Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa
File:                     3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa (raw, json)
Hash identifier:          tnvx6qasoZZ7v7RNnrvRDr/dCEGR8vY9tZvIO1K+mYE=
Subject key identifier:   47:C3:CF:E2:C5:CE:BA:F4:5B:27:3E:AF:18:EC:5E:D1:DC:97:7B:B3
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       41E9A82A2CEFC48907268AD76AFB2DE7A60C872A
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:15:50 +0000
ROA not before:           Mon 29 Jul 2024 13:10:50 +0000
ROA not after:            Mon 28 Jul 2025 13:15:50 +0000
asID:                     266275
IP address blocks:        170.78.180.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e9:a8:2a:2c:ef:c4:89:07:26:8a:d7:6a:fb:2d:e7:a6:0c:87:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:10:50 2024 GMT
            Not After : Jul 28 13:15:50 2025 GMT
        Subject: CN=47C3CFE2C5CEBAF45B273EAF18EC5ED1DC977BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:f4:85:4a:08:ac:22:83:84:1f:7b:11:7e:
                    eb:cc:5f:93:36:89:24:5f:b5:d2:3b:85:1a:48:48:
                    eb:fb:ac:c5:a8:0d:13:8d:e1:87:1d:e1:c7:22:b1:
                    18:5a:75:8c:c3:7a:33:7e:7f:1a:8f:2e:b1:1f:7f:
                    f0:c9:4f:e8:3e:56:a3:d7:d3:99:d9:50:0e:52:b7:
                    42:da:75:64:bd:3b:7a:9a:f3:59:e2:3d:24:19:7e:
                    9f:85:1f:d0:2a:e8:63:0d:bf:62:02:9e:43:8a:0e:
                    74:0c:bb:d1:64:65:0f:46:d5:35:c5:50:bf:c3:f5:
                    7c:2b:91:31:47:ce:27:00:21:0e:39:07:0c:a5:e3:
                    27:e6:b3:cf:9f:03:2d:88:8f:3b:a2:55:b0:19:15:
                    bb:1f:7f:aa:79:eb:a2:cb:1d:c2:72:fa:42:2b:51:
                    26:d3:2d:e8:db:76:68:8e:35:8b:66:ad:52:50:f8:
                    a6:80:62:6c:ef:fb:ac:d8:b8:03:81:c6:9f:35:8d:
                    03:ae:91:63:3a:d5:13:22:8f:7a:9d:81:bc:e5:93:
                    ed:94:5d:ba:ac:20:ed:2d:b3:9d:64:e1:8b:97:9e:
                    37:8b:8e:c8:e9:49:ce:ea:af:f0:71:c5:60:46:cf:
                    cd:a1:1e:b4:a3:c4:9a:10:b0:e0:96:6e:64:2d:cb:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:CF:E2:C5:CE:BA:F4:5B:27:3E:AF:18:EC:5E:D1:DC:97:7B:B3
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32332d3233203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:13:2a:17:cf:71:8a:e8:eb:8f:26:0b:9c:ed:1a:7c:c4:
         59:e4:9e:d0:f7:29:a7:b4:dd:3c:e7:3f:bb:a4:2c:26:f2:cb:
         ff:d4:06:39:bb:d4:15:fc:6e:cd:67:ee:2b:da:76:46:bc:9d:
         c7:8c:d7:74:39:30:9b:24:b4:62:c3:10:13:f2:e2:2b:36:6a:
         d9:0e:cb:81:21:db:5f:ec:d8:bf:bb:1e:d9:df:1e:7b:f7:ff:
         33:f1:25:86:51:49:e0:ff:b6:5f:31:aa:ae:f0:ab:32:b8:5c:
         dc:2a:31:a2:99:44:32:89:ab:01:56:d0:93:fe:70:75:e7:20:
         41:b8:8b:b5:55:74:99:13:27:93:63:1b:1f:8d:29:e7:b9:b5:
         8b:b4:9e:65:7a:1a:70:24:ec:0a:21:81:7f:3c:cf:5d:2a:44:
         d5:d0:35:e6:f1:35:99:cd:6c:77:b1:0a:6e:75:23:52:06:ff:
         c8:cf:39:51:ff:14:fa:e7:54:9c:6f:03:55:da:ad:6e:07:90:
         3e:49:04:bd:b2:c5:2b:8c:83:b4:91:17:0c:40:58:e0:97:ba:
         a4:bd:e2:9d:ed:17:5c:c8:4c:89:de:dc:16:6f:4d:58:4e:ba:
         ea:82:08:78:77:ff:e6:c8:89:3b:c9:31:8c:4d:6b:e7:9b:ef:
         b6:da:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 03:36:13 2024 by rpki-client on console-fra.rpki-client.org