Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa
File:                     3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa (raw, json)
Hash identifier:          ErgtO2C0KUGkUwPr1WOAh13ucisOP1mVyJZBoHBJa4c=
Subject key identifier:   BA:CD:BE:E6:94:F6:F1:E5:5C:30:70:28:5F:AD:ED:28:AB:5E:D5:6E
Certificate issuer:       /CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
Certificate serial:       2AF317303416A26070DAF643D99E0AFBD3A7F6E1
Authority key identifier: 63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa
Signing time:             Tue 05 Nov 2024 14:47:38 +0000
ROA not before:           Tue 05 Nov 2024 14:42:38 +0000
ROA not after:            Tue 04 Nov 2025 14:47:38 +0000
asID:                     266022
IP address blocks:        170.245.127.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f3:17:30:34:16:a2:60:70:da:f6:43:d9:9e:0a:fb:d3:a7:f6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000
        Validity
            Not Before: Nov  5 14:42:38 2024 GMT
            Not After : Nov  4 14:47:38 2025 GMT
        Subject: CN=BACDBEE694F6F1E55C3070285FADED28AB5ED56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:ad:e5:a1:dc:89:df:ed:67:94:2f:db:74:
                    1a:b1:8d:22:b2:18:68:2f:e7:dd:f1:34:9a:9e:85:
                    e0:2b:f1:31:fe:5c:e7:df:0e:4a:cc:87:30:8b:cf:
                    16:66:56:16:70:bf:1a:4f:ce:40:da:a3:86:1e:e4:
                    8b:c1:bf:20:8a:b1:f3:47:02:3b:42:a8:ff:dc:22:
                    f0:25:11:ae:b2:c1:d7:2a:95:cb:b0:35:30:9c:17:
                    a7:55:9e:60:2a:a5:75:6e:28:d0:96:63:12:21:0a:
                    53:eb:7b:b5:62:84:df:5d:e2:85:73:d4:87:01:1f:
                    b3:62:ae:21:f2:24:73:b4:25:91:a7:06:c1:fd:10:
                    06:1b:66:59:48:d8:0e:a9:75:bb:6b:85:a3:8d:6c:
                    3b:aa:41:6e:a8:96:2f:cf:d2:61:1a:5b:9b:29:a8:
                    a2:52:c5:80:77:1a:3f:85:25:ae:d5:e5:60:b9:31:
                    14:17:6a:1b:5e:ce:f5:1b:00:13:1e:7f:f7:bd:a4:
                    79:32:86:ec:90:17:10:f5:5b:55:50:f5:23:c8:e4:
                    e0:41:0f:98:d4:cb:a2:ad:67:4d:c2:45:7b:f1:59:
                    49:9f:a0:b7:6a:a1:35:66:11:78:b4:fd:12:ad:a6:
                    f3:7d:5d:a4:59:1c:90:2f:68:e3:77:73:24:e2:3b:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:BE:E6:94:F6:F1:E5:5C:30:70:28:5F:AD:ED:28:AB:5E:D5:6E
            X509v3 Authority Key Identifier:
                keyid:63:B4:DE:45:7F:8E:07:0C:F2:B3:E1:4A:61:FF:7D:DF:B3:F8:70:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63B4DE457F8E070CF2B3E14A61FF7DDFB3F87000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/3137302e3234352e3132372e302f32342d3234203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:5b:cf:16:b7:45:29:02:a5:75:ae:40:44:ed:fa:7a:cd:
         bb:38:70:b1:bb:58:1a:c2:ec:7f:f3:2c:35:94:fd:4d:1b:33:
         48:e9:69:34:67:97:1b:f6:3b:60:2c:b8:23:b1:a6:e5:6f:ce:
         d1:42:64:bd:43:a0:cc:cf:c5:c1:83:52:01:58:47:e8:99:e3:
         8e:ad:ca:3e:24:39:a2:cf:4b:d7:82:39:90:76:11:14:03:c9:
         c4:d4:7e:58:2d:24:b8:1f:30:f7:3e:56:ff:11:a6:f3:d0:54:
         a7:70:e8:97:8c:81:1d:60:d4:49:0f:4b:8c:fb:16:63:98:81:
         c7:52:8e:30:5d:3e:ca:44:de:3b:89:e6:74:59:64:9d:1c:e7:
         5f:f2:4e:bb:8c:dc:da:8c:7a:05:43:f3:5d:8c:00:06:f4:3f:
         18:83:91:70:ba:f8:f8:f3:ac:35:4b:6b:d2:8e:71:e5:62:80:
         b6:f2:83:95:94:a6:63:de:80:02:2a:5d:d7:f6:7c:84:55:3f:
         8e:7b:28:3e:1f:89:46:aa:1b:fc:10:1d:c1:c3:ac:5a:6d:c6:
         c7:7b:d4:34:1f:b4:c8:28:9b:2d:0a:3d:ab:78:5d:f8:e1:fc:
         8f:9e:9e:da:03:d1:39:f9:63:f3:41:2c:83:20:44:57:f9:07:
         6b:03:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 11:26:54 2024 by rpki-client on console-ams.rpki-client.org