Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3232203d3e20323635353030.roa (raw, json)
Hash identifier:          WPK/kXZriN1yoL8M23mmRqOf1orTKoRII4ronl1YECY=
Subject key identifier:   CB:10:B2:AA:1F:77:95:28:D6:D0:FB:A8:40:DD:27:0E:B5:00:78:C9
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       48A8940AAEB3E5950E73A9B3638B9C87C53034C0
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa
Signing time:             Thu 04 Apr 2024 05:43:34 +0000
ROA not before:           Thu 04 Apr 2024 05:38:34 +0000
ROA not after:            Thu 03 Apr 2025 05:43:34 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a8:94:0a:ae:b3:e5:95:0e:73:a9:b3:63:8b:9c:87:c5:30:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr  4 05:38:34 2024 GMT
            Not After : Apr  3 05:43:34 2025 GMT
        Subject: CN=CB10B2AA1F779528D6D0FBA840DD270EB50078C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:5d:42:af:8f:8e:4d:ea:15:41:94:61:ec:
                    5f:49:06:37:5f:46:34:7c:6d:71:1e:ce:42:80:ca:
                    e1:2a:aa:62:d6:6b:a3:87:c2:71:b7:0e:77:25:fe:
                    3e:1e:ce:0c:16:fc:56:ad:b8:30:e0:72:29:58:b6:
                    38:5c:68:bd:41:b8:92:ce:ab:f0:41:03:ca:95:e9:
                    09:19:e9:27:b1:4b:31:9f:87:c1:b2:6b:1c:29:bf:
                    6a:33:db:c0:eb:0d:84:79:5b:4e:1f:4f:d4:41:06:
                    16:e0:6a:84:8c:b1:05:1b:54:0a:90:2f:ff:33:82:
                    52:14:86:e8:c6:7c:53:fa:03:14:a3:6f:8d:1e:d3:
                    27:d9:96:d2:ec:fa:2f:1b:f1:23:c5:07:4a:20:7d:
                    b6:df:d1:39:d2:d3:98:7f:99:c6:fc:eb:e9:c1:24:
                    be:1f:73:c6:1c:a5:35:2f:29:e5:ee:f7:f2:fb:33:
                    3e:6e:f9:55:45:2c:f2:36:1c:ab:18:e3:7d:68:43:
                    6d:08:f0:af:45:5a:17:3e:e0:04:5d:1d:f4:3c:69:
                    02:90:57:23:f2:8c:71:9e:9d:9c:f5:51:06:38:e0:
                    05:5a:db:bb:3b:41:86:50:f1:a6:57:c1:34:de:8f:
                    73:5f:7e:cb:68:c8:84:69:18:04:12:ca:d6:f8:8d:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:B2:AA:1F:77:95:28:D6:D0:FB:A8:40:DD:27:0E:B5:00:78:C9
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32322d3232203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:e5:b1:9c:f8:d2:d0:af:f7:d3:8b:9e:4b:1a:de:f0:8e:
         02:1d:c6:16:62:1b:9b:18:29:77:84:45:2a:f1:f0:80:68:26:
         cc:20:f7:e5:d9:fd:6a:e3:5d:bd:a1:a8:63:7a:88:6d:a7:b3:
         ea:17:2d:c6:6c:f6:93:58:b6:44:f0:2d:7a:54:e5:2a:d6:14:
         6d:e4:93:e8:0c:a5:e4:8f:fd:18:47:22:ef:06:bd:08:d8:e3:
         eb:b5:58:13:c6:e3:1a:8b:b6:a3:8c:48:a7:64:37:50:b4:9e:
         5d:7b:f4:9b:e0:d7:58:0c:fc:9e:3b:f7:9c:67:48:2d:7c:d6:
         3e:65:a3:98:97:ad:16:64:d4:f5:35:69:07:25:2b:92:73:8b:
         30:b6:d8:76:44:f0:fc:25:dd:35:d6:28:d0:47:cf:5d:7d:82:
         db:0d:32:09:ef:e7:ac:63:22:93:76:a5:95:e6:74:a0:bb:55:
         f6:5d:a1:9b:92:48:90:23:24:c7:98:8d:17:72:dc:76:5c:7d:
         cd:94:fd:0c:1a:e5:bf:c7:66:47:c1:9b:61:3a:b6:4a:7c:81:
         0c:85:7a:3e:aa:d0:b5:ca:86:cc:e1:d0:10:fd:01:e3:cb:b5:
         76:57:ad:af:4a:e0:78:ea:ab:df:46:a7:aa:e8:6c:fe:fd:fe:
         8c:9b:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org