Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa
File:                     3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa (raw, json)
Hash identifier:          wnwOWX76z6hiNRfM7yWv8JR3BOhdtgWttmK9VRQj6oc=
Subject key identifier:   55:17:49:85:FA:81:6A:0F:CF:4A:57:E8:A8:D1:94:E3:9A:D4:14:8D
Certificate issuer:       /CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
Certificate serial:       2C584EB787E05A5455C1160A90238FFC704660FD
Authority key identifier: 87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa
Signing time:             Thu 04 Apr 2024 14:12:51 +0000
ROA not before:           Thu 04 Apr 2024 14:07:51 +0000
ROA not after:            Thu 03 Apr 2025 14:12:51 +0000
asID:                     263544
IP address blocks:        170.78.248.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:58:4e:b7:87:e0:5a:54:55:c1:16:0a:90:23:8f:fc:70:46:60:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BFCCDEFC9238205A2E908465AF2BE8F5F87663
        Validity
            Not Before: Apr  4 14:07:51 2024 GMT
            Not After : Apr  3 14:12:51 2025 GMT
        Subject: CN=55174985FA816A0FCF4A57E8A8D194E39AD4148D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:6f:a6:4b:06:2e:0c:bb:bb:a0:56:e3:02:
                    67:1c:d9:b6:20:8b:2d:fa:c4:81:5f:8f:5d:1d:3f:
                    c4:7a:86:ae:39:7a:9e:96:3c:88:91:a0:29:89:e8:
                    ce:d3:86:6a:a0:96:09:ac:5e:eb:ed:d9:be:2c:fa:
                    5e:3f:f4:65:4c:f9:df:03:fc:91:46:fa:85:be:96:
                    6f:92:59:2e:9e:1c:45:02:56:a1:7a:e1:8d:38:48:
                    8c:96:10:56:8d:6b:1c:bd:80:4f:5d:3d:ec:2c:d1:
                    7c:11:53:e3:ef:1d:bb:e8:b0:63:74:26:35:e5:a3:
                    58:28:a2:da:1b:e8:3d:1d:d0:b1:61:1f:a9:da:c0:
                    14:13:fd:91:c9:7c:d3:13:af:76:82:99:a2:0f:7d:
                    1c:ac:ee:a8:90:4a:0a:5e:3e:bb:6d:7c:fa:1a:cc:
                    72:6f:18:9a:59:4e:d5:b8:76:b1:f0:ab:28:2d:82:
                    97:04:99:f0:be:86:42:93:a4:eb:42:c9:08:cf:11:
                    bd:57:54:53:87:2e:74:9a:fc:a4:02:4e:cb:c8:42:
                    5c:24:bc:bd:58:65:08:fd:87:ac:00:88:b9:81:d8:
                    2c:fd:89:d6:ea:9e:11:49:0b:74:0d:d9:f1:fb:b7:
                    8c:5a:13:73:a5:27:06:50:4f:32:bb:e2:74:80:1e:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:49:85:FA:81:6A:0F:CF:4A:57:E8:A8:D1:94:E3:9A:D4:14:8D
            X509v3 Authority Key Identifier:
                keyid:87:BF:CC:DE:FC:92:38:20:5A:2E:90:84:65:AF:2B:E8:F5:F8:76:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BFCCDEFC9238205A2E908465AF2BE8F5F87663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/1/3137302e37382e3234382e302f32322d3234203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:fe:d4:a0:9d:5f:88:de:35:7a:8a:fa:b2:a4:a3:05:2e:
         0d:86:11:5b:ed:4f:36:01:fd:af:32:5b:0b:b8:88:99:93:96:
         fc:d2:6c:a3:ba:a6:34:ab:8e:1e:61:dc:8b:fc:8a:70:69:14:
         8e:65:7b:1f:80:53:37:3a:9a:63:37:ba:c5:91:73:a1:eb:ca:
         f5:f8:10:10:af:3d:a3:ca:14:4e:48:5b:53:5b:ef:b6:c0:c3:
         f4:db:b6:8e:5e:a1:22:48:ea:c8:24:27:67:2e:ed:f2:18:22:
         ee:57:8c:34:f1:32:71:81:35:f6:eb:c2:3b:00:d1:f2:87:1c:
         b5:53:1c:aa:ae:3e:4e:7c:e5:80:88:3e:57:17:5a:91:04:0a:
         fa:f5:39:9f:d6:26:0a:69:e1:59:68:b5:79:f0:6d:35:f2:90:
         fc:ec:dd:78:7f:4a:9a:2f:5e:4f:34:fc:29:d6:e7:84:cc:e8:
         e2:e6:74:36:0e:fd:c0:06:a4:9d:b3:95:4a:72:18:af:48:5a:
         de:64:31:ab:9d:39:97:e1:2c:ce:b1:60:86:83:85:a9:33:90:
         4d:a5:e1:d6:42:9a:57:59:67:ff:ae:aa:5f:37:fe:9f:fb:b5:
         37:85:32:86:8f:04:72:6c:38:d3:2a:4d:83:8c:1c:c0:cb:01:
         ca:0f:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 00:01:37 2024 by rpki-client on console-fra.rpki-client.org