Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e38322e36342e302f32322d3234203d3e203533303830.roa
File:                     3137302e38322e36342e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          0f7SOIfx83p5V1Pz+whNV8fXHP512ncynEL2+0Ci/Q0=
Subject key identifier:   95:03:42:AC:0F:DD:4B:77:3E:55:91:98:FF:55:5A:27:0C:20:E4:58
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       030E02628EBA8E4CD23A0A1A72AB9CF66CFCA1DD
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e38322e36342e302f32322d3234203d3e203533303830.roa
Signing time:             Thu 31 Oct 2024 17:05:21 +0000
ROA not before:           Thu 31 Oct 2024 17:00:21 +0000
ROA not after:            Thu 30 Oct 2025 17:05:21 +0000
asID:                     53080
IP address blocks:        170.82.64.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0e:02:62:8e:ba:8e:4c:d2:3a:0a:1a:72:ab:9c:f6:6c:fc:a1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:00:21 2024 GMT
            Not After : Oct 30 17:05:21 2025 GMT
        Subject: CN=950342AC0FDD4B773E559198FF555A270C20E458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1b:d9:34:cd:fd:05:f1:08:8f:52:f0:ce:74:
                    20:7a:bd:47:c4:e0:6d:55:fd:f3:3c:c2:92:c2:04:
                    fd:b7:82:7b:58:92:ed:c4:ce:2e:dd:69:fb:ec:4c:
                    62:04:d8:7d:28:0f:00:5a:00:50:7f:94:bf:a4:d6:
                    df:03:ba:09:ef:84:04:57:5c:6d:05:d1:a8:30:05:
                    e2:f8:04:3d:13:f4:90:78:49:62:9f:f1:b2:5f:ca:
                    3f:8e:d5:5b:4f:a6:59:22:e3:3b:b1:a2:0b:3e:e3:
                    fe:85:38:6f:a5:62:93:8f:53:a9:aa:7f:49:da:9b:
                    fb:63:95:38:9f:b5:6a:d9:ef:be:94:5b:ca:f2:d7:
                    43:8c:72:f3:1e:bb:89:96:d9:a5:f0:c1:ec:bb:90:
                    8b:7b:b0:ca:55:fb:26:eb:68:07:68:31:b8:8d:0b:
                    90:a6:75:7d:96:39:f0:fa:1a:a9:2d:52:82:ae:e9:
                    08:5a:a8:f9:e7:98:62:3a:fe:52:3a:58:c4:8c:3b:
                    64:1d:d6:19:67:aa:19:e6:87:3b:4d:1c:e9:b1:b8:
                    4c:df:6f:e0:a8:57:91:67:3b:a6:19:80:d7:05:86:
                    f9:52:df:23:ba:c6:c6:2a:f8:fd:ec:bd:62:b2:00:
                    f7:70:dd:db:8a:3b:1e:6e:c0:ff:96:84:6f:49:d6:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:42:AC:0F:DD:4B:77:3E:55:91:98:FF:55:5A:27:0C:20:E4:58
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137302e38322e36342e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:5c:23:a5:b2:ae:8a:4f:1f:e6:53:c1:9b:7b:c5:68:50:4c:
         35:b3:c7:a4:47:aa:3a:d3:c3:ba:72:de:fa:e3:63:ef:95:53:
         8b:ff:91:7f:05:e6:08:e3:da:41:6c:ca:9c:1a:59:c7:7e:cf:
         a9:87:8c:58:c6:0d:e0:e6:5e:a5:1a:86:e3:73:69:f7:0e:38:
         e9:2e:56:47:f6:ea:67:35:44:5b:2b:c5:4e:f9:16:9b:e5:8b:
         e4:ab:41:84:0c:e1:d3:d5:0f:e8:ca:b0:6c:e6:9a:11:b6:43:
         99:a6:3e:ec:d9:2b:c4:da:93:13:ce:1b:01:a2:0b:dc:bb:fd:
         f1:ad:13:3e:5f:ee:4f:5d:3b:20:3f:64:d7:ab:f8:f6:05:9b:
         4b:5e:47:cd:01:16:09:14:fd:e2:68:d8:ca:84:46:4d:4e:61:
         72:e0:29:f3:77:98:0e:32:b2:fc:38:4b:cc:42:3e:d5:1e:53:
         aa:51:b0:d5:ff:21:1d:6b:7b:19:e9:c4:77:32:55:ca:15:3f:
         dc:a1:06:66:08:0b:18:fd:8c:06:36:e9:5f:d1:c4:3f:f6:73:
         b7:89:a6:7a:8a:5e:81:62:80:b0:41:3b:89:3d:f0:d3:cb:97:
         e7:4b:98:69:64:8d:3f:2e:81:9d:48:34:a2:1e:d4:11:af:cc:
         f2:c2:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org