Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa (raw, json)
Hash identifier:          aegwrQKUwDkUrDnH40tkM//BzRCqhxgq1K2Z37pZKUk=
Subject key identifier:   E4:BA:DE:C2:FC:63:B0:6A:3C:F1:15:64:DF:C8:FF:6A:12:A0:00:C0
Certificate issuer:       /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial:       075EC436F4669F415D4DEFEFA630E609F2C180C4
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa
Signing time:             Wed 24 Apr 2024 16:08:34 +0000
ROA not before:           Wed 24 Apr 2024 16:03:34 +0000
ROA not after:            Wed 23 Apr 2025 16:08:34 +0000
asID:                     266021
IP address blocks:        170.245.36.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5e:c4:36:f4:66:9f:41:5d:4d:ef:ef:a6:30:e6:09:f2:c1:80:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
        Validity
            Not Before: Apr 24 16:03:34 2024 GMT
            Not After : Apr 23 16:08:34 2025 GMT
        Subject: CN=E4BADEC2FC63B06A3CF11564DFC8FF6A12A000C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:28:bc:71:94:2a:d1:0a:41:3b:27:32:b8:
                    1d:4c:e1:6c:ae:8c:9a:8f:0c:c6:f5:d0:dc:8d:2c:
                    de:48:7c:e4:51:67:b0:7e:8e:31:d8:2e:72:31:6e:
                    94:e4:ad:dd:5f:7c:1e:35:bd:ef:bb:9f:8d:7d:5b:
                    48:6c:2a:ce:47:b6:af:e3:e3:de:49:ec:30:93:56:
                    15:56:10:7c:a2:6f:78:8f:b9:3f:c2:41:38:06:72:
                    f2:a5:dc:56:b2:aa:93:d3:96:82:f9:98:01:53:59:
                    4a:e3:85:f4:c1:3d:b0:c1:77:76:e9:2d:21:b1:1b:
                    c3:12:3c:91:2c:9e:d5:eb:4e:63:0d:0e:37:84:54:
                    30:96:b6:b5:0f:01:d9:98:fc:b4:69:67:5a:fe:2b:
                    06:8f:3e:c6:4b:c6:af:45:ac:96:83:49:8b:b4:61:
                    1d:45:75:01:57:5a:c9:dd:15:ca:88:0a:62:ab:2e:
                    3d:7d:e9:20:6d:18:c2:4d:9c:94:46:ac:c8:be:82:
                    bb:5a:15:62:a2:1a:c0:fe:10:e9:dd:ef:76:1c:c7:
                    d4:40:38:53:75:16:5e:7b:72:34:c6:34:88:12:9a:
                    bb:12:fc:9b:ec:8d:cc:9c:9f:40:77:24:dc:6b:b6:
                    a5:3c:74:f0:38:39:29:27:56:f6:19:3b:8c:91:4f:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BA:DE:C2:FC:63:B0:6A:3C:F1:15:64:DF:C8:FF:6A:12:A0:00:C0
            X509v3 Authority Key Identifier:
                keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32322d3232203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:10:09:41:b7:50:74:27:b2:aa:65:6d:d0:8b:b8:0c:80:62:
         9a:82:da:44:c1:6f:88:bb:0e:9a:c0:30:c8:1e:45:54:e4:27:
         08:73:7a:7b:c5:5b:18:83:25:d8:52:ad:d1:2c:19:b0:9a:b1:
         03:70:ad:10:eb:d3:87:b7:aa:14:7f:51:81:db:0b:af:b9:70:
         2d:f0:b1:15:ca:80:c8:15:28:56:31:64:90:9e:c3:73:f7:08:
         a9:1e:f0:ce:2f:48:db:0f:5b:af:98:b4:f7:d3:c0:af:b5:fd:
         0e:ab:c5:87:51:fb:4d:74:d9:63:14:e3:6a:3e:f7:e2:70:c3:
         eb:d8:08:7f:4a:4d:06:a6:a8:6d:da:a4:46:14:8c:0e:1f:7b:
         b8:77:f1:68:d9:28:bb:d6:0c:b4:00:40:08:cb:d3:e0:f0:d5:
         b7:4c:69:4f:0b:1a:a9:83:1e:c9:92:71:72:17:49:da:34:3d:
         94:b5:e3:fa:ce:60:82:de:2b:9d:aa:81:e0:97:86:1d:8a:60:
         d1:5a:72:ce:71:bf:df:14:87:28:a4:bb:f4:ec:4f:30:d2:a4:
         ce:a4:a6:2e:ec:e5:57:4d:b4:d4:f8:5a:9c:0c:d1:58:e0:27:
         99:df:4a:a5:fb:f8:6a:9f:2f:4c:eb:fc:44:ea:49:86:64:dc:
         01:98:06:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:40:20 2024 by rpki-client on console-ams.rpki-client.org