Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138322e302f32342d3234203d3e20323636323735.roa
File:                     3137302e37382e3138322e302f32342d3234203d3e20323636323735.roa (raw, json)
Hash identifier:          10WV7KpjYr6eX1+pc6DJYnwrmTzPpoLJU3B6YMimD80=
Subject key identifier:   51:4F:00:BA:0B:2A:2C:CA:2E:46:27:4C:EC:FB:E2:FD:3F:D2:44:63
Certificate issuer:       /CN=08638276B92466BDF0303C6186494ACF59C04E02
Certificate serial:       585471A7A8BFA680916BB2F438B2B26EF3BEFD1C
Authority key identifier: 08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138322e302f32342d3234203d3e20323636323735.roa
Signing time:             Mon 29 Jul 2024 13:15:40 +0000
ROA not before:           Mon 29 Jul 2024 13:10:40 +0000
ROA not after:            Mon 28 Jul 2025 13:15:40 +0000
asID:                     266275
IP address blocks:        170.78.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:71:a7:a8:bf:a6:80:91:6b:b2:f4:38:b2:b2:6e:f3:be:fd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08638276B92466BDF0303C6186494ACF59C04E02
        Validity
            Not Before: Jul 29 13:10:40 2024 GMT
            Not After : Jul 28 13:15:40 2025 GMT
        Subject: CN=514F00BA0B2A2CCA2E46274CECFBE2FD3FD24463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:7b:87:40:25:71:4c:93:7f:d8:fe:cb:ad:
                    59:b4:67:d5:ed:21:94:a9:62:fa:25:ce:7c:37:66:
                    f6:b0:f1:fa:76:f3:53:5c:51:34:44:1e:2f:31:43:
                    48:99:bd:de:61:38:57:08:ed:d5:98:7e:7b:2a:88:
                    83:fe:c7:4a:19:bf:f8:6f:ba:bf:d1:32:c7:8b:62:
                    19:95:73:00:76:8e:27:31:94:dd:94:09:d2:32:bd:
                    2b:d9:d0:5d:00:c7:bd:34:6e:84:d1:af:4d:b0:7b:
                    07:ad:28:26:39:d5:52:d3:4d:80:07:e9:c7:3f:d7:
                    3a:40:26:a5:32:e5:01:01:04:d9:b3:c0:58:cb:63:
                    62:10:df:30:29:57:f1:1f:f3:c6:9d:84:43:c6:60:
                    f3:17:ad:02:40:f9:f6:71:e0:ab:72:d0:25:4e:76:
                    06:0b:df:ba:48:4d:10:cb:4a:04:9e:7f:25:fa:3a:
                    7a:57:9c:34:c4:9c:3f:c6:89:1a:ca:bb:6f:82:7f:
                    ef:79:fe:60:fe:6f:c3:fb:eb:e6:88:29:d9:22:66:
                    35:63:62:0f:fe:95:01:c9:7a:94:9a:2f:2c:3c:ee:
                    33:5a:6e:dd:12:d6:5b:de:9a:e9:90:0d:c0:9f:44:
                    03:eb:57:82:50:07:68:f6:5e:ee:f2:d4:7f:55:08:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4F:00:BA:0B:2A:2C:CA:2E:46:27:4C:EC:FB:E2:FD:3F:D2:44:63
            X509v3 Authority Key Identifier:
                keyid:08:63:82:76:B9:24:66:BD:F0:30:3C:61:86:49:4A:CF:59:C0:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/08638276B92466BDF0303C6186494ACF59C04E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08638276B92466BDF0303C6186494ACF59C04E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ndrJ3EaDCXSQ7YmZ9YqDZfFQj18mtmSwQtNtTq2yGKu/0/3137302e37382e3138322e302f32342d3234203d3e20323636323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:29:9f:88:f0:d2:fc:41:2b:b2:cf:37:03:5b:b4:52:0d:2f:
         cd:cd:fc:62:36:b3:a9:53:b5:d1:b0:86:51:34:2e:4b:66:26:
         5e:16:1b:83:bf:04:87:1f:d3:97:fd:c8:af:a9:d1:83:05:99:
         e7:f6:3d:f8:dd:8a:9d:d1:a9:52:88:89:f4:2e:73:4f:3c:82:
         be:c5:8e:6c:8d:c5:9c:f8:b4:3e:80:33:8c:37:ee:d5:08:7b:
         32:b3:ff:2f:de:e8:f0:9f:a1:38:f3:1c:aa:8c:ab:c6:7c:dc:
         3b:aa:33:75:e2:88:a7:df:93:f2:4d:30:05:30:09:90:3d:ee:
         38:91:61:a9:d2:b0:5a:26:51:3f:b8:00:fd:6a:20:e2:90:49:
         ba:8c:0d:df:95:0b:30:3b:0f:0e:c6:8f:c4:c4:3e:19:4a:2b:
         c0:c2:7c:78:8b:53:76:31:55:57:c4:35:4c:fe:84:d1:f8:fb:
         88:a2:52:be:af:b0:bc:de:06:d5:c6:13:95:7f:5f:e5:cc:be:
         33:8e:f2:8e:51:a0:10:d4:53:88:ea:a7:86:ae:63:d1:0f:3d:
         42:bd:0b:72:fc:ec:a3:3c:a5:d0:13:c8:22:29:92:b3:24:23:
         ed:6b:7d:6e:4d:7e:8e:19:fc:8b:bd:28:38:2d:cb:bc:e1:ab:
         16:b3:2a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 03:03:07 2024 by rpki-client on console-ams.rpki-client.org