Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/3137302e37392e32342e302f32322d3234203d3e203532383037.roa
File:                     3137302e37392e32342e302f32322d3234203d3e203532383037.roa (raw, json)
Hash identifier:          2R82Fds+E6ILNQ/aKkgbSs0/zEPUwoH7GQv52J3X86s=
Subject key identifier:   65:DD:08:B4:BA:69:6D:8F:81:80:9F:EF:D0:8F:F0:38:35:9A:12:11
Certificate issuer:       /CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
Certificate serial:       2380896876033F1F1C4F21563C186BE57DF6D4D7
Authority key identifier: 39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/3137302e37392e32342e302f32322d3234203d3e203532383037.roa
Signing time:             Wed 10 Apr 2024 13:29:36 +0000
ROA not before:           Wed 10 Apr 2024 13:24:36 +0000
ROA not after:            Wed 09 Apr 2025 13:29:36 +0000
asID:                     52807
IP address blocks:        170.79.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:80:89:68:76:03:3f:1f:1c:4f:21:56:3c:18:6b:e5:7d:f6:d4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39313F2AB6C925F73DAC9060D3007FA7884B584C
        Validity
            Not Before: Apr 10 13:24:36 2024 GMT
            Not After : Apr  9 13:29:36 2025 GMT
        Subject: CN=65DD08B4BA696D8F81809FEFD08FF038359A1211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:2a:0e:4e:be:50:21:9f:1a:5f:1c:de:e7:
                    3a:d1:57:b7:e8:fe:66:9e:3f:9a:9f:5e:33:f7:fd:
                    87:d6:bc:a4:58:80:e6:ac:a9:69:9a:31:d2:90:03:
                    bc:e3:98:66:bc:f1:d0:6a:fc:ba:71:81:99:8e:8b:
                    de:d0:3c:7e:72:a2:be:51:db:5c:c6:e6:8f:da:fd:
                    31:f2:f4:cf:ed:a0:dc:d9:db:07:30:64:39:75:b2:
                    43:28:a9:5a:da:60:b4:d3:9c:f8:d5:ac:f2:ce:dd:
                    b1:16:6e:35:b4:a0:75:37:2d:a3:ef:2a:d6:e8:7f:
                    eb:77:47:5e:52:80:29:4d:09:cb:04:12:60:cf:76:
                    c2:12:43:5f:61:85:de:3f:ab:e0:7a:34:81:ed:18:
                    7a:ed:34:9e:b7:0e:a7:0c:0e:cc:54:5e:b9:f4:5f:
                    59:ed:96:73:3f:18:d6:76:cd:4b:69:0a:69:d1:29:
                    d4:88:95:d2:a3:f5:f6:6a:1e:54:9e:6e:9a:56:4b:
                    c1:a8:de:f1:a6:53:e9:f0:be:e1:3a:f6:41:6c:ab:
                    68:35:43:48:40:6a:3f:4a:02:34:8a:56:f3:f2:62:
                    b9:62:37:b4:ad:d8:c6:d1:94:70:cc:4b:b2:9c:3e:
                    8a:44:fb:37:bb:f1:5f:a5:d2:0f:83:fe:5e:84:2f:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:08:B4:BA:69:6D:8F:81:80:9F:EF:D0:8F:F0:38:35:9A:12:11
            X509v3 Authority Key Identifier:
                keyid:39:31:3F:2A:B6:C9:25:F7:3D:AC:90:60:D3:00:7F:A7:88:4B:58:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39313F2AB6C925F73DAC9060D3007FA7884B584C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/1/3137302e37392e32342e302f32322d3234203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:a1:9d:77:54:42:39:58:73:ba:cd:db:95:38:e3:d6:cd:
         da:1e:13:81:b0:c6:df:f8:31:c4:f3:15:46:83:1f:bd:f0:04:
         0b:c9:30:d6:c3:eb:56:40:9e:d9:2f:b4:aa:9e:ac:51:4c:00:
         97:a7:f2:e4:ca:45:68:47:4f:cf:35:97:82:4e:f2:93:24:28:
         cd:7c:78:c4:a2:2c:15:4b:2b:1c:25:a9:92:c0:f9:9d:d9:95:
         56:d0:58:c2:82:a5:bb:25:87:39:2f:66:c2:f8:61:2b:8c:85:
         e8:f7:35:8c:39:02:50:54:53:00:75:2a:2b:eb:fc:74:e0:84:
         13:ad:83:1a:b1:26:d2:d6:e1:79:f3:d3:0d:78:54:03:c2:84:
         e8:86:7d:9a:cf:db:a3:f6:3f:0c:89:4f:3e:97:6e:60:59:f6:
         54:7c:39:ad:f2:ac:d1:c2:1c:bf:15:c3:cb:4a:28:91:7b:3d:
         fd:3b:fd:24:ec:3c:aa:61:5b:c3:0b:ca:ad:5d:fc:c3:33:46:
         65:5c:04:cf:45:81:c3:b5:a3:e2:4c:b4:9a:18:b3:71:58:19:
         cc:dd:86:54:3e:76:36:2f:21:75:2b:bc:18:96:bc:25:d3:b2:
         eb:96:63:bd:02:38:1e:65:4c:ef:68:03:96:d3:63:7e:69:56:
         2b:10:ca:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org