Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa (raw, json)
Hash identifier:          S+5oin2JkBVNWmZnNKpEqciPCbs6GQ+HxboGduQ7sW0=
Subject key identifier:   3B:65:84:EE:2F:1E:6A:CE:2E:AD:7E:72:6C:9D:81:AF:1F:A6:8A:E0
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       62E876048FDBB5D04308EAF2D4B5A98C9A15418E
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:37 +0000
ROA not before:           Tue 05 Nov 2024 14:42:37 +0000
ROA not after:            Tue 04 Nov 2025 14:47:37 +0000
asID:                     266022
IP address blocks:        170.245.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e8:76:04:8f:db:b5:d0:43:08:ea:f2:d4:b5:a9:8c:9a:15:41:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:37 2024 GMT
            Not After : Nov  4 14:47:37 2025 GMT
        Subject: CN=3B6584EE2F1E6ACE2EAD7E726C9D81AF1FA68AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:50:54:c1:a5:8e:94:9a:dc:f2:14:07:28:
                    ab:f7:fe:6a:4f:b4:9e:c9:ea:cb:9f:dd:c4:30:0c:
                    ef:27:23:82:23:67:5b:49:75:cb:22:d8:44:fa:6d:
                    74:ed:47:a5:24:32:e4:cb:e0:f1:4b:6e:71:bf:d2:
                    ec:8a:2e:20:16:3f:b3:90:8c:24:34:c2:61:77:4e:
                    23:d0:3c:47:91:47:e2:cb:10:d0:1a:05:d2:03:46:
                    1c:a2:28:5c:5b:b7:aa:07:f7:ba:9f:c1:a8:3e:8c:
                    86:29:79:2c:85:d8:04:08:33:7b:f0:61:5d:f5:a3:
                    1a:4a:2b:cb:fd:93:45:74:83:62:34:2a:5d:e7:a4:
                    5e:36:08:e0:54:c7:8f:58:b8:06:76:62:09:b5:81:
                    34:9d:35:ce:ec:88:9f:76:a2:da:35:26:35:72:96:
                    65:e2:f3:2c:94:70:ed:48:f6:7c:a3:8f:7c:6a:17:
                    b0:d2:96:d5:2b:8b:ce:41:d5:9a:3a:80:47:07:b6:
                    8c:6a:b0:78:f2:3c:1d:92:81:cd:b0:84:25:1b:ae:
                    10:9a:a2:5d:02:7f:cb:99:31:5b:15:a2:42:1b:3c:
                    92:f1:89:97:d4:02:34:10:cb:21:c6:fb:3e:c1:ff:
                    21:dd:1d:91:ff:f8:34:6f:1f:7e:fe:1e:c3:51:ae:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:65:84:EE:2F:1E:6A:CE:2E:AD:7E:72:6C:9D:81:AF:1F:A6:8A:E0
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32322d3232203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:81:6e:98:2a:7a:0a:c9:cd:8c:bc:9c:33:fa:cc:37:e3:b4:
         f1:b7:41:50:45:bc:e9:8c:ea:cf:b4:9e:a8:d2:98:b5:49:9e:
         66:d4:87:74:42:73:73:57:6c:97:7c:55:54:0d:28:b9:54:b1:
         0d:91:ef:01:a9:98:08:10:17:c1:97:05:ab:9d:a2:47:b7:7c:
         6b:81:1c:98:d9:47:9c:48:0b:b9:17:75:eb:78:23:8d:9f:ef:
         19:a4:f0:a6:a2:46:8b:8d:99:e2:cf:e1:aa:11:5e:09:a8:54:
         01:62:b3:50:82:94:80:1c:7e:71:a4:42:79:ac:dd:30:5c:35:
         d4:85:f6:cd:98:57:71:95:4c:90:bc:86:d6:94:c6:be:5b:e1:
         f2:da:f3:7b:ef:5a:73:50:07:d7:af:e1:9c:95:f9:6a:76:23:
         fe:74:d5:7a:c9:be:c0:9b:83:f5:8d:a5:72:aa:63:9d:d3:ae:
         c8:b5:0a:3e:bd:32:f9:34:24:27:57:09:1d:23:c3:c9:0a:3e:
         e1:f8:3a:15:d6:e9:d9:ec:92:35:f8:36:9b:1f:e0:fb:5b:21:
         65:25:64:23:a3:91:6f:d3:e0:dd:e0:3e:fc:68:19:e9:2c:1b:
         bd:3d:2a:2d:4c:fc:01:e5:51:ff:2f:f8:f2:19:8a:e6:bc:d1:
         8e:db:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:08 2024 by rpki-client on console-fra.rpki-client.org