Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32322d3232203d3e20323636323735.roa
File:                     3137302e37382e3138302e302f32322d3232203d3e20323636323735.roa (raw, json)
Hash identifier:          T4ylm98wvzQQicVEMm1+rgJ1UPAxyzOsbjFFqG9299I=
Subject key identifier:   2F:FB:D9:60:64:5B:AD:01:2B:21:7B:C5:FA:29:9B:40:4F:C1:67:52
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       15F79DD555C00872F80D7C6F344AF35FE3ABA10F
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32322d3232203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:15:49 +0000
ROA not before:           Mon 29 Jul 2024 13:10:49 +0000
ROA not after:            Mon 28 Jul 2025 13:15:49 +0000
asID:                     266275
IP address blocks:        170.78.180.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f7:9d:d5:55:c0:08:72:f8:0d:7c:6f:34:4a:f3:5f:e3:ab:a1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:10:49 2024 GMT
            Not After : Jul 28 13:15:49 2025 GMT
        Subject: CN=2FFBD960645BAD012B217BC5FA299B404FC16752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:c8:ff:a3:82:7d:f8:e3:61:e0:59:7f:49:
                    be:2f:bd:ff:df:35:b2:8b:d0:e0:10:0a:63:6a:91:
                    fa:47:fa:8d:f8:0f:94:02:34:05:45:30:4b:04:e8:
                    62:cb:36:51:3d:0d:2e:be:d6:a9:04:b9:9f:bb:7b:
                    6e:b5:66:61:25:f5:36:c9:3f:79:0c:6a:21:65:72:
                    1c:17:10:b5:6a:10:9c:da:f6:c2:cc:f1:8f:31:23:
                    48:f0:1a:6b:dc:e5:36:ef:0b:b8:97:65:2a:35:ad:
                    34:b5:ff:69:d5:92:3b:eb:15:bc:89:88:71:45:90:
                    d3:ee:a3:3d:17:eb:b5:a3:e5:c4:23:b8:98:18:8c:
                    4a:b5:75:53:2c:f9:e0:63:49:6c:8b:89:b9:2d:36:
                    ab:62:f5:ac:d5:db:07:c4:cf:e9:39:b9:92:c5:41:
                    d6:55:36:7d:64:d5:18:43:86:5f:ee:35:6c:d3:8b:
                    70:63:73:fa:8e:e5:ff:10:be:72:0d:f1:18:5d:34:
                    83:0f:76:28:3d:b5:ee:88:95:67:ea:70:94:48:07:
                    8d:e1:5a:32:d9:34:8b:b2:61:fe:f9:91:d0:aa:eb:
                    41:87:d3:57:99:5d:a0:25:df:e9:44:9d:db:4b:34:
                    1f:da:bb:e4:3a:85:a2:b4:ed:c0:a5:93:cd:57:5f:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:D9:60:64:5B:AD:01:2B:21:7B:C5:FA:29:9B:40:4F:C1:67:52
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32322d3232203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:71:2d:f3:c8:70:66:81:73:d2:d5:8a:8a:2a:04:19:b5:
         46:c5:95:1b:f3:6b:7b:17:6d:8e:b0:e7:6f:2f:13:dd:eb:65:
         5f:b3:52:3c:34:26:95:6b:44:4f:02:44:46:c6:f3:5f:ee:7f:
         b4:e5:46:41:65:23:47:d4:86:07:5a:81:0f:3b:04:84:54:d9:
         89:15:3c:a2:99:cd:ed:34:26:4c:26:29:f9:ca:21:5d:31:8e:
         53:2d:3b:59:7d:28:23:d4:cd:b9:cc:57:b8:35:53:5a:cb:28:
         6b:c3:f5:f5:fa:05:c9:6f:08:24:2c:42:bc:47:13:d0:60:da:
         14:ee:5b:d4:da:d6:d3:9e:5c:43:c0:9e:03:0a:b2:4b:6f:c1:
         f4:c5:9f:ca:df:a9:af:1f:32:89:0c:0f:2f:1a:83:76:ef:de:
         1c:bf:f2:27:01:79:0c:ba:a2:ee:73:2a:43:39:25:44:61:da:
         ee:48:a9:76:f5:d7:71:5f:f9:33:a6:8f:fd:c8:e1:2d:88:3f:
         8d:ab:a8:08:34:24:8a:62:b4:78:4f:f7:51:a5:a5:d8:70:bb:
         c1:86:ae:7b:0e:6c:ea:b6:f4:5c:7b:ec:0b:f9:6f:24:f9:f0:
         e0:7f:64:c4:42:4e:cd:21:21:fc:41:0a:20:ae:4c:2f:2b:25:
         16:e4:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 03:03:07 2024 by rpki-client on console-ams.rpki-client.org