Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
File:                     3137302e38312e39322e302f32322d3332203d3e20323636333939.roa (raw, json)
Hash identifier:          eQ34N8FMUT5a2J+6NFoUVpWHiOvfkq8ofs2YOzm0CeA=
Subject key identifier:   CA:25:22:EB:8F:25:33:4B:AF:96:06:8D:3C:0B:A6:C1:79:BA:C2:D3
Certificate issuer:       /CN=A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7
Certificate serial:       6A8D884902D399B19485806F7C62ED9C83C983F1
Authority key identifier: A4:CC:1E:89:E3:27:97:2A:B3:16:12:1D:F9:E8:C6:C9:B5:EF:EE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa
Signing time:             Thu 04 Apr 2024 19:45:12 +0000
ROA not before:           Thu 04 Apr 2024 19:40:12 +0000
ROA not after:            Thu 03 Apr 2025 19:45:12 +0000
asID:                     266399
IP address blocks:        170.81.92.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8d:88:49:02:d3:99:b1:94:85:80:6f:7c:62:ed:9c:83:c9:83:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7
        Validity
            Not Before: Apr  4 19:40:12 2024 GMT
            Not After : Apr  3 19:45:12 2025 GMT
        Subject: CN=CA2522EB8F25334BAF96068D3C0BA6C179BAC2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:eb:45:e1:11:84:9f:bd:63:22:f0:d1:d2:
                    8e:7b:55:50:e1:59:19:c2:8d:44:f1:98:43:0a:c4:
                    6f:43:19:2e:5e:e5:95:e4:c2:e9:66:89:9e:f1:61:
                    c5:9d:61:d2:7d:9d:87:81:43:94:17:40:c8:a3:07:
                    9e:9b:cb:23:d0:7d:d0:d3:e3:bb:6b:d3:36:c9:14:
                    91:ae:4b:e4:c9:4c:9c:1d:a2:e3:5f:53:05:55:74:
                    e6:f9:44:3a:65:3d:d5:18:ac:75:a4:6d:da:2d:8e:
                    8f:67:64:f7:df:c0:11:9b:08:16:2d:e1:a2:60:82:
                    6e:45:b0:d8:e9:62:ae:4f:b1:a8:2d:95:5c:b2:e6:
                    40:13:1b:db:5c:aa:85:53:18:77:c4:7a:78:6b:f4:
                    15:42:ae:2a:79:7d:d9:8e:8f:b0:24:6d:2b:49:94:
                    1e:6c:45:e1:0b:36:89:04:ee:e2:1e:90:1a:db:f9:
                    1b:b4:27:27:54:df:c8:2d:36:0f:1e:c6:db:93:13:
                    bd:1e:2b:7a:29:23:b9:eb:40:f7:0f:22:8b:9d:17:
                    e1:24:34:97:cc:d0:a6:fd:41:9d:61:12:3a:46:b9:
                    04:5d:04:ee:6b:94:02:2f:f8:e3:24:52:77:80:f2:
                    54:ab:79:2f:fe:ea:08:e9:33:69:10:79:de:b7:a2:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:25:22:EB:8F:25:33:4B:AF:96:06:8D:3C:0B:A6:C1:79:BA:C2:D3
            X509v3 Authority Key Identifier:
                keyid:A4:CC:1E:89:E3:27:97:2A:B3:16:12:1D:F9:E8:C6:C9:B5:EF:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4CC1E89E327972AB316121DF9E8C6C9B5EFEEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/1/3137302e38312e39322e302f32322d3332203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:76:80:4a:a6:cd:15:7a:70:39:11:08:8b:4c:fa:d8:72:
         df:fb:74:41:a9:88:71:42:fc:84:f2:0d:a2:15:38:7c:d2:bf:
         f4:76:5d:13:32:30:37:9d:ca:1f:89:54:89:a9:e9:f0:96:d7:
         72:d3:34:a7:3a:14:9c:a5:61:d2:e0:95:33:5e:e9:01:0d:4e:
         c4:dc:c0:ec:6f:c2:a8:65:d8:3f:4f:61:57:85:9f:0c:72:54:
         d1:bf:a9:6c:70:a3:22:e2:37:fa:a4:dd:3f:7e:5a:3f:dc:28:
         9d:84:50:02:85:e4:78:9b:9e:2e:95:5e:30:a7:4f:68:5a:a3:
         6f:8b:13:a9:50:8f:37:5e:a7:28:7f:23:bf:95:a3:c4:ad:57:
         9b:77:bd:6d:68:29:0a:d5:fc:78:ea:9b:b8:72:59:7d:b5:ae:
         9b:af:fa:a7:fc:ab:64:44:3c:b6:d1:7d:dd:ad:98:df:05:eb:
         57:18:8f:cb:b6:68:8b:70:3c:62:66:86:98:d5:47:d8:09:b9:
         2d:d8:23:32:88:9b:7d:74:c9:63:59:9f:aa:e1:7d:3b:61:c3:
         2f:20:dd:eb:e0:3d:70:08:96:03:79:3e:a2:70:74:6e:12:73:
         15:1d:f9:9c:3d:30:3b:a6:8b:fb:3f:3b:81:03:8a:63:82:26:
         45:8d:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 18:44:41 2024 by rpki-client on console-fra.rpki-client.org