Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3137302e302f32342d3234203d3e20323632333736.roa
File:                     3134332e3235352e3137302e302f32342d3234203d3e20323632333736.roa (raw, json)
Hash identifier:          Lr3vDIgimzKGCAg/nTuDmQd9aKaZ3ZEEnPto5/2RLmI=
Subject key identifier:   1F:7A:6A:E5:8E:2D:1B:C9:17:C6:DC:F1:75:CE:07:A5:5C:0A:A2:82
Certificate issuer:       /CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
Certificate serial:       716C95B07E306127A220C1082A4F7C6EA35F37FD
Authority key identifier: C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3137302e302f32342d3234203d3e20323632333736.roa
Signing time:             Tue 02 Jul 2024 14:03:39 +0000
ROA not before:           Tue 02 Jul 2024 13:58:39 +0000
ROA not after:            Tue 01 Jul 2025 14:03:39 +0000
asID:                     262376
IP address blocks:        143.255.170.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6c:95:b0:7e:30:61:27:a2:20:c1:08:2a:4f:7c:6e:a3:5f:37:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C47C4419F3B0301460D71A68A39D35E25A0926C3
        Validity
            Not Before: Jul  2 13:58:39 2024 GMT
            Not After : Jul  1 14:03:39 2025 GMT
        Subject: CN=1F7A6AE58E2D1BC917C6DCF175CE07A55C0AA282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:04:73:da:29:37:72:24:da:59:5d:b3:4e:
                    d7:c2:00:34:ae:8f:00:71:57:ec:80:19:e7:b7:05:
                    a0:21:0c:05:fa:a3:3e:69:38:42:08:2e:ab:55:05:
                    e2:ec:ea:65:d6:13:7f:bd:b6:83:13:00:ee:54:c9:
                    01:3e:67:85:2a:4e:a3:33:6d:b2:8a:ba:bd:2e:3e:
                    8c:a3:44:56:ab:e6:ff:a1:52:39:8f:f1:41:f7:20:
                    aa:2e:87:40:68:33:48:10:dc:a0:ee:9c:2a:c3:7a:
                    24:52:37:61:64:c1:ff:88:db:f6:3d:21:19:5b:2a:
                    bf:b0:39:e9:ee:04:95:42:30:83:71:ff:0f:ef:f9:
                    a1:c6:79:00:60:58:c8:25:e5:46:e1:d7:22:fd:92:
                    d1:52:ed:0d:cc:d9:11:e3:07:a7:56:c1:65:e1:77:
                    19:5b:28:61:b7:54:dc:d4:ec:ed:9e:8f:d2:19:cb:
                    25:c9:20:3e:10:70:44:bf:ec:78:a7:72:cf:70:63:
                    bb:55:5d:55:6d:39:fa:7b:3b:bf:6f:02:fa:c5:21:
                    1c:61:6a:8b:56:a3:82:f4:30:b9:75:43:ed:1d:cf:
                    b6:e4:c4:fd:57:ca:10:a6:2c:b4:1a:bb:cf:b6:9c:
                    38:24:94:22:71:0b:f5:9e:a1:99:c1:f4:20:cb:85:
                    fe:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7A:6A:E5:8E:2D:1B:C9:17:C6:DC:F1:75:CE:07:A5:5C:0A:A2:82
            X509v3 Authority Key Identifier:
                keyid:C4:7C:44:19:F3:B0:30:14:60:D7:1A:68:A3:9D:35:E2:5A:09:26:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/C47C4419F3B0301460D71A68A39D35E25A0926C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C47C4419F3B0301460D71A68A39D35E25A0926C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B7YwzQXRn6vaj7DJHPqjMiQHiawVEBCJDNrt8fZMZWk/0/3134332e3235352e3137302e302f32342d3234203d3e20323632333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:f9:e7:95:7e:23:60:7b:90:ce:6d:10:d0:ce:a0:63:6c:
         5c:3d:3c:3f:2f:d0:a7:78:82:23:8e:38:2a:4c:d2:4b:9e:84:
         4d:17:01:4a:7a:6a:19:82:cb:ad:d1:c4:f6:ec:c1:7d:10:fd:
         d2:e1:a4:46:1e:d4:78:77:db:da:6a:ef:9d:e5:d6:5f:e6:33:
         76:b1:ca:24:54:59:3d:f1:0e:50:e2:0d:54:f0:d1:12:ee:9b:
         1c:ed:8c:e0:d0:8c:df:c2:c7:f3:a8:e8:ba:8e:b1:46:e3:b5:
         79:4f:7e:52:a6:bf:6a:7b:0a:09:e2:c6:8c:35:3f:f0:51:1e:
         5f:85:f9:52:7a:6c:42:d2:fb:15:74:f8:a9:15:2a:4f:6b:6f:
         91:a1:3a:c3:11:3f:7f:8e:53:f8:98:e8:a5:2a:b2:d8:99:36:
         e1:58:3a:47:f8:1b:0b:af:2f:d7:64:94:f7:f5:41:c5:a5:70:
         e2:67:38:8a:f0:bb:14:c2:02:14:41:be:82:bb:b1:ae:ff:a6:
         e9:58:2f:8c:23:6b:20:56:59:80:d0:8f:71:00:c2:44:a2:86:
         c8:07:08:86:f0:7b:1b:ae:ca:97:df:65:96:63:79:41:69:1b:
         a2:e7:99:81:2a:9d:6f:c7:90:d9:bb:8a:f4:03:33:0e:63:18:
         66:b3:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 04:39:20 2024 by rpki-client on console-ams.rpki-client.org