Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233342e302f32332d3233203d3e20323730373238.roa
File:                     3138372e3130322e3233342e302f32332d3233203d3e20323730373238.roa (raw, json)
Hash identifier:          WegQPHoY2BXhBc/hY+2MCuVFa45SAHWmTSUMgyiQBFY=
Subject key identifier:   98:C6:8B:C2:59:57:62:7B:56:99:7D:AD:0B:5E:C6:22:55:E4:6C:AB
Certificate issuer:       /CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
Certificate serial:       4B7FA2B382BC353C37FA7E8D67F4E7569353A312
Authority key identifier: EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233342e302f32332d3233203d3e20323730373238.roa
Signing time:             Sun 01 Sep 2024 20:40:55 +0000
ROA not before:           Sun 01 Sep 2024 20:35:55 +0000
ROA not after:            Sun 31 Aug 2025 20:40:55 +0000
asID:                     270728
IP address blocks:        187.102.234.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7f:a2:b3:82:bc:35:3c:37:fa:7e:8d:67:f4:e7:56:93:53:a3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
        Validity
            Not Before: Sep  1 20:35:55 2024 GMT
            Not After : Aug 31 20:40:55 2025 GMT
        Subject: CN=98C68BC25957627B56997DAD0B5EC62255E46CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:0e:e0:be:15:17:67:36:a4:eb:c4:f4:0b:
                    96:c8:66:0a:6b:99:16:9d:60:51:8c:8a:dd:eb:03:
                    73:6b:81:3c:f7:b9:29:b4:c8:71:56:f6:48:02:1a:
                    c5:98:a9:e3:00:ca:14:7f:aa:e5:60:e2:01:7d:52:
                    9b:75:0d:fd:ba:01:ad:30:f1:d5:c7:e2:ac:23:37:
                    dd:96:31:c8:d3:17:c9:d3:7b:19:4c:83:57:b6:25:
                    d0:4f:27:5e:47:ef:13:e9:2b:cd:d5:df:63:e0:7b:
                    60:55:32:4c:03:b7:50:e2:55:6a:6d:f5:33:ac:47:
                    90:94:48:c2:7c:c2:db:1a:4f:75:6f:f3:53:7d:b2:
                    3b:fe:6c:cf:51:29:8b:36:be:cb:aa:fc:ea:b3:79:
                    09:a2:64:7f:68:25:e4:e9:1a:5b:15:c7:2e:d8:9e:
                    ff:be:cf:95:2b:18:c8:0e:0d:71:15:81:6e:67:ef:
                    07:19:9e:bf:3a:bd:9b:7c:3b:56:af:85:05:0d:eb:
                    66:ef:7e:95:3a:2c:44:fe:4f:70:ce:45:d0:26:a0:
                    8e:bc:40:d9:0a:7d:5d:bf:ae:e4:a3:80:02:85:87:
                    67:a3:0d:2b:0e:96:0f:4f:29:56:5b:a4:15:08:d9:
                    aa:de:13:9f:f7:15:ee:23:1e:98:c4:a1:07:e8:61:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C6:8B:C2:59:57:62:7B:56:99:7D:AD:0B:5E:C6:22:55:E4:6C:AB
            X509v3 Authority Key Identifier:
                keyid:EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233342e302f32332d3233203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:97:ef:a6:f4:d0:c9:0a:c4:fa:f8:ed:c4:72:52:4e:bd:
         c8:57:14:b0:47:80:42:7f:51:5c:99:19:6a:2f:0b:47:9f:b3:
         7c:21:15:08:94:f2:a2:18:24:70:a2:4a:09:e9:93:d9:17:4d:
         c3:ba:24:d9:44:23:45:05:19:a4:ae:21:d9:3c:ef:44:6a:fa:
         c2:94:9a:d5:95:78:f7:08:e7:41:73:dc:35:e9:da:6f:bf:8f:
         b6:98:42:9b:1a:49:32:82:fd:fb:02:39:bc:f0:69:cd:0e:4a:
         f9:6f:be:03:5f:42:1c:24:67:00:68:90:0f:94:9a:b0:78:fb:
         8d:20:35:1b:9f:1e:8b:05:2d:55:7a:1b:47:b2:90:bd:66:50:
         73:d7:c8:05:f1:8f:bd:24:9c:15:a7:7c:b1:84:be:d8:3c:60:
         1e:ad:a2:e4:d1:b3:bb:0c:26:0d:98:d8:e7:c9:dc:a5:42:ef:
         7d:e2:5e:44:82:6c:25:46:5a:cb:cd:62:67:92:db:0d:56:f3:
         f5:77:7d:47:b8:31:80:93:f2:18:f3:22:ed:20:fe:11:24:e1:
         c7:91:e8:ae:dc:f6:95:b8:30:73:03:8a:e6:dc:2d:cf:0c:dd:
         4c:f0:ae:d9:00:43:0d:f5:fc:94:c0:c6:4c:fb:9e:73:f2:54:
         4a:08:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:04:15 2024 by rpki-client on console-ams.rpki-client.org