Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          T1rlC2bFlLjrhbCjsweO8k5C1X8aLiLyQsss3WELhIA=
Subject key identifier:   40:2C:B5:BE:FA:3A:26:75:FF:E8:6F:A8:9C:95:18:EC:79:F6:0F:4A
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       6E79AC432A57F7342594F09FB36E92EBA1941114
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:38 +0000
ROA not before:           Tue 05 Nov 2024 14:42:38 +0000
ROA not after:            Tue 04 Nov 2025 14:47:38 +0000
asID:                     266022
IP address blocks:        170.245.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:79:ac:43:2a:57:f7:34:25:94:f0:9f:b3:6e:92:eb:a1:94:11:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:38 2024 GMT
            Not After : Nov  4 14:47:38 2025 GMT
        Subject: CN=402CB5BEFA3A2675FFE86FA89C9518EC79F60F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:fb:34:e4:7b:46:80:e4:ce:32:59:ff:0f:
                    ed:82:47:c6:f3:0b:a0:13:e7:2d:17:49:e3:cf:6a:
                    3e:7d:3e:8e:c3:0e:d0:d9:17:6c:42:49:5f:5d:de:
                    5b:3b:c4:1a:68:ed:51:66:a0:44:88:05:25:c4:3f:
                    08:43:e7:09:e0:bd:cf:72:22:36:7b:0e:e7:f5:3a:
                    25:4f:17:62:a3:24:f0:fc:ec:74:01:b6:00:b1:d8:
                    06:ad:62:70:6f:d8:e7:50:34:97:f3:06:c6:ca:8b:
                    9b:bd:2f:62:dd:51:44:79:42:8c:37:60:18:35:95:
                    fe:d7:c3:df:dd:0e:95:34:a4:7a:20:e4:82:8a:bf:
                    51:94:42:ce:dd:a2:f2:5e:f3:4a:04:95:a7:b8:98:
                    cf:f9:ab:2b:ce:a3:f3:72:c4:70:59:10:f7:22:11:
                    0c:c9:8c:5c:6d:ae:ea:df:15:b3:ba:27:e0:b4:34:
                    7b:42:97:89:7d:51:a6:d9:e7:a2:5b:5e:c0:cf:2e:
                    31:4b:d3:30:38:b7:de:c8:d3:f1:19:34:8d:9c:df:
                    21:04:ad:e5:fd:9e:dd:b1:b6:97:48:03:02:9b:d5:
                    15:46:99:d8:c6:0e:bb:c4:bb:e3:68:e8:9e:82:ec:
                    e8:2a:21:88:f6:45:f8:6a:43:cb:d8:31:9c:d2:c0:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2C:B5:BE:FA:3A:26:75:FF:E8:6F:A8:9C:95:18:EC:79:F6:0F:4A
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132342e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:20:a7:fa:b6:24:7d:14:86:1f:a7:98:b2:fb:5e:0c:db:75:
         c0:a4:5b:c4:dd:5b:96:82:ff:2e:8a:35:ca:19:f3:3d:d6:5d:
         b6:a0:5e:0d:96:3e:a1:bc:91:21:c4:40:e7:c6:26:82:1e:a1:
         64:36:78:cc:44:29:3f:cb:4c:70:74:7c:32:6d:99:8f:20:c9:
         b9:7d:c3:94:e9:0c:ad:c0:d6:16:8c:53:8a:8e:7a:c7:97:f0:
         7f:c3:71:63:a1:05:53:be:59:e0:d3:e4:56:b6:6d:8b:de:59:
         74:88:3a:ff:4d:37:78:42:3f:7e:e2:61:fe:07:ea:f9:e6:34:
         83:0d:6d:d9:e5:06:95:84:12:86:6b:8b:6b:b5:9f:25:2c:9e:
         30:94:54:7a:b6:64:34:01:32:0f:ad:74:73:a5:9a:5f:c1:87:
         16:db:7c:02:7b:59:8f:e8:45:8b:e5:86:09:fd:31:84:52:aa:
         4b:0b:96:5c:7b:63:f3:dc:52:50:1c:42:65:05:3c:f8:0a:b7:
         04:23:fe:bd:90:01:fa:73:44:1f:1f:97:65:78:b0:23:16:3c:
         7f:8e:97:ad:db:83:ae:ab:78:c6:5b:55:31:96:55:b8:13:b3:
         b2:31:01:09:5f:7f:76:62:e7:7c:a9:87:8b:6a:e8:0b:15:80:
         f8:5d:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:08 2024 by rpki-client on console-fra.rpki-client.org