Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa
File:                     3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa (raw, json)
Hash identifier:          gSr/3yWssUUtV87Sfklf/pHxmIgG9C0I/UOphlyQ29o=
Subject key identifier:   48:33:FC:8F:4B:E3:3E:06:4D:D3:6D:12:55:61:9C:FA:6E:C4:C1:45
Certificate issuer:       /CN=ECD3699D71C4161A24BD94F52851A23662D6FC2B
Certificate serial:       01AA5C3D1CDF8F51BEC7E844AEDBE37CC89711ED
Authority key identifier: EC:D3:69:9D:71:C4:16:1A:24:BD:94:F5:28:51:A2:36:62:D6:FC:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa
Signing time:             Thu 04 Apr 2024 18:11:10 +0000
ROA not before:           Thu 04 Apr 2024 18:06:10 +0000
ROA not after:            Thu 03 Apr 2025 18:11:10 +0000
asID:                     265278
IP address blocks:        170.231.149.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:aa:5c:3d:1c:df:8f:51:be:c7:e8:44:ae:db:e3:7c:c8:97:11:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD3699D71C4161A24BD94F52851A23662D6FC2B
        Validity
            Not Before: Apr  4 18:06:10 2024 GMT
            Not After : Apr  3 18:11:10 2025 GMT
        Subject: CN=4833FC8F4BE33E064DD36D1255619CFA6EC4C145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:6d:69:c6:7d:64:b6:e3:f6:bd:97:db:cb:
                    62:d5:67:db:a3:18:5c:b2:21:dc:6a:27:20:30:0c:
                    e2:e5:39:02:50:31:87:4a:8c:78:4e:44:a9:3c:a1:
                    1b:23:03:a5:4d:07:16:a0:0f:7d:f5:e6:08:f3:c4:
                    9f:8e:d8:a7:51:d7:30:d3:f2:45:30:f3:df:44:08:
                    e6:7b:99:dd:7b:51:d3:7a:4d:da:4a:91:bb:73:17:
                    f6:39:09:df:e4:cf:f9:81:90:99:c7:ec:f2:22:f4:
                    49:ca:87:aa:52:b0:f2:09:8b:22:93:33:32:01:c5:
                    6d:62:7a:73:e4:9e:55:2f:4d:36:ef:6a:c7:ae:a1:
                    4c:e6:5d:e0:de:d9:cd:2d:be:e3:1f:6e:c3:16:5c:
                    b6:e1:50:f9:1c:ed:b3:87:eb:b4:38:ef:11:a9:3a:
                    05:2b:66:8c:11:0d:3e:c3:24:4c:cd:af:a7:25:6f:
                    2f:c8:11:e1:a7:dd:be:fa:ef:6e:af:c6:ed:29:12:
                    8c:0f:f2:25:85:86:46:3f:74:83:27:2e:92:57:71:
                    1d:c9:1e:96:8b:10:91:fc:7d:cd:5e:c6:16:d2:9a:
                    c8:da:4b:24:be:c5:60:53:4f:a9:81:2a:8a:fb:b7:
                    4c:23:d4:73:b5:76:20:f9:8d:5d:e3:39:c0:d9:f2:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:33:FC:8F:4B:E3:3E:06:4D:D3:6D:12:55:61:9C:FA:6E:C4:C1:45
            X509v3 Authority Key Identifier:
                keyid:EC:D3:69:9D:71:C4:16:1A:24:BD:94:F5:28:51:A2:36:62:D6:FC:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:45:ff:48:54:9b:32:bc:27:91:58:bd:a1:c8:a7:02:ce:
         bc:e7:4b:54:3b:3d:95:09:42:32:fc:d1:16:c1:89:c4:f9:0b:
         bd:7f:3f:ab:52:1c:61:ea:92:6d:7a:d1:11:33:d8:91:9d:85:
         c4:5c:a2:54:e1:cf:a4:6d:4e:2b:65:62:1f:fc:55:07:7d:b5:
         f0:8a:95:9c:e3:51:c6:35:8b:f3:eb:ef:1b:45:da:89:77:82:
         f0:c8:13:28:91:bb:f1:0a:5b:bf:d2:5b:9b:93:aa:46:e9:52:
         89:f8:b1:d8:b2:72:99:0c:4d:c0:d4:5a:d8:1f:c4:ba:e6:91:
         55:8b:33:38:29:28:b5:f4:14:36:0b:62:b4:05:ac:05:3d:d8:
         fc:83:d5:be:00:4a:84:9d:7b:06:5b:b7:de:74:e4:85:89:24:
         d3:98:98:bd:f3:2c:df:51:b6:21:15:68:5d:fa:74:25:c9:6a:
         72:77:d7:cd:e6:ba:c0:18:81:13:d0:c3:7e:e1:8d:f6:6c:b2:
         30:d0:19:fd:38:9c:35:5f:df:f8:76:7b:06:89:83:ff:7a:e8:
         93:a3:a4:f8:7a:8e:4b:a6:05:3b:f4:99:f8:7c:54:36:70:60:
         3b:3a:b4:0d:20:d3:7e:0d:f4:0d:5b:bf:30:4d:0f:3b:27:d9:
         d2:00:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 10:34:30 2024 by rpki-client on console-fra.rpki-client.org