Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/3134332e3235352e34342e302f32322d3332203d3e20323633363233.roa
File:                     3134332e3235352e34342e302f32322d3332203d3e20323633363233.roa (raw, json)
Hash identifier:          cF7rsmujjyGrR7W1CguRXfygzc7k1zF5kQCZRv0u3rA=
Subject key identifier:   F5:EB:F4:6A:CF:09:BC:1D:3A:8A:10:03:18:87:4A:42:2E:EE:20:93
Certificate issuer:       /CN=A003ECD97A78942862A75B3FD6339EE84C8298A2
Certificate serial:       01E9D68487A7DF18D885D6B02A45C46C5912100C
Authority key identifier: A0:03:EC:D9:7A:78:94:28:62:A7:5B:3F:D6:33:9E:E8:4C:82:98:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/3134332e3235352e34342e302f32322d3332203d3e20323633363233.roa
Signing time:             Wed 03 Apr 2024 19:14:32 +0000
ROA not before:           Wed 03 Apr 2024 19:09:32 +0000
ROA not after:            Wed 02 Apr 2025 19:14:32 +0000
asID:                     263623
IP address blocks:        143.255.44.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:d6:84:87:a7:df:18:d8:85:d6:b0:2a:45:c4:6c:59:12:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A003ECD97A78942862A75B3FD6339EE84C8298A2
        Validity
            Not Before: Apr  3 19:09:32 2024 GMT
            Not After : Apr  2 19:14:32 2025 GMT
        Subject: CN=F5EBF46ACF09BC1D3A8A100318874A422EEE2093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:c9:c5:8e:1d:88:d4:72:d8:c2:97:6b:80:
                    ec:a6:20:c0:20:ca:c1:6f:ac:61:50:95:f0:b8:42:
                    af:8d:3a:e3:60:ba:bc:bb:28:11:1e:a5:d1:31:52:
                    d2:15:ff:be:31:fe:c8:ac:d1:86:09:e4:74:84:59:
                    c5:1e:d6:01:a5:f8:47:9e:9b:00:78:1a:af:fd:1c:
                    24:6f:d9:60:f3:a7:9f:6a:84:e7:23:bb:88:6c:c3:
                    d0:8a:01:a2:51:c4:22:69:58:c4:41:6f:70:8c:48:
                    df:0b:7c:db:87:de:cf:bd:b9:72:fe:e1:bd:04:d2:
                    f1:53:e1:63:5e:41:f0:b0:9e:4c:41:14:4a:fb:72:
                    57:e2:68:1e:f2:c5:50:4c:e9:78:ed:17:34:47:c1:
                    15:7c:fa:fb:2e:7a:a0:49:bf:c9:16:c9:22:9a:b3:
                    43:9b:83:01:0c:e0:12:6b:d4:a6:9b:56:c7:c1:cb:
                    5e:b8:35:c8:c0:0d:55:9e:d8:b0:94:43:e5:e9:a7:
                    3d:41:f0:b1:ed:55:d3:12:9c:a5:37:d7:fd:56:dc:
                    60:cb:b3:06:4c:38:52:69:15:ac:7a:85:75:01:26:
                    00:e6:67:2f:46:6d:df:b3:30:ca:2e:b7:6b:21:19:
                    5b:13:5a:d9:65:cc:b4:86:cb:0f:80:5e:05:fc:84:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:F4:6A:CF:09:BC:1D:3A:8A:10:03:18:87:4A:42:2E:EE:20:93
            X509v3 Authority Key Identifier:
                keyid:A0:03:EC:D9:7A:78:94:28:62:A7:5B:3F:D6:33:9E:E8:4C:82:98:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A003ECD97A78942862A75B3FD6339EE84C8298A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/1/3134332e3235352e34342e302f32322d3332203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:53:1c:94:5b:26:3b:7e:cf:c9:f4:fa:d3:4f:c3:80:6d:dc:
         6a:83:14:46:1d:ff:46:f8:12:54:7f:8e:06:e2:4b:f6:dd:f4:
         de:e6:b8:4b:27:f3:27:e3:14:12:8a:dc:27:83:af:82:ae:57:
         0d:5b:3c:70:6e:62:7e:80:bd:52:da:6d:5e:a4:72:f0:d6:4a:
         a6:be:4f:de:5a:0f:e3:0d:d5:d9:bf:e2:64:58:d3:f7:12:31:
         4d:50:80:d7:34:7f:e6:1a:14:76:81:10:a5:5a:94:9f:c2:03:
         a8:47:95:81:d5:91:3b:4c:97:f9:97:e0:b3:ad:78:6a:53:20:
         a7:b0:28:d0:27:67:1c:09:5c:5d:1c:7b:fb:ef:fe:bb:3b:71:
         35:45:f5:38:d8:fb:ea:74:32:6c:f5:a9:4c:2c:97:3b:de:ee:
         15:ef:61:67:53:02:2e:18:8d:68:9d:05:b7:57:56:64:67:3d:
         a7:97:cb:ad:20:7e:c1:13:94:7a:f8:c5:93:0f:da:57:b5:8f:
         dd:47:97:cb:05:80:34:dc:95:9e:c9:07:f3:36:68:02:59:69:
         0f:4a:76:46:4c:f9:5f:d8:63:6f:eb:ba:fd:73:e5:53:38:93:
         92:32:07:b4:a0:3b:31:1c:cf:92:4f:a1:7f:bf:1f:b3:1f:ee:
         c6:6c:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 12:40:38 2024 by rpki-client on console-ams.rpki-client.org