Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31382e302f32342d3234203d3e203631373137.roa
File:                     3137302e3233332e31382e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          5sgStU3cZOVchOuaLolkfdqCa5OOtb/T+PXbcb6QLac=
Subject key identifier:   2A:1A:E2:8B:78:25:4F:B5:7A:62:60:DA:D6:D8:AF:AF:DE:86:62:5B
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       5BDB74D4FC61D89D14D64A91BFBE3512FB153517
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31382e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:48 +0000
ROA not before:           Thu 04 Apr 2024 15:32:48 +0000
ROA not after:            Thu 03 Apr 2025 15:37:48 +0000
asID:                     61717
IP address blocks:        170.233.18.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:74:d4:fc:61:d8:9d:14:d6:4a:91:bf:be:35:12:fb:15:35:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:48 2024 GMT
            Not After : Apr  3 15:37:48 2025 GMT
        Subject: CN=2A1AE28B78254FB57A6260DAD6D8AFAFDE86625B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:33:b5:94:f8:f3:01:88:51:89:3d:06:a9:
                    82:c9:ae:af:17:23:c7:7f:a4:e3:2c:15:f0:03:ec:
                    31:7c:ec:72:f2:0b:bf:47:cf:b5:b5:97:c4:53:6e:
                    35:15:76:3e:23:74:01:d3:82:46:e0:5e:15:fe:b5:
                    87:ea:22:1d:83:10:54:de:5c:75:03:be:e8:07:40:
                    e9:46:f7:fd:94:e5:c1:74:e0:f2:b0:55:6f:e0:9b:
                    5e:97:09:5a:7e:fe:59:5c:32:a0:b6:08:d0:0d:28:
                    a6:a6:70:5a:d4:54:9d:44:16:aa:01:9b:37:55:30:
                    53:94:19:1a:5b:0d:de:a7:21:a8:5a:d7:46:cb:c9:
                    b0:6d:34:49:86:4c:02:41:d9:5d:8d:62:2b:bc:15:
                    bb:0a:51:63:62:39:ec:73:d6:2d:72:0c:c6:bb:b4:
                    10:aa:77:1e:16:5b:7b:99:92:88:97:b7:3d:2c:9d:
                    65:38:ff:ea:54:9b:13:b5:1a:da:c7:a2:15:94:84:
                    52:1d:38:c4:ed:60:bf:b4:42:1f:c3:94:b7:06:78:
                    ef:15:c6:04:bf:e5:40:90:df:f9:30:d9:1d:bd:f5:
                    1e:2f:1d:00:f2:26:03:01:5c:36:45:48:f9:15:a8:
                    7f:53:91:14:47:64:1c:01:35:89:95:f3:5d:ad:0b:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1A:E2:8B:78:25:4F:B5:7A:62:60:DA:D6:D8:AF:AF:DE:86:62:5B
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/3137302e3233332e31382e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:08:2b:e8:9d:9c:25:72:59:0e:40:27:cc:b1:ad:91:00:d6:
         34:3a:c5:96:49:06:eb:ee:16:a8:43:ca:71:10:1a:18:fd:86:
         53:0a:f7:25:85:56:28:be:ed:b4:5a:f1:d2:b0:53:65:14:90:
         dc:0a:06:12:0e:de:6a:a8:93:fa:15:39:b7:9a:e7:e3:b8:34:
         7d:66:f5:50:73:ec:9d:7f:45:4a:16:6b:b8:40:ce:0c:d2:92:
         72:94:f3:f0:6b:5f:29:54:c1:d3:61:57:2c:97:af:a4:a3:82:
         2f:e8:93:a5:09:44:34:4d:b8:cd:16:62:1a:17:50:76:8e:ae:
         50:cd:30:15:c4:64:8c:3b:08:b9:43:d3:f2:de:07:28:a7:8a:
         9f:39:b0:ce:aa:f0:6f:ad:af:d6:55:e4:8c:1e:e9:08:8d:a2:
         00:bb:fe:25:16:00:75:a0:0b:e1:42:c4:81:91:a6:70:11:0e:
         32:ba:86:1d:4a:fd:aa:5a:4f:56:6e:26:5f:c1:06:e1:43:0e:
         20:fb:ee:83:54:73:8b:3c:ce:a9:4b:ee:e3:16:53:32:e2:d3:
         f6:51:b6:3c:42:e9:71:c0:d8:86:5e:a7:51:32:27:f9:65:a1:
         b5:30:55:9b:02:3b:b7:2d:ad:6e:40:ac:60:c1:8c:81:73:a6:
         6d:fa:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:30:18 2024 by rpki-client on console-fra.rpki-client.org