Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
File:                     3137302e37382e39352e302f32342d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          93CmtbDxLI1EW6LzicQBSsNohG4Jps3b1DoVixUZ6G8=
Subject key identifier:   5F:B4:C7:CD:2D:AC:BC:FF:C1:AF:C3:BF:41:80:6B:24:B2:AD:BD:0F
Certificate issuer:       /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial:       75BA824E62F825FEDFD9ED7BDCC5CFEFA74FFBAD
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa
Signing time:             Thu 02 May 2024 02:43:38 +0000
ROA not before:           Thu 02 May 2024 02:38:38 +0000
ROA not after:            Thu 01 May 2025 02:43:38 +0000
asID:                     265500
IP address blocks:        170.78.95.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ba:82:4e:62:f8:25:fe:df:d9:ed:7b:dc:c5:cf:ef:a7:4f:fb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
        Validity
            Not Before: May  2 02:38:38 2024 GMT
            Not After : May  1 02:43:38 2025 GMT
        Subject: CN=5FB4C7CD2DACBCFFC1AFC3BF41806B24B2ADBD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:d2:8c:63:53:20:ca:6a:de:09:bb:0d:d5:
                    fd:56:a0:85:36:f9:0b:be:42:08:85:9f:6c:1c:bf:
                    44:95:56:a5:d2:24:92:7e:f6:40:55:89:3a:b7:57:
                    c2:9a:b1:99:d3:c2:8a:89:1f:6f:29:d2:37:ec:9f:
                    d8:28:75:24:cc:0b:8c:fc:d3:73:15:05:d3:a6:e8:
                    4b:ea:a8:e4:e0:df:1e:69:86:f3:2f:9a:b8:9f:9b:
                    f9:ad:11:5a:ac:b2:70:ab:23:af:1a:0a:33:4c:54:
                    02:74:0a:72:d0:eb:81:ba:68:89:75:63:03:ea:4e:
                    76:0b:b3:c0:43:d5:88:df:b0:1e:e9:cb:a3:5d:67:
                    11:3e:c8:11:e0:80:ca:b2:4e:e1:1b:93:f4:b1:90:
                    44:fb:b4:9d:1f:cb:78:3b:f5:30:24:05:e9:ab:85:
                    67:b0:c6:29:4c:74:60:c0:a0:d2:9c:2b:71:0f:f6:
                    01:8f:a6:3f:cf:de:76:d6:e2:dd:70:31:27:6d:0f:
                    82:b4:43:f5:8e:ba:f7:81:c1:a8:6b:c0:2c:aa:19:
                    c5:2f:9c:d1:7d:37:fb:b0:f5:12:b6:25:1e:07:e3:
                    10:a0:f6:43:d8:84:87:36:96:8c:d0:3f:f6:c0:db:
                    8a:12:06:cb:61:5b:5f:90:e0:cf:9c:b8:6f:57:d4:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:C7:CD:2D:AC:BC:FF:C1:AF:C3:BF:41:80:6B:24:B2:AD:BD:0F
            X509v3 Authority Key Identifier:
                keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39352e302f32342d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:ac:ed:cd:c7:67:87:5b:0e:6c:d0:d9:bd:f2:59:64:d5:
         63:44:48:ee:17:85:24:84:8e:82:31:09:66:e3:2c:f6:4f:28:
         dc:d9:0d:be:97:c4:75:5d:22:91:ca:85:bf:44:11:06:96:83:
         6b:89:ec:6b:ae:b3:58:48:d6:3b:3b:51:ed:9f:0a:bd:74:f1:
         b0:c7:04:ed:da:52:3a:a1:16:5d:b7:fe:0c:df:20:17:88:ce:
         c9:ff:b9:be:6c:44:b5:96:d4:16:98:20:68:09:a3:3a:af:1f:
         e1:e3:10:47:6c:81:70:e6:ce:2b:6a:e2:06:eb:d5:34:41:82:
         78:18:85:e4:b1:ab:00:cc:e2:30:72:a3:08:f2:de:56:17:ef:
         6e:04:eb:87:ed:fb:5a:b5:87:4b:2c:6b:00:97:ba:d3:f0:c0:
         18:97:9e:2d:00:a5:ca:ba:67:7b:aa:34:6c:97:73:3b:10:05:
         68:b4:2b:58:8f:65:e7:63:a9:f4:db:34:82:59:eb:fa:a0:a1:
         31:e5:38:18:23:29:9c:df:3a:85:dc:d6:9f:75:05:9b:f4:f5:
         dd:bd:52:a1:85:f9:e0:ad:37:c1:af:d3:b9:28:d9:30:29:9d:
         78:c8:e2:4b:bf:d3:be:b2:a4:1e:6b:d1:92:7e:e1:a8:c6:f1:
         77:80:47:9d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdbqCTmL4Jf7f2e173MXP76dP+60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIzNkZENjdGRDE0NkY2QUJDNDIxQzYwOTc0NDg5MUVB
NzUxMkYxNzAeFw0yNDA1MDIwMjM4MzhaFw0yNTA1MDEwMjQzMzhaMDMxMTAvBgNV
BAMTKDVGQjRDN0NEMkRBQ0JDRkZDMUFGQzNCRjQxODA2QjI0QjJBREJEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYNKMY1MgymreCbsN1f1WoIU2
+Qu+QgiFn2wcv0SVVqXSJJJ+9kBViTq3V8KasZnTwoqJH28p0jfsn9godSTMC4z8
03MVBdOm6EvqqOTg3x5phvMvmrifm/mtEVqssnCrI68aCjNMVAJ0CnLQ64G6aIl1
YwPqTnYLs8BD1YjfsB7py6NdZxE+yBHggMqyTuEbk/SxkET7tJ0fy3g79TAkBemr
hWewxilMdGDAoNKcK3EP9gGPpj/P3nbW4t1wMSdtD4K0Q/WOuveBwahrwCyqGcUv
nNF9N/uw9RK2JR4H4xCg9kPYhIc2lozQP/bA24oSBsthW1+Q4M+cuG9X1EmzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUX7THzS2svP/Br8O/QYBrJLKtvQ8wHwYDVR0j
BBgwFoAUKzb9Z/0Ub2q8Qhxgl0SJHqdRLxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMS8yQjM2RkQ2N0ZEMTQ2RjZBQkM0MjFDNjA5NzQ0ODkxRUE3NTEyRjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCMzZGRDY3RkQxNDZGNkFC
QzQyMUM2MDk3NDQ4OTFFQTc1MTJGMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzEv
MzEzNzMwMmUzNzM4MmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqk5fMA0GCSqGSIb3DQEBCwUAA4IBAQBCG6ztzcdn
h1sObNDZvfJZZNVjREjuF4UkhI6CMQlm4yz2Tyjc2Q2+l8R1XSKRyoW/RBEGloNr
iexrrrNYSNY7O1Htnwq9dPGwxwTt2lI6oRZdt/4M3yAXiM7J/7m+bES1ltQWmCBo
CaM6rx/h4xBHbIFw5s4rauIG69U0QYJ4GIXksasAzOIwcqMI8t5WF+9uBOuH7fta
tYdLLGsAl7rT8MAYl54tAKXKumd7qjRsl3M7EAVotCtYj2XnY6n02zSCWev6oKEx
5TgYIymc3zqF3NafdQWb9PXdvVKhhfngrTfBr9O5KNkwKZ14yOJLv9O+sqQea9GS
fuGoxvF3gEed
-----END CERTIFICATE-----
Generated at Fri Jun 14 00:36:47 2024 by rpki-client on console-ams.rpki-client.org