Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32322d3234203d3e20323633383931.roa
File:                     3137302e37382e3136302e302f32322d3234203d3e20323633383931.roa (raw, json)
Hash identifier:          lRVbBfc4XBQp7ihnWB6eoDPO6ZmcHWZcYvC0P5wvxPk=
Subject key identifier:   95:D3:C4:F4:E8:7C:EC:62:1C:75:50:CE:A3:1F:8A:58:F7:25:09:F6
Certificate issuer:       /CN=F2CBC68920860178BF6324607635148F318DE957
Certificate serial:       620B1F0004715B298799ED39A3035D9A1A95F764
Authority key identifier: F2:CB:C6:89:20:86:01:78:BF:63:24:60:76:35:14:8F:31:8D:E9:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CBC68920860178BF6324607635148F318DE957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32322d3234203d3e20323633383931.roa
Signing time:             Wed 11 Sep 2024 18:16:05 +0000
ROA not before:           Wed 11 Sep 2024 18:11:05 +0000
ROA not after:            Wed 10 Sep 2025 18:16:05 +0000
asID:                     263891
IP address blocks:        170.78.160.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0b:1f:00:04:71:5b:29:87:99:ed:39:a3:03:5d:9a:1a:95:f7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CBC68920860178BF6324607635148F318DE957
        Validity
            Not Before: Sep 11 18:11:05 2024 GMT
            Not After : Sep 10 18:16:05 2025 GMT
        Subject: CN=95D3C4F4E87CEC621C7550CEA31F8A58F72509F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:47:10:73:d5:bc:ac:25:b8:42:cc:08:a8:
                    6d:16:1b:21:a0:9b:f5:04:05:c1:f1:da:21:0c:a7:
                    7d:14:65:fc:b2:7d:3c:36:79:e7:ee:05:37:5a:55:
                    a7:12:b6:47:3e:36:c6:d4:4b:ae:16:77:ad:0a:a6:
                    c4:5b:1b:c3:e6:73:24:be:2a:43:ce:38:0c:ef:c9:
                    5f:df:77:76:57:e1:14:4c:92:99:18:9d:0f:32:68:
                    e8:03:00:4c:e6:9e:ae:da:7f:d4:89:95:f2:f1:39:
                    9d:d7:95:34:d1:9e:97:af:5c:22:5a:37:12:d6:03:
                    a9:01:97:13:ba:e6:ff:ad:b6:56:20:c6:da:f9:e6:
                    c8:63:6f:f4:dc:36:d4:af:3e:e4:d6:d4:3c:1f:a6:
                    7e:f2:00:27:5c:fe:1f:42:ae:3a:1b:8f:af:70:c2:
                    fb:5b:55:0a:e6:63:b4:23:5c:55:1d:33:d0:26:88:
                    cf:45:37:ed:b5:82:03:ee:60:55:b7:2b:f4:e5:3d:
                    62:a9:b2:90:0c:4d:4e:c4:33:3e:d5:e3:d5:63:a4:
                    0e:3b:c8:70:1d:d5:9f:07:d4:9c:f9:c3:8e:23:99:
                    48:6d:24:8b:4e:61:bc:00:57:fa:7c:20:0a:2f:48:
                    5b:48:60:7e:42:17:38:80:3e:9c:e3:06:a4:89:15:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:C4:F4:E8:7C:EC:62:1C:75:50:CE:A3:1F:8A:58:F7:25:09:F6
            X509v3 Authority Key Identifier:
                keyid:F2:CB:C6:89:20:86:01:78:BF:63:24:60:76:35:14:8F:31:8D:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/F2CBC68920860178BF6324607635148F318DE957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CBC68920860178BF6324607635148F318DE957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/3137302e37382e3136302e302f32322d3234203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:98:30:5d:0c:a8:35:bf:91:d1:2c:75:74:63:73:4c:56:
         0f:74:0e:10:a7:1f:5b:7c:e0:53:27:25:44:d3:4d:41:e7:be:
         5e:a5:e6:0e:e6:d7:6f:56:ac:df:9c:a2:f8:e2:e5:58:11:1b:
         c1:a5:fc:2b:73:45:23:01:6f:2f:e4:86:53:04:4a:5c:d3:6d:
         7b:b5:83:43:bb:24:44:21:43:ef:81:13:80:64:85:b1:c8:26:
         14:fc:38:1d:13:04:52:16:e1:a4:53:68:19:27:1b:46:12:8a:
         b2:3e:e7:79:05:6b:59:81:68:1a:42:ef:b5:1a:3c:8a:e2:6a:
         17:09:90:b1:a1:8d:c9:a8:f6:bf:f2:68:fd:f6:01:d7:46:f3:
         37:e8:77:43:4d:34:bf:95:68:e2:47:e4:95:85:f9:6d:f1:14:
         ad:60:3e:a8:de:4c:df:9e:46:dc:a5:b7:52:79:9d:3f:25:a0:
         50:61:6d:f1:7f:15:9b:b2:f3:38:66:83:6d:4d:4a:44:a5:41:
         01:09:39:fc:fe:39:04:50:c5:49:65:d4:88:90:d4:98:94:d7:
         ae:bd:96:cc:11:41:c5:7f:43:e8:03:39:ea:33:16:ea:fa:d6:
         98:2b:92:4b:f0:f5:62:d2:08:c1:5a:92:29:0d:92:26:1a:50:
         c3:cc:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 15:01:09 2024 by rpki-client on console-ams.rpki-client.org