Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32332d3233203d3e20323635303631.roa
File:                     3137302e3233312e35362e302f32332d3233203d3e20323635303631.roa (raw, json)
Hash identifier:          p8zFWZB8Jf+poyx0ipyp1aqqwTGuikQM90ANdmKfUVk=
Subject key identifier:   D9:C7:C7:FC:9C:A7:72:CE:2B:50:B4:F9:51:5E:1D:E4:97:67:74:47
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       32B4EDDE33C2D56760C193CCA88B718E4ADDCCE7
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32332d3233203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:52 +0000
ROA not before:           Tue 28 Mar 2023 14:42:52 +0000
ROA not after:            Tue 26 Mar 2024 14:47:52 +0000
asID:                     265061
IP address blocks:        170.231.56.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b4:ed:de:33:c2:d5:67:60:c1:93:cc:a8:8b:71:8e:4a:dd:cc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:52 2023 GMT
            Not After : Mar 26 14:47:52 2024 GMT
        Subject: CN=D9C7C7FC9CA772CE2B50B4F9515E1DE497677447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:79:52:2b:b9:40:f1:d3:ab:f7:b5:bd:73:a7:
                    97:b3:79:7a:40:ca:56:b2:c8:cb:f7:87:56:71:81:
                    1e:25:0e:0e:e2:ae:eb:9b:40:e4:f7:2c:f7:22:fa:
                    fd:b3:1c:8e:11:50:81:b0:46:1f:f6:29:8c:c7:e7:
                    8e:46:6c:19:c7:aa:26:c0:bf:a1:68:1c:ba:0e:71:
                    4c:10:e4:70:00:6b:89:f1:af:0c:ba:68:40:2e:8f:
                    df:25:d3:68:08:21:82:03:5f:36:21:df:8a:74:a6:
                    96:12:60:9f:e7:d5:e9:78:82:a8:02:b8:8c:5c:ca:
                    38:68:77:c4:9f:f0:69:22:02:c1:86:87:56:21:ca:
                    06:49:6a:bd:28:b1:a8:76:1c:08:11:c2:f1:97:be:
                    b8:0e:7b:e2:ec:29:a2:b6:63:f7:16:3a:25:45:ce:
                    9a:a6:e7:8c:4c:ca:f9:d4:cb:19:be:51:f8:ea:20:
                    e7:79:cb:77:dd:66:fd:8a:7c:06:9d:ef:27:a8:09:
                    fc:d3:03:3e:62:51:35:93:b3:bf:21:46:ae:74:26:
                    82:fe:63:d5:ad:a3:ac:86:b6:9b:10:72:02:91:ae:
                    19:07:06:a8:33:ce:5e:8e:f5:e6:b4:5d:8d:25:53:
                    3d:f5:87:3d:d4:76:b1:21:a4:27:2d:eb:6f:8e:f1:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C7:C7:FC:9C:A7:72:CE:2B:50:B4:F9:51:5E:1D:E4:97:67:74:47
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35362e302f32332d3233203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:a7:f6:5d:9b:a7:bc:96:a8:5b:6b:68:76:7e:7b:28:fd:96:
         eb:1c:a6:e9:7d:a7:e5:56:74:fe:0d:65:5f:10:74:f2:06:03:
         a0:03:1c:4b:de:d3:9f:55:97:49:7d:d5:4c:8c:65:67:75:d3:
         a3:ee:2f:2d:8f:cc:97:7e:0c:7c:54:d2:46:bf:cb:69:45:93:
         e3:eb:f0:8d:10:0d:7e:bc:f6:e3:87:96:88:9b:85:a5:da:97:
         03:5a:e0:f9:75:2e:df:e0:da:b0:f8:ad:d7:ba:b0:0e:15:15:
         2e:4d:a3:a7:2c:70:19:be:8f:dd:0a:65:52:a9:85:f2:d0:22:
         d3:c5:53:de:6b:8d:60:0c:f7:c8:64:5c:8c:36:b0:af:71:c6:
         07:29:49:b5:0b:95:f5:3f:f5:3d:82:c4:83:3e:73:ab:c6:8b:
         c3:3e:24:85:41:1d:32:1d:7a:c7:b8:2c:c6:e5:9f:e5:8b:59:
         ca:33:5b:ba:56:5f:76:4e:21:32:03:30:22:3c:0c:e5:bd:a9:
         b9:ba:65:95:dc:6e:6a:81:18:67:96:c9:e3:0a:b9:ae:2f:da:
         98:f7:39:01:67:60:e5:08:88:97:13:dc:7e:86:15:2b:49:1e:
         26:a7:57:21:4f:76:d8:81:1e:9a:06:39:08:77:28:b4:6c:ae:
         eb:2d:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 11:44:36 2024 by rpki-client on console-fra.rpki-client.org