Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/3134332e3133372e3137322e302f32322d3234203d3e20323730393438.roa
File:                     3134332e3133372e3137322e302f32322d3234203d3e20323730393438.roa (raw, json)
Hash identifier:          x2ffExgscmOb9cl0qR6EsprcVS2MEyTfve0OO590kGM=
Subject key identifier:   4B:91:84:C4:4F:A2:A8:F9:EC:80:C4:FD:3F:C3:35:B1:3B:B6:BD:05
Certificate issuer:       /CN=AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635
Certificate serial:       13C37D20C96820D933B14DD8A1277402A4000A7C
Authority key identifier: AB:6F:23:D7:42:FE:BD:4C:1A:AE:1C:F4:4F:37:79:5F:EA:52:A6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/3134332e3133372e3137322e302f32322d3234203d3e20323730393438.roa
Signing time:             Mon 22 Apr 2024 17:16:36 +0000
ROA not before:           Mon 22 Apr 2024 17:11:36 +0000
ROA not after:            Mon 21 Apr 2025 17:16:36 +0000
asID:                     270948
IP address blocks:        143.137.172.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c3:7d:20:c9:68:20:d9:33:b1:4d:d8:a1:27:74:02:a4:00:0a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635
        Validity
            Not Before: Apr 22 17:11:36 2024 GMT
            Not After : Apr 21 17:16:36 2025 GMT
        Subject: CN=4B9184C44FA2A8F9EC80C4FD3FC335B13BB6BD05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:75:c3:1c:46:93:9e:24:11:33:6f:4c:c6:
                    12:9c:38:64:f7:5f:58:5f:83:69:e7:95:a1:fa:95:
                    dc:c3:3f:5e:cf:77:3d:e8:3b:4a:6e:6d:5b:b9:49:
                    47:ea:32:7f:de:b9:3f:95:82:91:c0:11:88:e5:5e:
                    ab:6b:40:8c:5d:ac:f2:21:95:3c:f1:78:84:59:c2:
                    8c:96:aa:ca:37:bb:36:10:bd:6e:b4:43:40:26:94:
                    03:ef:a6:4c:93:9e:1e:1f:9f:dc:b8:cf:b4:2f:35:
                    5e:cc:80:58:d5:c5:75:4a:42:e4:37:ca:14:51:b9:
                    6d:b4:50:d3:03:d4:93:57:d8:d9:16:97:0d:b1:77:
                    6c:f6:6e:50:9d:c2:c6:eb:15:e8:9e:27:07:8a:ea:
                    1e:9c:13:ea:e6:29:87:53:bb:ca:03:80:2b:d2:82:
                    ed:45:22:4c:39:bf:01:cf:19:f0:bd:7e:fa:bb:a4:
                    f2:2d:94:e1:a8:3b:fe:70:ed:83:74:12:ec:74:56:
                    68:d8:73:5e:d5:cb:64:8c:15:d2:4d:60:66:55:0d:
                    f0:50:d5:91:03:96:41:4b:6b:a4:26:3c:89:30:d4:
                    9c:30:f5:6e:a0:ce:be:00:ea:88:d1:d5:63:3e:fb:
                    bc:7f:84:5a:4f:af:5d:fe:2f:3c:fa:68:66:75:c7:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:84:C4:4F:A2:A8:F9:EC:80:C4:FD:3F:C3:35:B1:3B:B6:BD:05
            X509v3 Authority Key Identifier:
                keyid:AB:6F:23:D7:42:FE:BD:4C:1A:AE:1C:F4:4F:37:79:5F:EA:52:A6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB6F23D742FEBD4C1AAE1CF44F37795FEA52A635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/3134332e3133372e3137322e302f32322d3234203d3e20323730393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:f6:8d:a8:ce:2c:4c:65:09:0b:57:ff:ce:e3:01:51:8e:
         1c:64:5f:67:0b:2b:57:d8:da:ac:94:53:0d:85:24:09:da:88:
         4d:65:92:ac:5e:8b:ab:d3:01:37:a9:50:41:b5:b2:53:35:91:
         0f:6f:36:8d:31:a2:bb:d6:a3:e9:18:05:c6:af:35:a6:73:70:
         9d:5b:8d:af:2c:99:b8:aa:a8:1b:40:82:bf:e5:30:35:f1:0b:
         f1:9c:37:d0:ae:4f:47:ea:05:2e:ed:7c:3f:64:60:6f:d0:71:
         27:ca:d1:1f:dd:42:6b:7a:79:0d:84:a5:e4:59:61:da:75:db:
         da:59:cc:d8:b9:b1:04:54:0a:93:83:dc:e8:bf:b5:77:ce:5f:
         07:dc:16:ec:91:f4:57:25:3e:36:65:8f:d2:8c:af:5e:55:76:
         3b:41:83:85:c3:5a:ad:bc:17:23:49:fe:45:94:d2:90:f7:50:
         7d:29:8f:28:a2:33:fc:c2:5e:78:51:25:0c:2d:f7:32:ca:2a:
         fb:8b:c5:05:9b:49:40:13:cb:d7:f5:cc:d5:26:9b:8c:28:e6:
         5d:9b:97:2e:a6:d4:dd:01:5b:dc:e5:91:3c:41:9e:23:cb:ae:
         50:24:c0:c2:cb:51:07:a7:85:5f:2e:0d:00:e9:a2:16:33:9b:
         97:be:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 11:23:02 2024 by rpki-client on console-fra.rpki-client.org