Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa
File:                     3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa (raw, json)
Hash identifier:          yY0GGHoNPRCpY7MPSPUXTDaHKrWpq9HPrb2/LU/6I0k=
Subject key identifier:   81:55:71:57:AC:C3:78:D1:C8:87:AB:49:A9:E6:CD:FF:52:73:DA:90
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       55A3FFBA6EC2051906CF5D10852087D9CB25C618
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:15:46 +0000
ROA not before:           Mon 29 Jul 2024 13:10:46 +0000
ROA not after:            Mon 28 Jul 2025 13:15:46 +0000
asID:                     266275
IP address blocks:        170.78.180.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a3:ff:ba:6e:c2:05:19:06:cf:5d:10:85:20:87:d9:cb:25:c6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:10:46 2024 GMT
            Not After : Jul 28 13:15:46 2025 GMT
        Subject: CN=81557157ACC378D1C887AB49A9E6CDFF5273DA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:f2:4c:e5:10:35:cf:fc:86:d3:71:ca:f4:
                    37:8f:4a:8e:6c:40:60:16:6e:23:c0:78:11:ce:e4:
                    b3:b8:e5:e7:53:e7:80:f9:b3:b6:ed:10:07:95:ec:
                    ec:12:a6:f3:3b:26:f1:3a:69:98:6d:fd:d8:23:50:
                    4f:d1:f4:da:41:f2:05:1a:bd:d8:da:76:41:a7:9e:
                    77:7f:59:09:cd:8a:22:b2:6f:8a:f5:e9:de:19:de:
                    e6:c4:03:5b:26:fb:41:82:10:92:91:78:28:24:e0:
                    08:6f:87:7b:ea:5f:eb:1b:5b:96:cc:39:f3:f4:28:
                    55:c3:4f:12:8f:f8:ef:90:92:e4:4c:53:0f:d5:7d:
                    68:df:2e:35:29:6d:8a:c6:b3:4b:d3:7b:6b:81:c8:
                    d1:60:4c:b5:de:44:be:b9:68:cf:81:a3:27:b5:fe:
                    fb:47:27:2a:73:34:ff:d4:01:81:ce:8c:a7:92:66:
                    1a:e0:16:84:38:d4:73:92:7b:03:d6:86:c8:eb:06:
                    b5:8a:8a:4e:61:a4:7a:50:86:5d:59:2d:59:1f:c5:
                    85:6d:6c:65:b7:3a:a9:2b:15:9e:01:9d:35:ef:ca:
                    d9:7e:d3:39:cf:72:d3:18:1b:46:de:5a:26:e2:d3:
                    a6:c1:e7:71:3e:0a:8a:93:66:52:01:93:d5:f7:ea:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:55:71:57:AC:C3:78:D1:C8:87:AB:49:A9:E6:CD:FF:52:73:DA:90
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138302e302f32342d3234203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:8e:72:83:12:cc:6a:23:c7:0f:d3:c6:da:48:77:bb:31:
         7a:f8:d6:7f:a7:c1:e7:64:58:19:05:98:8e:be:35:af:64:c3:
         5d:00:04:a9:ba:69:e2:86:91:cb:40:46:ba:26:d7:34:6e:7f:
         65:58:1a:56:05:33:4d:73:f3:77:ae:72:e7:b5:dd:58:65:e0:
         bd:cb:f9:62:0f:a3:1b:b9:00:db:ed:d8:2f:86:d1:c9:2a:de:
         28:98:1b:49:b6:77:cc:e1:64:3c:61:bb:03:c4:c8:4f:4c:49:
         b8:bb:1a:62:d6:ca:ab:ac:8d:95:29:ba:0c:5f:c9:f1:f3:71:
         44:2c:bf:e2:56:45:a9:f0:ff:e0:d9:ab:83:fe:f4:24:62:03:
         dc:08:5a:b6:eb:5d:75:77:1d:fd:ca:75:6b:95:df:9f:d4:1a:
         c3:f2:b7:06:0b:83:6f:d9:b9:d1:8f:2e:5f:b0:45:f6:29:83:
         7b:95:ec:7b:d4:c9:1f:41:18:13:cd:30:ce:10:ed:4c:f7:e5:
         c8:e5:f0:85:5a:1d:2e:23:39:0e:8a:64:e6:5a:d1:f3:8e:d4:
         a3:f9:97:b8:4b:78:96:80:4f:8b:52:09:53:db:c8:77:8e:df:
         79:31:5b:0f:e5:26:c9:34:0d:cc:96:01:7f:c2:d6:1b:c6:4c:
         96:70:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 03:36:13 2024 by rpki-client on console-fra.rpki-client.org