Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa
File:                     3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          OA4JGVXdZIZ2ryErmD/yjREXnKpqg407LCxV3phZ9Q4=
Subject key identifier:   1F:D7:E6:49:74:01:D5:D3:77:6B:27:D2:5E:AC:9A:16:53:87:BD:F8
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       7CCCC9C3E264D75D0BA4A1919EC01959F81E1444
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa
Signing time:             Wed 04 Sep 2024 14:16:40 +0000
ROA not before:           Wed 04 Sep 2024 14:11:40 +0000
ROA not after:            Wed 03 Sep 2025 14:16:40 +0000
asID:                     267388
IP address blocks:        132.255.44.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cc:c9:c3:e2:64:d7:5d:0b:a4:a1:91:9e:c0:19:59:f8:1e:14:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: Sep  4 14:11:40 2024 GMT
            Not After : Sep  3 14:16:40 2025 GMT
        Subject: CN=1FD7E6497401D5D3776B27D25EAC9A165387BDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:d2:7f:93:a2:71:d8:dc:15:9a:77:28:ad:
                    eb:e5:ce:e8:84:44:89:5e:ee:57:64:ae:15:a6:c4:
                    dc:d7:31:50:d3:65:66:b1:a5:6f:03:b8:04:9a:ca:
                    d3:6e:4a:3d:8b:9b:c1:36:b3:38:8f:b1:fb:3e:f9:
                    ec:c4:9e:90:76:f6:b0:8a:40:ed:17:6c:02:41:8e:
                    91:ac:a7:0c:44:dc:e2:1a:73:6a:bd:58:ce:a1:a9:
                    cb:2e:9f:61:9e:9d:34:ec:e5:a4:42:2e:e0:38:f3:
                    93:1b:a5:35:84:22:ba:e2:a2:9e:60:c6:3f:9c:3e:
                    f2:59:76:35:31:be:e1:27:84:d6:8e:36:9e:e0:6e:
                    2e:a3:20:da:f9:35:f5:f8:c9:4e:41:b7:a8:40:ad:
                    05:97:5f:89:be:59:04:21:51:a0:25:53:51:46:c3:
                    07:c0:e3:03:c2:93:8d:fe:10:30:76:77:21:6a:ce:
                    d6:77:b5:93:88:a9:46:fc:26:b7:d1:11:c4:75:69:
                    8d:c1:e5:7a:77:3a:e4:57:bb:67:02:33:2a:35:80:
                    56:3c:af:80:87:b9:14:cb:58:14:44:b7:3d:cf:3f:
                    1a:d5:80:34:01:d1:77:ca:bb:a2:c8:57:e6:17:4b:
                    b6:d7:7a:96:6d:93:d2:53:c5:88:29:6e:dc:f3:0b:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D7:E6:49:74:01:D5:D3:77:6B:27:D2:5E:AC:9A:16:53:87:BD:F8
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:dc:b7:06:da:5e:63:fd:5b:52:cd:83:25:8f:5d:22:5c:bf:
         9b:f4:88:5f:14:66:c2:f6:e0:95:3b:95:83:ea:70:80:88:01:
         e7:42:08:59:a7:f3:7a:85:63:fa:36:80:5c:3e:b5:96:eb:db:
         bb:7c:7f:6f:34:4f:32:ac:63:8e:3c:c0:09:12:e0:47:dd:f0:
         5e:82:fc:e7:55:12:50:2f:75:2d:a3:14:70:05:78:dc:e8:c0:
         cc:cd:39:d5:eb:2f:c0:35:34:e1:cc:a5:ed:12:d5:e2:7b:89:
         b2:f3:6b:e4:12:88:ef:f9:84:cd:30:56:0e:ea:2c:c9:a4:ad:
         fe:da:73:fe:9f:8f:a7:50:80:db:0a:22:bb:3e:31:0d:e8:55:
         9b:d4:c9:a6:ba:ee:02:44:1a:9e:4a:10:ca:f0:72:33:e0:4e:
         59:68:a8:43:5e:6d:23:20:0f:45:75:2b:2c:68:cb:e0:77:8d:
         94:ec:3e:f3:94:4b:f2:67:d2:31:d3:fc:2e:76:59:6c:77:bd:
         bc:44:0e:fd:7c:09:9e:e3:7e:72:59:84:90:ff:8b:b6:7f:d8:
         4f:73:5a:66:a5:32:40:02:ed:cc:16:0c:44:2b:ac:80:49:2c:
         34:c9:0e:4f:54:dd:8e:ae:2f:c5:5c:54:8b:76:14:84:7e:77:
         0c:fa:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org