Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa
File:                     3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa (raw, json)
Hash identifier:          TIhxAHX5KAhtPAfQNMzKwx/bIi5onGwC1rhk8yYS4Jg=
Subject key identifier:   BE:5B:87:5E:DF:8C:67:01:C0:B8:DB:B2:F2:12:79:9F:FE:55:22:DC
Certificate issuer:       /CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
Certificate serial:       179D442FB78B3B69F046C6E62B199AFB7C692665
Authority key identifier: A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa
Signing time:             Thu 18 Jul 2024 19:26:15 +0000
ROA not before:           Thu 18 Jul 2024 19:21:15 +0000
ROA not after:            Thu 17 Jul 2025 19:26:15 +0000
asID:                     264047
IP address blocks:        143.137.222.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:44:2f:b7:8b:3b:69:f0:46:c6:e6:2b:19:9a:fb:7c:69:26:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5
        Validity
            Not Before: Jul 18 19:21:15 2024 GMT
            Not After : Jul 17 19:26:15 2025 GMT
        Subject: CN=BE5B875EDF8C6701C0B8DBB2F212799FFE5522DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:a5:1b:ee:08:31:5a:1d:60:6f:be:81:4d:
                    d7:92:41:a4:32:35:9d:ef:45:74:f9:1d:ca:7b:d7:
                    97:22:04:59:4c:27:ab:65:2b:d3:4d:0c:9f:29:61:
                    50:6b:b7:56:d8:eb:56:a0:f0:3e:6f:dd:21:6d:72:
                    bc:f0:6f:a7:3b:51:8f:69:fd:80:83:30:2a:93:9d:
                    67:5b:77:f8:c1:50:01:58:a1:39:45:5b:d6:47:ae:
                    f1:c9:22:68:59:5b:5c:16:71:cb:21:6d:e0:2f:ac:
                    a1:18:44:e7:14:e3:20:46:52:09:e8:4e:e5:57:ad:
                    53:1b:85:27:1c:56:30:7e:76:ea:9a:77:8c:07:eb:
                    16:b7:74:9c:4d:2d:2d:02:63:a2:af:96:96:0b:aa:
                    76:01:0f:22:8f:a3:d0:c8:68:ed:29:58:23:af:f6:
                    97:05:fb:aa:f0:99:6f:4a:47:61:4b:e1:54:5f:21:
                    23:c3:53:88:cd:a3:01:cc:54:98:ad:4c:47:5c:ce:
                    fe:b3:b9:6d:a6:d1:4d:3d:8d:1e:64:80:39:41:02:
                    b1:df:25:24:f2:8e:76:5e:5a:1c:82:55:e5:cd:fe:
                    26:85:55:44:ad:1d:6f:78:b9:7e:1f:c8:68:d7:20:
                    12:a3:91:24:6b:f4:19:d6:af:f5:09:89:d9:68:b1:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:87:5E:DF:8C:67:01:C0:B8:DB:B2:F2:12:79:9F:FE:55:22:DC
            X509v3 Authority Key Identifier:
                keyid:A2:E7:55:56:6B:4B:DF:A0:E7:58:B4:2D:3D:5F:99:A6:F0:75:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E755566B4BDFA0E758B42D3D5F99A6F075A3C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/2/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:11:78:5a:e7:a1:cb:f2:76:51:3a:6d:14:b3:61:74:61:
         9c:36:af:8f:94:36:e5:27:e2:9d:a9:c7:ff:4b:62:74:26:e3:
         13:39:3d:e2:03:4a:0b:48:e9:aa:1d:30:81:14:dd:62:29:ae:
         e8:d7:8a:f4:66:3e:4e:b4:9e:a8:71:91:47:7b:e3:78:ad:b3:
         ff:39:0c:56:bd:90:7e:3e:68:e2:28:1e:14:ae:00:3b:25:99:
         1e:a5:ca:b0:73:ac:c3:2c:5b:76:1c:e4:63:14:73:47:af:74:
         64:80:dd:75:4a:7f:58:0a:68:dd:e9:52:c7:8f:43:49:02:71:
         4e:ab:4e:91:7e:ec:19:3c:f7:ff:47:de:7e:bc:b1:df:e3:71:
         62:43:e8:78:cd:36:a2:c8:41:3b:a9:36:48:90:29:30:9b:a3:
         68:38:a0:08:e6:10:d2:60:40:bc:d9:1a:d3:0f:20:14:fd:4b:
         46:6b:6d:18:f9:74:b9:1f:97:7f:40:64:c8:3a:8b:4f:fe:fe:
         aa:5d:d9:c5:db:b7:f5:2f:09:40:87:5f:ee:41:e3:dd:58:9b:
         d5:e6:1d:1e:dc:80:42:5f:99:49:13:bd:9d:4d:67:64:2a:f4:
         06:5b:1c:2f:6e:66:00:95:81:78:53:6d:4d:aa:71:17:a5:f1:
         d5:c9:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 21:35:34 2024 by rpki-client on console-fra.rpki-client.org