Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa
File:                     3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          7/ZJnosirgt5FwsfFwCqPh3xJc/Yfw7umqJfE0QTkTI=
Subject key identifier:   91:80:D5:E4:2C:8C:78:4B:18:FA:2F:DB:76:AC:0A:F6:72:8D:04:4C
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       3E81A33D0EA47FB98E45CEF394A8343A73BD0A6A
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa
Signing time:             Mon 16 Sep 2024 08:30:26 +0000
ROA not before:           Mon 16 Sep 2024 08:25:26 +0000
ROA not after:            Mon 15 Sep 2025 08:30:26 +0000
asID:                     262293
IP address blocks:        143.202.240.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:81:a3:3d:0e:a4:7f:b9:8e:45:ce:f3:94:a8:34:3a:73:bd:0a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Sep 16 08:25:26 2024 GMT
            Not After : Sep 15 08:30:26 2025 GMT
        Subject: CN=9180D5E42C8C784B18FA2FDB76AC0AF6728D044C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:c2:a7:74:9a:46:93:d4:6d:24:8d:91:57:
                    57:10:ef:fb:40:c2:31:ba:39:5e:7e:15:af:d4:ff:
                    86:ec:55:83:57:93:93:02:b7:7c:62:f5:a9:91:91:
                    bf:2e:3a:56:eb:3a:b5:8e:f8:4f:7d:e4:39:40:f0:
                    54:6a:e8:c7:43:ab:a3:96:2d:1c:56:6c:16:d2:8b:
                    6c:0e:39:a3:7e:16:44:55:15:a0:7f:54:4a:37:a1:
                    d7:ae:68:17:4f:0f:d9:10:2b:2d:c9:f5:05:b6:b9:
                    5c:f8:a5:2a:ad:f4:e7:0f:f0:f3:ad:04:a7:7e:9f:
                    f6:4f:fc:cf:19:0d:db:3a:fb:f6:92:a5:06:9a:ea:
                    a7:98:ba:50:d8:24:28:41:77:8b:ca:bf:a1:45:e6:
                    07:8f:62:7c:8c:ea:fb:22:bd:30:7b:94:7c:48:95:
                    c8:3c:28:86:6e:3f:cd:b3:70:03:4e:88:85:73:2f:
                    4e:24:53:a2:83:e8:20:17:ce:30:f1:b8:4c:8c:8c:
                    26:6d:42:00:dd:2c:42:9b:e6:58:33:65:44:8e:69:
                    80:2b:09:29:db:3a:e5:8d:e3:2e:0c:ca:94:8b:a2:
                    e0:8b:8f:e9:7e:27:38:2a:67:08:c9:bf:30:57:95:
                    1f:fb:1b:9a:82:9e:5c:67:52:60:d2:fb:dc:90:25:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:D5:E4:2C:8C:78:4B:18:FA:2F:DB:76:AC:0A:F6:72:8D:04:4C
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:e8:8f:3c:26:f8:08:31:42:6c:32:4c:3e:3d:ce:46:f9:
         3c:b1:35:b4:cd:ff:c3:ce:c4:a8:2d:a7:83:ae:0a:a7:e0:71:
         81:e1:54:10:9c:91:dd:12:49:b9:9c:ea:c4:fd:08:a2:d8:48:
         72:31:74:de:98:b4:2f:de:e7:54:65:95:30:b8:85:8f:de:9d:
         92:2e:48:21:c8:cc:94:bc:5b:e0:50:a9:a6:a2:90:43:83:8b:
         43:40:36:0a:db:a0:00:6c:9a:59:ea:e2:94:0d:4c:14:78:37:
         7a:ea:ee:88:b2:88:d2:b6:f4:12:f9:a1:3f:e0:72:08:e1:a8:
         fe:70:f0:d2:fe:7d:8c:02:66:ad:6f:fc:2b:9e:37:b8:a9:af:
         67:86:4c:31:57:5e:40:9c:44:f4:c3:70:dc:4e:63:b5:51:56:
         30:48:ec:03:7b:e6:41:54:6b:f3:74:a4:6f:6d:f0:b8:18:eb:
         6c:fc:31:c6:d2:3b:38:21:1b:e6:4e:3c:78:89:02:f5:12:f4:
         15:59:d0:23:59:38:89:c6:b8:8a:b7:58:08:41:8f:05:cb:b8:
         46:5c:c1:48:4d:ba:2f:0b:e3:e7:5e:3d:ff:65:b1:b8:a6:fc:
         8c:27:0c:e7:7d:7d:fa:38:0e:5d:e6:cd:21:ea:9b:74:0e:f8:
         b6:83:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 01:01:23 2024 by rpki-client on console-fra.rpki-client.org