Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa (raw, json)
Hash identifier:          Ucq9vFgUx5hKc/uKQppvL13vYic12C3D6esMFk6cBCQ=
Subject key identifier:   44:CF:7B:FA:E7:E3:D4:7B:87:B8:70:EB:94:5A:94:24:E6:97:A5:F4
Certificate issuer:       /CN=10CB5B9501E835ABE33452149F17754A51CE36A4
Certificate serial:       4F47DA6B8FC0693A1D9729CC18BA1D9BF996419F
Authority key identifier: 10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa
Signing time:             Thu 04 Apr 2024 00:34:28 +0000
ROA not before:           Thu 04 Apr 2024 00:29:28 +0000
ROA not after:            Thu 03 Apr 2025 00:34:28 +0000
asID:                     61776
IP address blocks:        143.208.136.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:47:da:6b:8f:c0:69:3a:1d:97:29:cc:18:ba:1d:9b:f9:96:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CB5B9501E835ABE33452149F17754A51CE36A4
        Validity
            Not Before: Apr  4 00:29:28 2024 GMT
            Not After : Apr  3 00:34:28 2025 GMT
        Subject: CN=44CF7BFAE7E3D47B87B870EB945A9424E697A5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:55:6f:e8:42:f4:b4:1d:98:ef:fc:3a:9f:
                    a7:29:dd:f8:30:9c:54:f8:db:14:c8:45:47:2c:6a:
                    b6:25:5a:7f:aa:44:b7:14:d2:fe:15:83:27:47:df:
                    4f:87:bb:2f:ec:bb:74:5a:79:e2:58:bd:7a:19:76:
                    94:76:27:ab:d6:15:f2:89:2a:04:73:8f:fa:0d:55:
                    05:6e:1b:cf:b2:0d:5b:84:84:6e:5a:b7:71:ca:6c:
                    07:11:8f:f4:bb:e2:77:d2:ea:d6:b6:6a:85:d5:34:
                    a1:3e:17:5b:3f:cb:ec:82:86:02:6a:00:d4:5d:06:
                    5a:97:97:f3:cd:0c:72:51:79:64:55:56:f0:8b:f7:
                    44:3c:0d:0f:08:0d:17:e3:88:06:6a:a3:40:24:9d:
                    f9:49:6a:09:77:08:69:cd:3b:ed:d0:86:f2:c7:d0:
                    ad:df:dc:18:c8:24:01:3b:2e:8b:ed:32:d3:0f:40:
                    35:bb:3c:b1:b8:52:2f:ef:88:c1:dc:22:c9:ca:51:
                    68:19:ee:31:f4:91:2a:21:cc:89:d5:b6:49:bd:42:
                    c3:f2:bb:96:4b:3a:b6:88:1a:29:0a:d5:f2:ff:06:
                    61:59:74:18:48:fb:d7:cd:79:13:eb:35:1c:07:2f:
                    44:cc:e1:f4:c2:02:6f:4d:16:af:dd:57:30:02:73:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:7B:FA:E7:E3:D4:7B:87:B8:70:EB:94:5A:94:24:E6:97:A5:F4
            X509v3 Authority Key Identifier:
                keyid:10:CB:5B:95:01:E8:35:AB:E3:34:52:14:9F:17:75:4A:51:CE:36:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/10CB5B9501E835ABE33452149F17754A51CE36A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CB5B9501E835ABE33452149F17754A51CE36A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/1/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:8c:9b:bd:45:6a:bf:27:07:eb:51:c3:30:73:56:c0:ff:3f:
         ce:d8:59:19:b3:e0:ba:5a:8b:0f:da:ed:3e:dc:6b:5e:e7:dd:
         ec:41:8c:88:e8:7d:b6:9e:16:7e:47:04:1b:2a:d6:10:a5:f5:
         f9:bc:35:c4:3a:51:d6:cf:aa:a7:ff:b8:40:54:dd:ca:d6:5c:
         f8:f4:92:20:d4:99:12:7f:45:80:59:8a:d5:86:a0:9b:b2:62:
         7f:e2:9d:c3:e6:06:a6:12:9d:6f:c3:66:3d:73:eb:dd:81:97:
         bf:f8:03:b0:45:ec:87:9d:76:8e:9c:33:14:af:f5:90:4d:43:
         80:1d:4a:24:a5:5e:f1:18:49:77:4c:ef:fd:7f:04:55:38:ce:
         a6:8b:db:cd:5f:be:00:91:a5:f5:56:53:18:00:27:cc:6d:13:
         f5:82:bc:25:de:59:2d:02:64:e6:9d:ab:ff:a4:87:e0:5f:22:
         00:f0:b1:80:ca:07:64:00:9f:84:12:9f:42:52:0b:43:75:30:
         cb:fb:db:ab:60:7b:54:30:5b:3c:dc:ae:ca:78:51:dd:7f:e1:
         15:d1:b3:1b:d2:f7:78:2d:fa:37:36:d7:51:61:d2:19:a5:88:
         4a:86:37:3e:59:47:8b:be:c2:69:d2:f5:a8:82:c6:a8:56:72:
         b1:4c:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 17:50:30 2024 by rpki-client on console-fra.rpki-client.org