Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233352e302f32342d3234203d3e20323730373238.roa
File:                     3138372e3130322e3233352e302f32342d3234203d3e20323730373238.roa (raw, json)
Hash identifier:          /3SMaITebgLXWyEbTtpYq2WNmTeewwiafW980CrjFMo=
Subject key identifier:   2E:E5:3E:F8:F2:35:F7:CF:7C:31:C5:91:0A:22:9E:FA:45:04:00:0D
Certificate issuer:       /CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
Certificate serial:       60119F6D608E73E6D1E0AA667B51AE316E439535
Authority key identifier: EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233352e302f32342d3234203d3e20323730373238.roa
Signing time:             Sun 01 Sep 2024 20:40:55 +0000
ROA not before:           Sun 01 Sep 2024 20:35:55 +0000
ROA not after:            Sun 31 Aug 2025 20:40:55 +0000
asID:                     270728
IP address blocks:        187.102.235.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:11:9f:6d:60:8e:73:e6:d1:e0:aa:66:7b:51:ae:31:6e:43:95:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A
        Validity
            Not Before: Sep  1 20:35:55 2024 GMT
            Not After : Aug 31 20:40:55 2025 GMT
        Subject: CN=2EE53EF8F235F7CF7C31C5910A229EFA4504000D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:12:d4:fb:96:2f:c5:1b:01:47:ea:77:74:
                    05:24:15:1d:41:30:ab:9c:e6:2c:b9:c8:34:88:6e:
                    e6:5a:27:1b:52:58:be:3d:01:c3:7d:2d:e5:a9:e9:
                    d4:a1:d6:6c:12:27:61:68:38:82:9e:be:21:4f:89:
                    0d:75:3d:13:c1:c4:c4:a2:53:36:b2:69:e1:d8:ca:
                    f8:0f:cf:22:7d:57:0e:8e:4f:49:c9:59:ab:12:6f:
                    b4:f3:2f:95:07:6c:a9:ac:b0:7c:2d:27:59:59:1a:
                    94:86:37:a4:2c:00:32:34:0f:81:90:21:b2:fc:26:
                    6a:28:56:36:a5:ec:3e:b9:45:3c:32:d8:1f:9f:12:
                    0e:e3:53:9b:12:3a:e9:29:06:d7:c2:30:b6:7e:d0:
                    49:14:02:9f:c8:5d:32:93:d1:20:19:24:55:ee:68:
                    65:3e:71:ad:14:e2:e3:0f:e7:99:1c:19:49:78:83:
                    77:e9:35:90:ca:15:23:ca:25:de:76:6b:25:fb:6d:
                    88:d3:7a:e5:35:6f:5c:59:a3:19:1d:8d:c3:61:3a:
                    61:ad:8a:47:5e:df:26:51:b1:1d:8d:0b:87:15:f8:
                    fa:cf:e0:7f:67:17:eb:ae:89:bc:0d:84:96:4f:97:
                    54:39:e8:46:eb:fd:48:bc:31:e2:d2:cb:1a:de:8a:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E5:3E:F8:F2:35:F7:CF:7C:31:C5:91:0A:22:9E:FA:45:04:00:0D
            X509v3 Authority Key Identifier:
                keyid:EC:3E:FB:03:B4:B8:44:B2:DB:A9:49:3F:99:2B:59:7C:23:BF:BE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3EFB03B4B844B2DBA9493F992B597C23BFBE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDpn922dWJXhDCiVB4ofswu4UarDpEyCjjmh2GARpLeU/0/3138372e3130322e3233352e302f32342d3234203d3e20323730373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:eb:85:ff:be:16:6d:d4:d3:c4:80:84:01:37:eb:8c:97:ab:
         26:cd:9d:b6:67:16:c7:a2:ea:d1:31:41:10:77:6e:da:36:13:
         0c:0c:f2:76:49:72:c3:fc:36:6b:27:24:ee:61:7a:d7:0c:c1:
         53:4d:56:aa:a5:0a:6e:54:63:e5:ab:98:ba:1b:bf:63:18:58:
         b3:0d:4c:c7:0f:4f:f2:19:a3:2a:85:06:08:41:1f:96:d2:2c:
         a9:22:f0:98:6e:67:85:b9:c7:8a:71:1e:f4:b7:d5:c1:92:58:
         8e:b4:d0:1d:50:23:5a:48:2b:b7:d6:75:33:4d:ff:5a:f9:b6:
         4a:20:9d:29:9b:ec:3f:18:61:9f:96:08:93:24:71:da:23:fb:
         d4:5a:d6:53:b2:0c:17:ff:02:86:4e:bd:2d:1f:a4:fa:e8:a1:
         8b:de:9d:b2:af:60:aa:d5:01:da:0b:43:e6:e8:e9:a6:83:48:
         53:6f:01:af:38:7a:c3:01:86:70:8b:1c:be:4e:ed:ac:09:47:
         47:94:9c:ed:5f:77:ae:07:54:e2:cc:c6:47:79:1d:18:a7:a7:
         43:19:48:7c:e6:b4:7c:7c:3a:fa:8c:d9:b1:b5:69:3d:d8:4e:
         a3:4c:0a:6a:e7:99:02:b7:66:60:8f:98:3c:08:38:df:72:41:
         20:05:50:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 10:41:53 2024 by rpki-client on console-fra.rpki-client.org