Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3134332e302e34382e302f32322d3234203d3e20323633353434.roa
File:                     3134332e302e34382e302f32322d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          P0xkZtqn7Y55LjuIsefXN2ZbkuxLaAey8BezZtywl2w=
Subject key identifier:   A5:8E:D8:27:18:D6:D0:66:5B:56:E5:65:3E:AF:D8:AA:80:DC:61:00
Certificate issuer:       /CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
Certificate serial:       637DFF9A21688E0A6EDC0F5C6E05A162934D041C
Authority key identifier: 87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3134332e302e34382e302f32322d3234203d3e20323633353434.roa
Signing time:             Thu 04 Apr 2024 14:12:51 +0000
ROA not before:           Thu 04 Apr 2024 14:07:51 +0000
ROA not after:            Thu 03 Apr 2025 14:12:51 +0000
asID:                     263544
IP address blocks:        143.0.48.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7d:ff:9a:21:68:8e:0a:6e:dc:0f:5c:6e:05:a1:62:93:4d:04:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
        Validity
            Not Before: Apr  4 14:07:51 2024 GMT
            Not After : Apr  3 14:12:51 2025 GMT
        Subject: CN=A58ED82718D6D0665B56E5653EAFD8AA80DC6100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:16:ed:04:f7:00:7f:a2:a9:e3:95:e0:27:
                    e7:be:a1:1b:96:9e:34:fe:53:df:61:14:b7:0b:36:
                    9f:54:5e:fb:be:2d:71:3a:ae:d8:29:00:c3:bb:2e:
                    4b:c8:01:e1:46:3f:54:11:8f:a5:67:93:9d:e9:6d:
                    f8:10:18:ac:a5:e2:61:21:a4:bf:16:f8:b8:c2:de:
                    1d:4f:99:3e:e0:f6:81:f1:99:34:7d:7d:3d:04:a6:
                    58:15:9d:32:a9:6f:a2:ab:91:ee:8e:4a:58:34:f8:
                    aa:ce:2f:08:12:d3:01:82:c7:ad:42:17:a8:6c:e5:
                    aa:22:b0:95:df:8a:cb:d4:4a:93:7d:08:db:c0:b9:
                    b4:74:eb:58:df:0a:bd:ca:27:84:07:b8:82:ce:f5:
                    13:b6:a9:91:12:26:a5:f1:81:1e:43:7c:2f:04:0c:
                    02:a1:54:41:ec:87:ec:dc:46:c6:a1:ad:23:b3:11:
                    bd:d0:0d:da:18:5e:a6:f7:61:34:fa:90:bc:7d:25:
                    58:5a:63:de:cc:a7:b7:f7:e6:67:ef:9f:34:3e:96:
                    9f:c6:b1:c2:46:68:43:32:55:d5:5e:8c:dd:51:78:
                    4d:45:e6:3e:ae:25:84:9d:9e:7f:cb:d8:16:ec:2f:
                    1a:38:84:d2:12:fd:f3:37:5a:14:d9:0f:f3:b1:05:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8E:D8:27:18:D6:D0:66:5B:56:E5:65:3E:AF:D8:AA:80:DC:61:00
            X509v3 Authority Key Identifier:
                keyid:87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3134332e302e34382e302f32322d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:45:1a:2c:df:af:f6:86:2d:6b:07:96:67:2e:2d:ab:0c:40:
         6f:be:7f:91:fc:90:1c:39:60:ec:6d:e4:39:47:ec:fa:86:7f:
         59:5d:b4:9e:ea:ca:3a:eb:b1:b7:23:3f:a4:6c:12:5d:71:e0:
         4e:93:bc:2e:11:a2:1b:1a:96:2d:94:af:2d:b7:68:bd:68:4c:
         96:d2:05:94:c3:7f:66:e7:3a:79:9b:0b:c4:c9:8b:bd:a5:4e:
         46:f8:54:0a:a2:ca:5e:49:f1:56:20:ec:8a:41:42:ce:28:85:
         d6:fb:3d:3d:18:cf:33:fe:1d:24:37:ac:11:44:50:5d:9e:a4:
         99:e6:3b:20:87:5c:7c:ff:e8:a0:c4:70:68:cf:95:9c:38:dd:
         d7:a1:76:c9:ea:47:de:85:a6:e8:45:cf:ff:c4:ef:3f:11:fd:
         a0:b8:72:d1:38:c2:75:84:d7:17:d7:c2:87:72:e8:17:ca:9a:
         a0:5e:e6:91:2e:30:c9:19:5e:a8:a0:cf:f0:7d:bb:45:8d:49:
         ec:26:7d:aa:e3:d6:70:bd:67:0e:9e:17:8b:05:33:38:de:c1:
         28:42:c6:c1:94:5d:47:37:23:bd:3d:c1:b1:44:e8:07:0f:3f:
         66:bf:ef:9e:84:28:73:3d:52:1d:fe:05:07:e6:13:6d:ef:63:
         17:32:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:01:37 2024 by rpki-client on console-fra.rpki-client.org