Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/3137302e3234342e3232342e302f32322d3234203d3e20323636353130.roa
File:                     3137302e3234342e3232342e302f32322d3234203d3e20323636353130.roa (raw, json)
Hash identifier:          kTDgHb6LVsj1U6X9MdLKFCSVu/jvEzmZpLDcwG9ue1I=
Subject key identifier:   0F:27:AB:FF:DA:2F:4F:15:76:2D:FF:22:7F:02:22:F4:D7:2E:8B:62
Certificate issuer:       /CN=97474013CA486CF79D2DDD137F716DFF7FAC995B
Certificate serial:       7FF5FD563F1D064FF94490F4042911B975F8DB61
Authority key identifier: 97:47:40:13:CA:48:6C:F7:9D:2D:DD:13:7F:71:6D:FF:7F:AC:99:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/3137302e3234342e3232342e302f32322d3234203d3e20323636353130.roa
Signing time:             Thu 04 Apr 2024 03:01:20 +0000
ROA not before:           Thu 04 Apr 2024 02:56:20 +0000
ROA not after:            Thu 03 Apr 2025 03:01:20 +0000
asID:                     266510
IP address blocks:        170.244.224.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f5:fd:56:3f:1d:06:4f:f9:44:90:f4:04:29:11:b9:75:f8:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97474013CA486CF79D2DDD137F716DFF7FAC995B
        Validity
            Not Before: Apr  4 02:56:20 2024 GMT
            Not After : Apr  3 03:01:20 2025 GMT
        Subject: CN=0F27ABFFDA2F4F15762DFF227F0222F4D72E8B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:fa:5f:b5:5e:b1:3f:f9:c6:cd:0b:75:41:
                    4f:cb:42:58:fd:a3:4f:2a:9b:bd:a7:dd:ab:5b:18:
                    16:31:32:f3:9b:d9:93:cb:a4:92:60:1a:ed:a5:a6:
                    2a:df:2e:e8:f4:5f:0a:2d:25:3b:b6:24:f5:fc:6c:
                    96:3f:2a:ff:cc:f6:41:01:3c:a4:ee:61:6e:38:e0:
                    8a:67:01:d9:bd:2e:8a:60:a8:74:b0:3b:69:d4:51:
                    c0:12:f3:4f:36:45:78:9f:8c:d6:8d:4a:c2:b7:01:
                    93:bb:6f:fd:26:13:3b:ae:7f:dc:a6:94:9c:37:37:
                    a7:16:93:aa:2a:50:d2:b9:9c:94:d3:ea:e3:4a:53:
                    b8:9a:be:ea:31:d6:9a:82:d1:f0:4a:eb:f1:7a:fc:
                    f8:83:d6:32:a7:d7:3c:0a:88:5d:d6:bb:1e:85:6e:
                    c0:33:63:e3:ea:e3:30:fe:35:aa:10:78:f7:b2:d4:
                    0b:7c:21:11:9c:00:b4:89:6b:72:2a:2a:45:d0:76:
                    d2:65:de:20:43:bb:ef:70:a7:48:41:75:4b:5c:10:
                    16:f4:26:61:09:28:9a:f2:d9:22:fb:3a:bf:b9:fa:
                    23:6a:3a:3b:5e:64:24:ed:0d:5f:cc:80:33:59:27:
                    c9:6a:97:c7:b0:29:54:d7:c7:b8:34:9e:cb:72:59:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:27:AB:FF:DA:2F:4F:15:76:2D:FF:22:7F:02:22:F4:D7:2E:8B:62
            X509v3 Authority Key Identifier:
                keyid:97:47:40:13:CA:48:6C:F7:9D:2D:DD:13:7F:71:6D:FF:7F:AC:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97474013CA486CF79D2DDD137F716DFF7FAC995B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYN45762RyUJyrXfJ37vg2fh8kUJJAEGuqsx416udTBv/1/3137302e3234342e3232342e302f32322d3234203d3e20323636353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:97:7c:a7:27:1c:ad:33:a5:04:03:b5:d9:e4:d3:d6:26:
         f0:39:dc:d6:1a:e5:5a:e5:2d:5b:51:25:1a:89:9b:33:79:d3:
         8e:90:c1:4f:25:e0:1a:af:2a:1b:ce:30:1c:96:f6:be:16:f3:
         63:45:84:fe:a8:b9:71:90:af:0f:af:e4:74:e4:74:82:ad:5a:
         13:4a:da:c4:79:3e:7b:c9:a4:fb:b9:52:cf:4b:85:16:49:4d:
         36:0b:8d:9d:7e:23:4e:ef:d9:5c:14:b2:2b:87:05:6e:a2:45:
         8e:fd:4e:2f:37:2b:ad:49:f7:83:95:b2:7e:cd:8d:ff:e7:a4:
         d8:67:cc:c7:9b:b5:20:69:90:df:84:3b:46:cd:87:c5:02:c9:
         28:a5:8d:9b:2d:64:98:10:c1:bd:77:12:7b:34:a9:e8:84:cd:
         fb:eb:37:0a:9f:15:a6:34:f1:39:8c:ea:bf:74:13:ad:4b:6d:
         9d:c6:64:6a:48:21:e7:ac:f1:72:ce:c8:86:09:7d:b8:22:20:
         1c:4c:44:4e:95:0a:da:3f:8c:7b:63:bd:b1:d7:f3:0a:50:74:
         40:2b:d6:46:bf:49:4d:a3:17:87:0d:9a:b2:33:e3:88:c3:8a:
         ba:ed:08:43:a3:9f:41:8b:14:31:d2:f7:1d:37:a1:b0:76:53:
         e2:35:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org