Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa
File:                     3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa (raw, json)
Hash identifier:          P31m2h/zPph2H1f33A167iJnsTBswCoKAtARUAxX/mg=
Subject key identifier:   B1:14:5C:C3:1C:B6:F4:BE:05:A3:A7:3F:6E:47:A2:C8:D5:C2:35:7B
Certificate issuer:       /CN=ECD3699D71C4161A24BD94F52851A23662D6FC2B
Certificate serial:       1ACA38F3822A36C13366C948C5A8FB4315C90C66
Authority key identifier: EC:D3:69:9D:71:C4:16:1A:24:BD:94:F5:28:51:A2:36:62:D6:FC:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa
Signing time:             Thu 04 Apr 2024 18:11:10 +0000
ROA not before:           Thu 04 Apr 2024 18:06:10 +0000
ROA not after:            Thu 03 Apr 2025 18:11:10 +0000
asID:                     265278
IP address blocks:        170.231.150.0/23 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ca:38:f3:82:2a:36:c1:33:66:c9:48:c5:a8:fb:43:15:c9:0c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECD3699D71C4161A24BD94F52851A23662D6FC2B
        Validity
            Not Before: Apr  4 18:06:10 2024 GMT
            Not After : Apr  3 18:11:10 2025 GMT
        Subject: CN=B1145CC31CB6F4BE05A3A73F6E47A2C8D5C2357B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:af:d5:7c:2e:f8:3e:46:da:f4:c3:7a:e2:
                    d1:a8:65:8d:78:b6:1a:85:38:2d:34:b0:90:5b:98:
                    bd:20:0e:86:64:9e:d3:58:2f:9a:ab:11:75:5d:7b:
                    ac:cf:7e:ea:75:14:05:f6:75:57:b5:51:42:83:b6:
                    bd:d4:ff:e6:7f:be:68:dd:44:e5:f9:87:0c:59:a1:
                    67:8a:07:47:a3:51:d9:16:4e:6f:db:c2:84:8f:49:
                    08:9d:1c:85:75:0f:c9:d6:81:58:9f:72:d8:bd:00:
                    f2:4e:c9:30:d6:62:c6:e0:d4:07:af:bc:93:4d:2c:
                    27:e6:94:f9:c7:d4:80:ff:f2:af:93:32:4d:b4:09:
                    24:71:38:a4:03:41:0a:2c:48:ce:47:ea:6a:13:5f:
                    92:bd:32:73:e0:e1:32:a0:d1:36:6b:5b:13:4c:00:
                    34:32:be:5f:7c:80:6d:97:81:f1:29:80:3b:72:3b:
                    81:e3:ca:1a:16:a7:99:b5:df:84:29:f5:74:1b:e2:
                    fd:c8:0a:16:59:a2:d3:86:e2:a1:6e:33:fa:b1:3d:
                    03:5d:5c:96:ba:65:58:f1:73:23:27:a4:df:9d:a2:
                    09:b4:09:29:5b:99:84:6a:28:41:69:22:4f:77:6e:
                    8f:1a:92:8c:90:81:96:89:7c:04:72:f5:f1:68:f1:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:14:5C:C3:1C:B6:F4:BE:05:A3:A7:3F:6E:47:A2:C8:D5:C2:35:7B
            X509v3 Authority Key Identifier:
                keyid:EC:D3:69:9D:71:C4:16:1A:24:BD:94:F5:28:51:A2:36:62:D6:FC:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECD3699D71C4161A24BD94F52851A23662D6FC2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/1/3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:fe:36:70:59:67:51:ea:de:a8:23:c4:25:17:82:31:ff:
         cc:cd:4b:71:5d:bb:94:0d:0a:70:07:e1:21:db:d7:ea:6f:37:
         ff:0a:4d:74:13:4b:23:ec:fa:54:5e:4c:d9:a0:4f:02:e0:2e:
         fe:85:f1:f8:be:be:af:a9:8b:eb:41:09:d9:7f:17:d0:bd:7f:
         75:a5:de:99:46:4d:8e:eb:dc:1d:e5:c1:e2:73:ac:05:bd:b1:
         fe:8e:1b:3a:d0:b7:f8:4e:53:d8:be:fa:f0:ec:3c:46:d0:ac:
         6b:64:c7:03:fd:30:bf:c0:87:1c:2b:40:4e:77:01:9e:fc:dc:
         d7:6b:a0:dc:8b:3d:ec:f2:81:85:ee:cf:ff:37:0b:ba:5f:a9:
         b0:77:8d:44:69:e1:91:9c:0d:10:be:75:74:fc:f6:5c:de:8e:
         dc:dd:df:fd:0c:f3:23:6f:7b:36:e3:c1:59:aa:29:8a:35:41:
         ed:f1:58:35:ac:85:6b:c6:a8:81:cb:43:8d:90:a8:54:33:2f:
         7c:6b:f1:21:b8:95:55:91:10:1e:35:1f:ae:f9:d3:13:b5:50:
         a4:90:67:0d:cf:b6:ab:79:1d:fc:7c:dd:7f:02:e2:cb:0c:d3:
         7f:5c:ff:23:c9:14:f8:93:83:c3:4d:09:51:dc:bf:c2:7d:50:
         03:2c:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 10:34:30 2024 by rpki-client on console-fra.rpki-client.org