Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa
File:                     3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa (raw, json)
Hash identifier:          7Ens8N6xjtE3Dun9ygPd2n888ggD/Ev6pXv6y0Ihh0U=
Subject key identifier:   63:69:FE:AA:05:04:D8:B1:5F:F7:89:BE:C1:50:35:67:04:59:01:6D
Certificate issuer:       /CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
Certificate serial:       02281BEBEE751BD73EF106EBB96FBB0F20BB982C
Authority key identifier: A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa
Signing time:             Thu 18 Jul 2024 19:26:06 +0000
ROA not before:           Thu 18 Jul 2024 19:21:06 +0000
ROA not after:            Thu 17 Jul 2025 19:26:06 +0000
asID:                     264047
IP address blocks:        143.137.220.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:28:1b:eb:ee:75:1b:d7:3e:f1:06:eb:b9:6f:bb:0f:20:bb:98:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
        Validity
            Not Before: Jul 18 19:21:06 2024 GMT
            Not After : Jul 17 19:26:06 2025 GMT
        Subject: CN=6369FEAA0504D8B15FF789BEC15035670459016D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:2d:60:7f:60:60:f6:cf:aa:1d:94:0a:a3:
                    7e:8a:d7:0e:d4:cc:15:57:fb:e8:98:3c:91:4a:e9:
                    e5:dd:c5:05:f3:a1:96:23:72:d5:fc:56:2d:e0:99:
                    5b:1e:f2:05:81:53:c9:b7:b2:ee:2c:f9:f5:42:f3:
                    d2:05:61:2f:56:5d:f9:92:c7:de:ac:75:a2:0d:be:
                    25:f0:00:8b:fe:cc:d0:a1:31:4c:57:20:16:30:2f:
                    f9:0f:34:ff:bd:dc:67:b6:7d:54:57:9f:9a:dd:15:
                    0b:ff:2d:d4:03:92:61:f7:3a:b7:a4:d2:03:cf:c5:
                    5c:b3:6c:a1:f5:a7:ae:67:dd:98:36:9f:c3:9b:75:
                    84:e4:5b:75:63:2b:d9:73:f1:50:71:95:95:5e:5d:
                    53:fb:a1:0c:75:54:63:a9:fe:9a:29:06:32:66:08:
                    61:40:27:75:5c:9b:05:20:96:7f:69:71:27:e1:de:
                    5a:49:1d:55:d0:65:89:bf:eb:c3:6c:e4:96:81:c1:
                    76:e9:e4:57:fc:66:ba:25:ce:1c:bd:e1:dc:fb:1f:
                    0a:22:5e:e7:7e:14:e1:08:e4:cc:9b:b7:0c:cd:b9:
                    26:6d:70:b4:5a:da:54:1f:24:09:b3:19:06:28:60:
                    bb:d3:d2:08:79:ab:1e:e6:04:08:9a:ca:74:14:13:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:FE:AA:05:04:D8:B1:5F:F7:89:BE:C1:50:35:67:04:59:01:6D
            X509v3 Authority Key Identifier:
                keyid:A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232302e302f32342d3234203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:7c:63:bb:70:a9:d1:42:fc:4c:1b:65:c3:11:bd:c9:1c:
         00:91:a2:f0:92:e8:69:8d:48:64:7b:c4:ee:eb:e0:21:d7:2b:
         b2:8f:92:28:cd:3d:be:cc:8b:6d:12:e6:97:89:5d:b0:d3:2a:
         60:f7:3c:02:e9:5c:47:fd:6f:a5:3a:f9:c2:4d:6b:4e:46:d0:
         c0:d9:21:01:21:c5:5e:c4:ed:0c:09:0f:c4:16:5c:8a:12:a5:
         61:a7:0b:b7:b1:fc:7d:87:e5:b4:9c:52:5a:e2:10:1c:ff:1f:
         33:c8:c0:4f:3b:b1:43:38:4e:1d:22:c4:ef:fa:61:95:62:62:
         58:9d:77:58:8f:78:8f:03:c2:73:0d:79:34:a6:5c:82:e6:40:
         8a:09:c3:e6:2b:64:4c:e1:9d:81:95:1b:be:31:9d:63:65:40:
         48:04:55:5a:24:96:ce:55:c3:b1:29:00:0d:ed:ac:05:72:f2:
         be:32:73:74:f5:c5:c1:78:ba:b5:ce:06:4e:5f:eb:00:7f:b6:
         fa:17:d6:7b:0e:b6:88:f2:e5:58:23:ca:62:e8:60:4f:5b:22:
         e3:80:49:e9:43:b0:57:c7:58:b2:7a:c7:ab:09:6b:6b:5a:64:
         43:38:c2:06:a0:ee:af:b1:6c:53:e0:02:35:de:d0:08:bf:c0:
         dc:c1:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:34 2024 by rpki-client on console-fra.rpki-client.org