Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa (raw, json)
Hash identifier:          CFs3ulI7trjKQn0Y6+QrvUwtRj2lf+lSzIHrzaz2Hvk=
Subject key identifier:   00:CE:DE:95:45:45:8C:F8:CD:0C:0E:54:E5:E3:7F:72:BA:1F:D3:D6
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       7B5282D11FA82C175B0CE3694B98A9C13D0C0446
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:38 +0000
ROA not before:           Tue 05 Nov 2024 14:42:38 +0000
ROA not after:            Tue 04 Nov 2025 14:47:38 +0000
asID:                     266022
IP address blocks:        170.245.124.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:52:82:d1:1f:a8:2c:17:5b:0c:e3:69:4b:98:a9:c1:3d:0c:04:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:38 2024 GMT
            Not After : Nov  4 14:47:38 2025 GMT
        Subject: CN=00CEDE9545458CF8CD0C0E54E5E37F72BA1FD3D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:5d:4c:44:2b:bb:1b:01:10:7f:16:cc:8f:
                    76:0e:a0:ac:73:be:ea:eb:4d:ff:f4:d0:37:d7:d0:
                    5f:c9:eb:14:a9:c4:8c:0e:84:35:92:8a:21:c5:da:
                    5d:9b:15:33:a9:98:77:62:96:e2:36:43:dd:47:5c:
                    e1:e2:05:87:8c:bc:a7:ec:7e:02:c9:ae:00:4a:9b:
                    0a:5b:66:f0:bc:2e:68:cb:fa:e9:f3:c8:f1:cb:c0:
                    c2:91:58:64:8a:6c:81:4c:fd:dd:a3:28:28:39:9a:
                    7e:d5:ed:f6:d3:aa:93:97:70:36:85:21:14:8a:ff:
                    d7:64:47:54:bb:b3:4e:5e:07:d5:38:9d:55:59:71:
                    b6:64:b0:98:2d:66:f7:ec:16:7f:c3:fa:d7:85:3d:
                    17:e5:48:d2:57:d8:85:26:08:4f:e8:d6:f8:c7:e7:
                    7c:86:62:0c:1a:aa:d1:03:66:33:c3:4e:fa:df:9f:
                    3a:18:cb:0a:b4:d8:f6:60:a1:70:be:0b:f5:5f:34:
                    48:c4:cf:87:d5:57:65:8c:8f:ed:3f:d4:94:eb:cd:
                    1e:37:36:62:49:42:43:f8:db:2d:20:c8:3d:c5:07:
                    47:9b:98:f1:fd:84:3f:38:0f:26:1d:dc:1d:05:bc:
                    43:00:3c:1d:4d:ce:f2:8b:42:3b:0f:e4:d7:b6:a4:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:DE:95:45:45:8C:F8:CD:0C:0E:54:E5:E3:7F:72:BA:1F:D3:D6
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32332d3233203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:d3:fd:68:f5:be:73:16:5e:22:80:f1:ee:db:1c:89:eb:
         e2:0c:78:e3:55:48:af:9b:a5:f4:32:f5:a0:6d:87:18:59:4a:
         31:27:ea:90:f3:8c:5d:66:56:0e:2e:3f:02:f8:a6:14:97:fc:
         93:e1:93:74:a6:e1:bd:16:21:c6:87:75:a6:28:f7:3f:00:c8:
         17:31:27:78:9f:cb:d8:65:06:42:53:d2:b7:3f:e8:2e:66:f5:
         8e:76:a4:03:33:3d:6d:bf:b8:99:f6:f3:b2:f6:7a:56:b2:86:
         49:ae:0f:b6:b9:af:8d:bb:f8:d1:6f:c1:ea:45:8a:f7:7c:2b:
         a1:ec:c7:f9:2c:2d:c8:37:95:36:35:7c:a2:31:04:db:f1:89:
         a1:30:e9:68:a1:55:32:c8:7a:df:72:17:b5:01:04:ae:ed:2e:
         90:d4:3c:05:d6:f9:a8:15:d0:be:25:f4:66:c7:6a:37:7c:1c:
         8f:bd:6f:9e:b2:4f:90:c4:c4:72:bd:2f:9d:db:46:74:55:21:
         96:a6:81:9d:2b:1b:f8:9c:54:f5:65:86:f8:fd:ed:e3:94:09:
         ce:7b:f8:75:11:b2:38:e8:e0:28:bf:53:0f:ce:21:5a:00:95:
         23:da:01:45:c9:22:27:90:d2:4b:ed:c0:47:7b:43:8e:56:27:
         d3:b4:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:08 2024 by rpki-client on console-fra.rpki-client.org