Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa
File:                     3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa (raw, json)
Hash identifier:          S0oXV88oGm3N1EZqsWnTdjx649pkjdhsMQOHe7pKv7Y=
Subject key identifier:   8F:5B:50:C3:DA:28:AA:59:77:74:BD:2A:A8:3A:88:1D:C5:B2:A1:C7
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       0A772542A1DAA3B75B359EC77C44F11FDC6FF1F7
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:37 +0000
ROA not before:           Tue 05 Nov 2024 14:42:37 +0000
ROA not after:            Tue 04 Nov 2025 14:47:37 +0000
asID:                     266022
IP address blocks:        170.245.126.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:25:42:a1:da:a3:b7:5b:35:9e:c7:7c:44:f1:1f:dc:6f:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:37 2024 GMT
            Not After : Nov  4 14:47:37 2025 GMT
        Subject: CN=8F5B50C3DA28AA597774BD2AA83A881DC5B2A1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:aa:ba:e2:7a:cf:02:52:de:31:47:fc:b8:
                    fb:a1:45:b9:70:a1:ad:08:11:54:39:7b:27:55:c0:
                    db:8a:5f:bf:a2:5b:3b:3d:7d:1f:3c:83:7c:f8:df:
                    55:38:20:15:37:e6:9f:d2:8f:f0:c7:6d:a4:3d:dd:
                    4b:d8:47:ec:20:3d:c9:56:f4:c2:bd:f1:58:6b:f0:
                    08:73:43:76:55:0c:b2:7d:ef:11:24:01:62:18:fc:
                    fa:e6:40:84:51:e9:3a:b8:2a:a9:7c:89:90:4c:5d:
                    11:9f:ff:fa:4c:af:1e:3d:78:f3:a5:78:e0:ba:29:
                    a3:df:dd:0d:aa:12:b4:8e:ad:a8:b7:2d:75:4a:98:
                    87:85:e6:2e:d9:38:8a:37:b5:8a:69:06:f7:d7:b3:
                    7e:f5:ed:4c:0c:88:c3:74:ea:bc:ed:e6:3f:6b:6d:
                    13:f8:7f:db:86:c1:b2:53:e2:00:ed:26:bf:da:79:
                    fe:84:9e:92:4a:8f:56:91:54:6b:74:ae:8a:1f:f5:
                    cf:e8:53:f0:36:9b:3f:c8:b4:33:43:43:8f:1d:52:
                    d7:e4:6c:e3:ff:9e:2c:04:0a:b8:4e:9e:93:12:09:
                    51:75:33:8c:6d:3e:95:74:72:1f:4b:eb:f1:8e:3d:
                    7d:4a:f0:33:11:eb:4a:b9:52:81:e6:07:c9:b1:b1:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5B:50:C3:DA:28:AA:59:77:74:BD:2A:A8:3A:88:1D:C5:B2:A1:C7
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132362e302f32332d3233203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:80:22:cd:5f:51:00:34:8f:0a:2f:db:3d:dd:54:9b:98:b2:
         30:4a:2a:a5:2c:d3:ac:1c:6a:5a:bb:b5:ae:d0:a8:84:af:ef:
         2e:1d:0f:c0:77:e7:ea:b7:17:2d:07:9d:4e:07:aa:ba:37:aa:
         37:2a:de:45:c4:7e:12:64:3d:79:c8:eb:9a:8d:6d:0e:ef:f1:
         23:68:b8:10:6c:94:18:73:89:0b:bb:46:94:6b:ae:92:1e:0c:
         4e:51:1b:08:d9:17:98:a7:84:eb:f2:f2:63:db:a3:be:d9:4e:
         ae:46:cb:85:e8:5d:85:bc:8b:cc:be:53:df:fd:f0:30:f5:3a:
         f8:9c:ad:2e:26:3b:a7:df:fc:54:ee:e4:21:dd:95:f0:36:b7:
         db:43:b0:d6:56:b6:ce:1e:f8:57:90:30:2a:9f:2d:6e:c1:6d:
         d5:3f:59:d3:58:5c:56:9f:0b:2c:7b:96:6d:93:cb:31:82:8e:
         f1:cd:f5:68:38:24:d2:4c:03:22:ec:4c:27:f4:9d:7f:d7:f2:
         b9:66:79:47:cc:81:30:33:1c:1d:0c:9f:4d:b7:98:14:d2:f1:
         57:6c:eb:67:b9:f8:e1:06:02:4b:55:6a:fa:14:ba:32:a3:00:
         a4:3c:b5:7a:89:d2:92:11:77:76:81:39:ed:bd:5b:ac:9a:2f:
         e3:5c:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:08 2024 by rpki-client on console-fra.rpki-client.org