Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39332e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          vp1YwinjkZOAlhB16Zh8pQoLVMJ9n0pNALl5pcChDw8=
Subject key identifier:   F7:8D:CB:2D:C3:76:7C:2F:1E:0E:23:71:B2:1B:BA:ED:1C:03:95:58
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       156C188CE8569F6BDB345DE2804A3B67D782EA81
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa
Signing time:             Thu 04 Apr 2024 05:43:34 +0000
ROA not before:           Thu 04 Apr 2024 05:38:34 +0000
ROA not after:            Thu 03 Apr 2025 05:43:34 +0000
asID:                     265500
IP address blocks:        170.78.93.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:18:8c:e8:56:9f:6b:db:34:5d:e2:80:4a:3b:67:d7:82:ea:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr  4 05:38:34 2024 GMT
            Not After : Apr  3 05:43:34 2025 GMT
        Subject: CN=F78DCB2DC3767C2F1E0E2371B21BBAED1C039558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:92:bb:c8:44:7a:7b:9f:03:1c:f4:56:2f:
                    2e:7b:4b:10:28:e0:f5:c6:55:24:87:36:4f:2e:fd:
                    31:de:ac:d2:36:05:21:32:5b:76:2c:17:d2:57:90:
                    a9:0a:05:60:8e:11:5c:7a:03:f2:e1:5c:1b:15:6d:
                    91:c9:f9:88:a2:ab:23:bc:f8:aa:1a:c6:bd:6f:d3:
                    98:26:25:05:05:03:6c:d4:9c:4a:28:af:22:b6:78:
                    6e:ce:e6:d2:a8:3b:38:ac:17:35:38:7e:08:7e:e1:
                    b8:c3:ea:54:18:d7:49:e5:13:ce:13:53:27:a3:7e:
                    a5:56:c8:02:01:42:90:31:76:43:71:10:03:26:e6:
                    18:bf:3a:c1:77:37:70:82:7d:72:e7:02:99:b7:88:
                    2c:16:95:70:16:54:20:6d:7d:7a:5c:b7:6b:59:b6:
                    e5:66:31:e0:8d:b2:47:01:0d:e6:b4:e5:0c:d1:30:
                    83:65:38:9c:a1:d4:71:8d:13:0a:bc:dd:14:31:63:
                    8b:5e:b2:1c:e8:68:12:b1:52:79:9f:39:a3:38:7e:
                    2e:91:56:a5:a2:a1:51:22:49:49:05:25:c3:a0:af:
                    c9:c9:8c:79:9d:3d:d7:ac:52:4b:b0:5a:10:23:04:
                    ed:41:0a:f5:28:5a:78:73:52:31:02:95:3d:20:cc:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:CB:2D:C3:76:7C:2F:1E:0E:23:71:B2:1B:BA:ED:1C:03:95:58
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39332e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:55:4a:84:f0:f9:9c:01:0d:f9:0a:b8:73:3c:00:41:3e:
         93:a9:18:9e:75:83:14:e2:14:a3:41:37:12:7a:15:82:d6:40:
         36:8c:e2:0a:1d:2d:71:0d:04:f4:32:8e:71:ea:df:39:9f:38:
         aa:0a:24:53:f4:a1:1b:9b:76:e4:4e:ed:ef:4c:4f:01:ec:02:
         5e:67:96:11:5b:8e:37:42:d4:2a:d2:43:5b:df:aa:7a:87:20:
         fa:4c:ce:a3:19:cf:67:a0:70:4c:d5:e7:80:69:7b:bf:dc:ff:
         f1:36:51:18:e4:d4:45:aa:d0:e3:64:90:87:23:8e:49:ad:2b:
         9f:1c:62:57:0f:33:08:89:49:c3:dc:31:1c:94:50:c1:22:79:
         10:bb:4a:4e:a9:a6:83:3d:6a:2c:ba:7e:40:71:e8:9c:69:e4:
         ed:8e:9c:74:6e:62:e6:0e:a0:f6:57:8d:95:2f:ac:82:63:de:
         ed:98:ec:82:32:b0:bb:7c:d9:3a:35:2b:3a:49:5b:0d:1a:83:
         12:79:3d:c5:b8:01:dc:a8:47:2f:18:88:af:dc:8e:c0:9b:5a:
         cc:6b:ae:ee:c1:e4:0c:df:4f:0d:63:b7:76:46:c1:e7:07:e5:
         0c:9a:78:10:fe:f4:cc:19:92:2b:15:f7:bc:82:53:cd:e2:70:
         97:95:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:47 2024 by rpki-client on console-ams.rpki-client.org