Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32342d3234203d3e20323636303231.roa
File:                     3137302e3234352e33362e302f32342d3234203d3e20323636303231.roa (raw, json)
Hash identifier:          wH1v85nLgYYpH8VQnsAszEwCgXFyv7ZE06LH+F/JGSw=
Subject key identifier:   2C:A9:51:86:A3:AD:FB:F9:CE:5E:F0:CC:6B:2B:A7:36:F5:F0:8F:4E
Certificate issuer:       /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial:       7096D4C106BE3161A66606E14EF117B1A1F8880F
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32342d3234203d3e20323636303231.roa
Signing time:             Wed 24 Apr 2024 16:08:34 +0000
ROA not before:           Wed 24 Apr 2024 16:03:34 +0000
ROA not after:            Wed 23 Apr 2025 16:08:34 +0000
asID:                     266021
IP address blocks:        170.245.36.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:96:d4:c1:06:be:31:61:a6:66:06:e1:4e:f1:17:b1:a1:f8:88:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
        Validity
            Not Before: Apr 24 16:03:34 2024 GMT
            Not After : Apr 23 16:08:34 2025 GMT
        Subject: CN=2CA95186A3ADFBF9CE5EF0CC6B2BA736F5F08F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:f6:05:e4:54:b7:70:4b:d5:d3:be:7d:52:
                    6d:82:9d:2e:aa:a6:e8:64:ac:bc:03:2d:d8:0d:b7:
                    2a:7a:7d:1c:01:9c:c4:0c:b9:50:62:ea:a5:5f:28:
                    77:fe:2c:e8:ae:54:02:ea:6e:b2:5d:14:6f:d8:21:
                    b2:32:f5:d1:bb:34:e4:b7:e5:cc:20:8c:9e:f2:ef:
                    92:81:f3:ad:7a:a6:de:65:d3:77:87:f9:b0:4a:69:
                    df:56:30:87:2f:d3:46:c2:5b:34:15:f7:7a:e4:cb:
                    21:31:cd:22:57:32:b7:ae:f3:af:1d:4a:95:d7:0c:
                    a8:40:51:cc:b3:f2:1a:6c:68:f9:1f:5b:22:74:c3:
                    9e:ea:3a:2a:14:6b:c6:8d:38:0a:17:25:88:93:2b:
                    30:98:ce:b8:85:f4:20:be:22:fe:be:25:b5:25:8f:
                    01:3c:ac:86:cc:35:55:80:e4:99:c9:ad:ad:d5:aa:
                    8e:0b:2d:7a:7f:88:a8:ac:7a:e7:5e:da:99:1e:37:
                    a7:37:f0:cf:80:e6:97:ee:fa:60:1e:ec:9f:6f:87:
                    99:26:1c:81:60:59:30:87:98:0b:57:83:21:1f:fa:
                    88:8b:8e:90:e3:0e:bd:16:aa:39:08:30:14:b1:de:
                    3a:5f:30:65:d7:ae:b1:b2:66:2e:d3:89:0d:73:58:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A9:51:86:A3:AD:FB:F9:CE:5E:F0:CC:6B:2B:A7:36:F5:F0:8F:4E
            X509v3 Authority Key Identifier:
                keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33362e302f32342d3234203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:da:1c:2d:56:ec:6c:d4:5d:32:ff:d4:4f:81:2a:c9:83:fd:
         b3:4a:c3:26:a5:2e:a0:29:6d:91:08:d0:b6:38:b8:3b:a2:84:
         96:eb:89:ba:78:6a:06:8a:a7:c8:f7:f7:46:50:35:d0:5c:a2:
         37:0e:5e:e0:9e:f0:62:b9:3f:1c:c4:29:cf:8e:da:9f:f2:99:
         e4:8b:e6:bd:b6:61:72:cd:81:1b:3f:7d:b1:7a:74:7c:13:e4:
         9d:45:4b:54:9f:79:07:80:2f:85:88:17:7c:4a:11:d1:3d:19:
         7a:1a:71:54:b8:b4:92:39:0d:47:c0:78:65:2d:ca:b3:c5:3c:
         60:20:f6:34:18:f9:6b:33:67:06:5c:55:71:08:70:a1:20:e9:
         d7:0a:51:ed:bb:93:14:6b:50:23:cd:8c:18:99:63:87:7b:43:
         88:93:70:d8:58:c8:b9:3a:78:90:7b:3f:97:51:5a:a2:ef:ce:
         17:d9:80:fc:07:c4:ad:e7:0d:f9:4a:01:c4:dc:65:fb:7e:3a:
         92:35:d7:ad:47:e1:0f:22:d4:67:99:c3:07:ca:5d:f6:0c:03:
         67:bf:42:16:d9:d5:31:31:c0:d1:3e:3e:35:44:d0:c1:2e:94:
         0d:83:a5:fb:db:51:ae:93:d1:68:e3:fa:f2:ed:be:5e:6d:2c:
         72:8d:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:40:20 2024 by rpki-client on console-ams.rpki-client.org