:77:05:a7:c3:cf:13:f4:87:d5:bc:0d:92:0f:2e:
                    a7:25:1a:a2:f1:e8:39:a0:9c:ed:c8:1f:c4:5c:65:
                    38:2e:a7:6b:85:e1:1c:e0:b5:e0:45:df:97:e7:ab:
                    e6:be:bb:72:00:bd:8f:00:54:5b:56:03:29:1d:07:
                    8f:1e:02:57:6b:7b:00:11:cd:ca:86:2a:ee:2f:57:
                    5d:4a:9a:15:f3:77:9d:5a:7e:90:7c:7d:52:69:ac:
                    72:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:44:61:46:AD:E7:10:68:D9:08:6E:B1:AB:6F:43:C1:BF:90:F0:63
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132352e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:35:56:29:2d:43:b5:cb:8e:00:45:52:89:32:70:38:df:a3:
         09:ad:92:01:a1:aa:a4:68:d1:67:ed:57:f4:29:0a:19:f4:b8:
         4c:fb:7c:02:11:54:78:9d:82:9e:27:d7:8c:97:3f:dc:8d:ae:
         b5:00:39:85:9a:68:f3:2e:f8:95:c3:e5:06:5c:8e:84:44:c8:
         ad:8b:7d:95:a9:2c:f5:31:13:b5:36:6d:8c:6d:4a:e5:70:fd:
         01:c7:78:90:87:0e:18:b8:4b:e5:92:3c:68:78:b9:e1:b9:24:
         6a:a9:0e:47:9c:90:7b:12:53:07:41:16:10:dc:ce:61:bf:66:
         9f:ca:b3:2f:d6:18:ca:83:40:f4:42:44:65:a4:2c:a0:95:1b:
         82:5a:48:81:1d:78:0c:9c:37:8e:3f:38:69:d7:b3:1d:90:5f:
         56:8e:4c:92:ac:7c:7a:e6:34:cb:d3:82:70:78:bf:84:59:5a:
         d8:e4:5d:b6:1b:50:f7:6b:b0:c0:80:5d:c3:30:03:0e:1d:39:
         95:ce:1f:c7:bd:b1:7a:e2:9e:87:df:d5:30:42:e2:5d:bb:a3:
         9e:a0:84:2f:2d:54:83:e4:35:de:9a:ba:85:59:01:0e:b4:a6:
         79:b9:2d:81:80:f4:cd:d7:18:e3:95:a0:c1:46:b0:87:d5:f0:
         10:b3:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org