Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa
File:                     3137302e38332e3130302e302f32322d3232203d3e203532363031.roa (raw, json)
Hash identifier:          BMocowq2a/Oej6L/U8OcZ2/06TKOHXihlJdxFzfNnOI=
Subject key identifier:   93:4D:58:10:93:2A:8F:18:B8:F0:48:73:95:18:3C:DD:89:98:3B:FF
Certificate issuer:       /CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
Certificate serial:       2A395DD7A8DEFE46431443A6E69D81B240C7919B
Authority key identifier: 4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa
Signing time:             Mon 29 Jul 2024 15:58:47 +0000
ROA not before:           Mon 29 Jul 2024 15:53:47 +0000
ROA not after:            Mon 28 Jul 2025 15:58:47 +0000
asID:                     52601
IP address blocks:        170.83.100.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:39:5d:d7:a8:de:fe:46:43:14:43:a6:e6:9d:81:b2:40:c7:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7
        Validity
            Not Before: Jul 29 15:53:47 2024 GMT
            Not After : Jul 28 15:58:47 2025 GMT
        Subject: CN=934D5810932A8F18B8F0487395183CDD89983BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:1e:84:61:de:a8:54:d7:a4:19:13:d4:92:
                    59:f9:df:c3:99:6a:f6:7b:18:71:fe:57:fd:3f:56:
                    0c:a9:43:15:4b:f6:a7:ab:03:c0:66:2a:68:b4:6f:
                    ac:98:88:ee:1e:74:74:5a:0e:28:0f:47:10:c1:24:
                    b8:f2:e8:73:7d:4a:fb:c3:49:52:05:53:1f:89:b9:
                    97:fa:c8:f3:8a:fd:ae:79:28:b9:cd:d8:c4:07:cf:
                    e8:7d:98:ce:d7:96:db:fb:86:a8:33:69:8f:ec:8b:
                    88:7d:e6:6f:aa:1b:ca:0b:df:b5:57:b5:c6:a2:b2:
                    77:02:36:57:11:3e:cd:10:e0:7a:32:6b:47:a5:c8:
                    ae:b6:5b:f6:37:dc:c3:12:88:44:3c:37:4c:47:6e:
                    90:62:7c:45:8f:d8:79:d1:ca:d1:09:2d:b9:39:e4:
                    e5:99:5a:f9:a8:01:2b:ef:86:d8:37:8d:01:37:f7:
                    19:df:02:1e:90:b5:6e:f2:8a:e1:31:5d:1f:60:e8:
                    d2:86:31:2a:37:93:d5:ce:22:96:7a:19:c1:8a:0f:
                    e4:b7:36:61:e2:77:a2:4c:5d:7d:46:06:46:dd:38:
                    6f:f5:b1:c8:79:3f:fe:cb:6e:9a:3e:c5:11:a1:b1:
                    77:58:5e:bc:ed:03:2c:02:58:75:fb:73:bc:95:3e:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:58:10:93:2A:8F:18:B8:F0:48:73:95:18:3C:DD:89:98:3B:FF
            X509v3 Authority Key Identifier:
                keyid:4B:F5:B8:31:EB:77:CF:96:BC:1C:E9:37:55:F1:A4:3F:B6:8A:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BF5B831EB77CF96BC1CE93755F1A43FB68A47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/3137302e38332e3130302e302f32322d3232203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:1d:ca:ab:49:52:45:1b:b7:e8:7b:1a:e4:63:34:9c:dc:de:
         4d:ff:82:ac:b8:44:95:48:fd:26:99:be:55:4e:75:db:15:c1:
         eb:78:9b:e5:5c:8d:e6:c4:60:e6:67:63:2e:b0:20:a7:44:cc:
         b5:7f:0f:a4:ea:45:34:7a:b1:7e:68:b6:18:8c:ec:56:51:73:
         6f:e1:53:ea:47:75:21:5c:63:6f:1a:13:7d:e0:d9:f0:8a:23:
         58:72:5c:8c:25:cc:2b:6f:fa:fb:78:37:fa:b1:a3:3f:6f:bd:
         81:b3:af:5b:ee:b4:4f:70:ac:8e:e8:39:17:20:08:e2:99:67:
         2b:2f:db:0e:70:ba:0e:9f:72:7b:e4:0e:ba:9b:00:b0:a9:07:
         66:0d:4d:b9:9f:f5:44:30:e8:9b:06:3b:cd:5a:15:e0:2c:87:
         25:8f:74:85:81:1d:4f:33:0b:5a:bb:46:74:fe:ef:5f:a8:60:
         a6:27:14:e3:ef:08:5e:8c:ae:56:ac:9a:84:06:5a:86:df:bb:
         0a:4e:37:15:ab:ba:80:7f:7c:3f:1a:8d:3a:d9:fb:ca:c0:4c:
         29:db:38:99:1f:2d:29:b8:00:ba:c8:c4:90:fe:46:f9:cb:d0:
         41:15:36:1f:9e:c0:d9:54:53:45:b4:12:ed:33:28:fb:f5:9d:
         ca:18:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 21:29:17 2024 by rpki-client on console-fra.rpki-client.org