Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35392e302f32342d3234203d3e20323635303631.roa
File:                     3137302e3233312e35392e302f32342d3234203d3e20323635303631.roa (raw, json)
Hash identifier:          QH40S4Oy2+8V66KCP5KRXqmL77Dw+QeK4LNiB0fNKCw=
Subject key identifier:   AF:E0:EB:F1:6C:A8:0F:FB:90:45:2F:99:28:92:7B:4E:E3:51:5D:BB
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       225147FA3522B552CEF1DBC990856598B163A5CD
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35392e302f32342d3234203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:52 +0000
ROA not before:           Tue 28 Mar 2023 14:42:52 +0000
ROA not after:            Tue 26 Mar 2024 14:47:52 +0000
asID:                     265061
IP address blocks:        170.231.59.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:47:fa:35:22:b5:52:ce:f1:db:c9:90:85:65:98:b1:63:a5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:52 2023 GMT
            Not After : Mar 26 14:47:52 2024 GMT
        Subject: CN=AFE0EBF16CA80FFB90452F9928927B4EE3515DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:4a:9a:a6:fa:18:e7:e2:11:e8:7a:ad:7b:
                    c6:f4:28:28:5a:b3:b1:ce:6e:74:90:0f:7d:db:10:
                    3d:3f:04:9e:5a:45:ba:c3:8f:38:1b:53:dc:be:41:
                    3d:ce:64:82:a6:19:f9:58:f1:d0:45:c2:aa:f5:18:
                    c2:ae:71:ce:5c:37:52:d5:9d:ff:01:9b:02:d0:b2:
                    4c:3d:2e:f9:80:f8:4a:8e:76:34:73:cc:94:28:48:
                    6d:b7:64:b0:05:3b:2d:df:4e:cb:6d:f3:fa:f3:c9:
                    b2:d4:70:d7:a7:fe:d6:f6:c8:b9:8e:ad:ba:b8:48:
                    b6:53:a1:a7:67:5f:30:82:37:d8:72:d0:9e:7a:8a:
                    d9:74:cd:75:c8:72:f9:24:90:c2:79:f0:af:8c:b2:
                    9c:4b:6b:bc:88:03:ef:b7:63:b4:89:cb:0e:cb:c5:
                    14:d4:ea:80:a4:2a:3c:34:a7:b9:19:54:fe:10:5c:
                    0b:37:b8:05:56:42:54:87:9b:f3:c0:99:55:75:34:
                    fb:84:ce:0c:cc:70:a0:11:54:0a:57:16:d1:9e:fb:
                    a1:a7:b8:f6:12:c9:09:00:60:29:44:32:8b:b7:96:
                    9a:4b:f0:48:a6:0f:2d:24:52:d1:17:73:c5:84:c3:
                    ca:91:6c:80:78:59:df:ab:58:95:1b:ce:c5:95:3d:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:EB:F1:6C:A8:0F:FB:90:45:2F:99:28:92:7B:4E:E3:51:5D:BB
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35392e302f32342d3234203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:77:93:f0:81:c8:e4:11:85:40:c1:52:8e:f6:67:ec:e9:21:
         d3:77:27:e5:04:c1:62:b6:40:15:f3:f5:8d:d7:13:30:f5:2b:
         8a:c3:8b:c2:71:f0:df:83:76:ee:a1:5b:9e:89:f9:d8:c0:01:
         c5:fe:db:37:a6:1d:9c:53:87:d0:c9:91:79:86:f1:53:b7:79:
         53:3c:22:81:41:3b:22:37:25:0b:fd:37:68:ef:8b:c2:9a:48:
         06:42:07:3b:3b:9e:e6:25:bf:fc:95:ef:dc:e2:38:b3:74:c1:
         c4:8d:0f:c9:18:f3:e1:77:00:bf:92:b6:1c:03:ee:b5:55:ee:
         33:3b:98:78:30:40:b2:11:09:6a:7c:0c:e4:09:e1:7f:d3:af:
         40:1c:30:f5:93:49:66:e7:67:0e:61:bf:de:aa:f8:e7:35:bd:
         68:fd:2e:e0:7c:11:9f:7a:d2:3f:64:01:98:ea:83:2f:61:45:
         dc:fd:2b:b5:de:7b:65:e5:59:d8:7b:78:45:c4:e9:dc:c5:42:
         0c:14:bd:d1:b2:8c:d4:a0:06:99:e7:4a:ca:cb:89:3f:ed:c0:
         86:08:c7:85:f7:42:ef:ed:f7:b2:96:c9:fb:23:3b:00:8d:7f:
         a5:e8:30:65:8a:71:e8:28:42:4f:bc:21:9d:8c:bd:1d:64:59:
         7d:8a:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 11:44:36 2024 by rpki-client on console-fra.rpki-client.org