Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233332e302f32342d3234203d3e20323730373238.roa
File:                     3138372e3130322e3233332e302f32342d3234203d3e20323730373238.roa (raw, json)
Hash identifier:          271sr8ZXSB5vf4WU5OiODeALOqgnFwHyjpLPrLp93oA=
Subject key identifier:   F8:D8:3D:FB:62:79:B9:00:C3:D1:2E:A7:3C:D3:82:2A:98:C8:D9:7F
Certificate issuer:       /CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
Certificate serial:       419999FB0E8CD6534664F1820ECC5DAE391FB9CD
Authority key identifier: EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233332e302f32342d3234203d3e20323730373238.roa
Signing time:             Sun 01 Sep 2024 20:40:54 +0000
ROA not before:           Sun 01 Sep 2024 20:35:54 +0000
ROA not after:            Sun 31 Aug 2025 20:40:54 +0000
asID:                     270728
IP address blocks:        187.102.233.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:99:99:fb:0e:8c:d6:53:46:64:f1:82:0e:cc:5d:ae:39:1f:b9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
        Validity
            Not Before: Sep  1 20:35:54 2024 GMT
            Not After : Aug 31 20:40:54 2025 GMT
        Subject: CN=F8D83DFB6279B900C3D12EA73CD3822A98C8D97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:d0:a7:e2:c8:21:f9:3e:ca:54:81:65:41:
                    00:ae:81:32:29:b0:07:9d:00:08:6a:cc:59:28:ad:
                    2f:0c:d1:c1:00:05:c5:f9:66:53:9f:63:55:b3:e3:
                    a0:01:fd:17:a7:4c:ce:6c:e2:f3:ad:9e:eb:71:e6:
                    4d:f0:90:aa:eb:26:14:38:0b:b5:86:80:c9:ee:6c:
                    09:c8:f7:57:15:cd:e1:14:e1:92:6e:a3:60:ce:59:
                    1f:9f:f5:ad:ed:04:8b:7e:0a:6c:ab:d8:ad:52:c8:
                    4b:2a:44:5f:ce:5d:ad:57:a5:77:0e:de:da:7e:bd:
                    05:f0:8e:e1:95:ac:b8:2e:14:10:ea:a0:60:35:65:
                    4e:3c:81:d3:0e:e9:6e:f5:2d:d1:1f:38:7d:47:2a:
                    b6:f4:bf:63:f0:37:e1:b7:ea:21:bc:08:29:da:bf:
                    25:da:e8:41:68:a7:be:cc:e1:ad:92:31:a4:89:48:
                    74:c5:b7:bd:bb:21:e4:f9:fb:a3:76:19:46:0e:65:
                    6b:05:ff:22:f4:16:09:03:4b:14:8e:71:47:cd:fd:
                    f8:0f:63:ee:95:5f:ca:47:e1:6e:85:69:c3:59:4c:
                    10:9d:37:fa:1c:b8:42:cb:d2:ad:b9:7b:87:31:89:
                    c9:fe:38:3b:7c:0f:03:b1:bd:44:23:95:bf:04:46:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:3D:FB:62:79:B9:00:C3:D1:2E:A7:3C:D3:82:2A:98:C8:D9:7F
            X509v3 Authority Key Identifier:
                keyid:EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233332e302f32342d3234203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:39:b3:70:b1:65:4a:82:16:d5:2e:64:85:45:7e:2a:63:87:
         89:51:90:df:3e:fa:ca:25:16:a3:c1:cd:85:a8:57:88:97:4e:
         c6:b1:e3:6a:b2:f2:57:10:5b:5e:ba:b8:fd:2a:cc:7e:5b:f2:
         99:9d:4b:2d:7e:54:ea:91:b1:ed:51:57:28:c5:35:35:0e:93:
         94:78:a2:c8:82:d2:21:4d:42:0e:b6:d3:58:9e:23:d9:67:30:
         d6:29:2f:f3:a3:1e:3f:c3:a6:85:fb:e0:37:48:0d:c8:77:44:
         b2:09:9a:25:54:43:2f:ef:3f:e8:0a:f3:d5:aa:b8:c7:fd:00:
         59:58:e4:af:79:df:b4:32:7d:1d:5d:ab:22:47:cc:86:26:d0:
         07:b9:97:83:f3:2f:71:57:79:c9:77:01:a2:4a:0e:a6:2e:35:
         44:95:9d:e4:85:73:d9:89:21:72:8c:f5:5a:13:12:ed:32:41:
         67:61:43:85:c9:24:df:ea:8c:ea:8b:f2:b9:4f:de:cc:5d:74:
         ef:ef:51:00:d4:b1:73:aa:dd:51:16:88:3e:83:b4:47:2c:1e:
         e2:f7:91:ce:69:58:5a:71:3a:63:74:93:d9:61:f6:66:51:7b:
         38:9c:4d:d2:4e:71:22:55:81:5c:34:75:1a:44:15:9a:bf:13:
         d6:ee:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 10:41:53 2024 by rpki-client on console-fra.rpki-client.org