Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32322d3232203d3e20323635303738.roa
File:                     3137302e3233332e3131322e302f32322d3232203d3e20323635303738.roa (raw, json)
Hash identifier:          SIYU0Vf1z+ykvNJA0xxunz0hT6CjnWOAGQDZUnkAVqw=
Subject key identifier:   19:3B:5E:BE:9C:18:C3:30:05:E3:01:B0:E3:31:19:92:6C:F5:BB:81
Certificate issuer:       /CN=8385AA20FCB01184811054ADA6C4B37FC0652175
Certificate serial:       19A4B8575858B23C235694517568394CDD65B46B
Authority key identifier: 83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32322d3232203d3e20323635303738.roa
Signing time:             Thu 08 Feb 2024 20:24:37 +0000
ROA not before:           Thu 08 Feb 2024 20:19:37 +0000
ROA not after:            Thu 06 Feb 2025 20:24:37 +0000
asID:                     265078
IP address blocks:        170.233.112.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a4:b8:57:58:58:b2:3c:23:56:94:51:75:68:39:4c:dd:65:b4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8385AA20FCB01184811054ADA6C4B37FC0652175
        Validity
            Not Before: Feb  8 20:19:37 2024 GMT
            Not After : Feb  6 20:24:37 2025 GMT
        Subject: CN=193B5EBE9C18C33005E301B0E33119926CF5BB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:4b:7c:56:14:9a:fc:f8:cd:32:b0:62:22:
                    08:83:4d:6e:bc:18:29:9a:33:fe:5a:39:77:72:26:
                    da:dc:21:95:a7:fb:ad:c5:ef:1a:b7:aa:74:c5:56:
                    ee:26:e4:43:ad:36:a3:8f:74:92:3c:d4:00:ba:ee:
                    30:5a:26:a1:4f:03:7f:5e:4d:19:00:78:13:00:a6:
                    08:8c:5c:46:15:bb:24:29:8d:1a:fc:40:03:72:64:
                    2f:d9:c5:20:4f:c6:cf:c9:fd:c8:26:c8:94:57:d5:
                    3b:d0:24:18:19:93:09:cb:60:64:8e:4b:ff:bb:b5:
                    8a:66:d9:78:72:d5:fb:7f:d9:49:a9:49:07:a6:19:
                    6d:9a:d7:aa:83:3b:a7:28:0b:24:97:25:2a:ea:3e:
                    d9:18:57:e4:14:48:44:c5:9d:0a:50:58:43:4c:07:
                    67:0f:da:54:61:f2:f4:9c:9e:41:17:d5:2e:c5:1c:
                    fd:c4:73:01:ae:96:87:0c:5f:ce:1c:cd:0c:2c:64:
                    88:89:ca:ed:36:ae:51:d4:61:de:7d:42:66:ab:19:
                    ed:6c:bb:1d:a1:61:aa:bd:2e:e2:03:42:7e:0b:e3:
                    4b:05:8d:0d:9a:3e:b3:14:6c:1b:97:46:2f:35:c3:
                    21:7b:b2:25:11:66:1c:10:d4:a5:5c:6a:4d:c4:7b:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3B:5E:BE:9C:18:C3:30:05:E3:01:B0:E3:31:19:92:6C:F5:BB:81
            X509v3 Authority Key Identifier:
                keyid:83:85:AA:20:FC:B0:11:84:81:10:54:AD:A6:C4:B3:7F:C0:65:21:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/8385AA20FCB01184811054ADA6C4B37FC0652175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8385AA20FCB01184811054ADA6C4B37FC0652175.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/0/3137302e3233332e3131322e302f32322d3232203d3e20323635303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:37:4f:ab:96:66:9c:fe:bd:64:06:69:0b:36:92:d7:6b:9c:
         e8:bc:dd:42:73:56:8b:c6:66:97:d6:91:d9:e3:b7:9d:2e:8b:
         2c:cb:d3:5a:4f:ef:a6:cb:08:45:bb:cb:9e:df:b6:8a:be:4c:
         e7:f2:54:8f:93:6e:34:27:49:39:da:d0:2c:c3:05:6c:34:74:
         5b:27:01:ba:b1:65:99:16:3c:06:47:c7:fe:20:b4:05:49:07:
         7f:2b:1a:c5:43:f6:e8:ce:0b:55:b0:03:f9:40:16:ea:c9:18:
         45:97:d6:b9:00:06:ca:e1:1c:a7:2b:8e:d7:e4:f0:39:db:78:
         23:9a:6b:33:0b:54:f5:50:33:42:05:75:10:b9:63:e7:db:75:
         90:5e:14:ac:40:22:aa:7e:e7:38:f9:ef:c5:29:48:53:cf:7f:
         f9:72:4f:97:3d:c6:e6:67:42:fe:bd:e4:2c:4a:3b:08:51:e8:
         5f:95:c0:13:40:dd:d7:46:82:b4:b1:84:d6:ee:ce:01:53:5b:
         a0:2c:d7:e3:29:be:32:1a:7d:3b:82:5a:d1:65:c3:62:72:ce:
         e4:33:7d:0e:1b:1c:73:1d:8f:0e:30:95:60:ae:dd:f4:f2:45:
         7a:6f:4c:c8:c2:93:18:94:5c:b0:ba:43:72:96:e1:7c:82:3a:
         8c:1d:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 14:29:29 2024 by rpki-client on console-fra.rpki-client.org