Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39342e302f32332d3233203d3e20323635353030.roa
File:                     3137302e37382e39342e302f32332d3233203d3e20323635353030.roa (raw, json)
Hash identifier:          islrT+5WHjQBIi78DsK3bWxIFg7u9aoDsxLrkgkr9pE=
Subject key identifier:   F3:10:1D:4E:D8:61:5C:4C:D1:5A:FA:DC:3C:A0:D4:EA:E2:9E:C0:90
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       6096B128513685ED2C707D651A729DB2ABBB48CA
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39342e302f32332d3233203d3e20323635353030.roa
Signing time:             Mon 29 Apr 2024 14:47:43 +0000
ROA not before:           Mon 29 Apr 2024 14:42:43 +0000
ROA not after:            Mon 28 Apr 2025 14:47:43 +0000
asID:                     265500
IP address blocks:        170.78.94.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:96:b1:28:51:36:85:ed:2c:70:7d:65:1a:72:9d:b2:ab:bb:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: Apr 29 14:42:43 2024 GMT
            Not After : Apr 28 14:47:43 2025 GMT
        Subject: CN=F3101D4ED8615C4CD15AFADC3CA0D4EAE29EC090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:53:8f:e9:89:2e:53:d1:ee:4b:ac:86:aa:
                    7f:e0:1c:df:67:fd:8a:e5:8f:69:93:21:66:f4:e6:
                    9b:54:99:78:2e:b7:3c:b5:81:4d:bc:d0:b3:b3:38:
                    ce:fa:79:68:d6:6f:a0:62:a5:2d:2c:85:68:f4:62:
                    fe:6d:65:98:6f:a0:58:a1:89:99:01:52:dd:45:57:
                    5d:57:b3:89:ac:9c:e5:75:9d:b7:a2:c5:f2:f5:90:
                    12:b0:2f:2d:88:05:cf:12:97:a8:8b:0a:f7:b8:f7:
                    c4:f5:29:68:ea:2a:22:94:2d:fc:16:0e:c9:27:55:
                    1c:79:e1:69:31:d9:76:b2:3a:17:51:30:3b:70:91:
                    a6:f2:fa:ca:6a:d8:cb:41:4c:89:ce:56:2d:48:10:
                    ea:a5:73:a6:f4:ee:d1:bb:14:93:b7:32:19:2e:99:
                    ff:c1:d5:d6:f8:3c:dd:c9:fb:9f:44:14:6f:7f:cd:
                    3a:25:e2:45:68:28:3c:68:b6:b3:b3:4f:6e:43:7d:
                    2c:d2:f0:2a:1b:b1:59:2b:e2:75:29:29:8b:71:97:
                    dd:ef:14:ce:61:da:47:1f:b5:0a:dd:51:b2:39:34:
                    f6:16:5f:c8:36:3e:6e:1c:4c:f0:d8:5c:d0:67:4c:
                    0b:ab:0f:bd:f3:d6:40:0a:41:91:a7:0c:65:64:d6:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:1D:4E:D8:61:5C:4C:D1:5A:FA:DC:3C:A0:D4:EA:E2:9E:C0:90
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39342e302f32332d3233203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:48:55:9e:42:e1:17:00:46:ff:a2:1d:dc:e5:a4:b6:38:
         e7:53:a3:37:aa:42:49:7d:1c:a8:25:2c:bb:fb:f1:14:59:6b:
         1e:42:4e:35:92:35:c6:26:88:57:b1:0c:21:24:97:71:de:87:
         9b:4e:0b:86:45:8e:fa:02:bb:7b:67:88:25:e5:a8:03:21:b2:
         3f:6a:5c:98:95:d7:66:36:05:e9:25:42:18:e6:93:31:f2:8e:
         cb:34:76:52:58:ca:28:2c:67:c0:92:c1:c9:e8:26:7d:0b:f4:
         0b:42:57:a1:bc:a8:fd:3b:48:eb:9e:ec:8f:2d:fe:cd:5d:59:
         17:44:db:a3:dd:44:2b:3b:d6:45:84:1c:b5:17:dc:c7:97:06:
         d9:bd:3a:f5:b2:94:45:6a:d7:59:ce:bc:5d:61:31:c0:83:a6:
         20:dc:45:7b:cf:da:08:6c:8f:f5:b5:31:2a:33:e6:db:f1:f6:
         2d:9a:22:01:91:b9:f4:b7:02:16:1c:ec:0f:f1:1c:17:af:00:
         e4:41:a1:20:43:f4:a8:25:85:4a:52:5f:d3:08:67:a4:c6:cc:
         4f:52:bd:18:16:61:6d:37:11:88:0f:14:22:a8:5b:8f:00:13:
         2d:34:0e:07:6e:a7:06:78:4b:c4:13:de:f9:f4:81:f8:d1:ca:
         6d:7b:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org