Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3232203d3e20323636333234.roa
File:                     3137302e3233382e33362e302f32322d3232203d3e20323636333234.roa (raw, json)
Hash identifier:          xIhNg0+tmYQ6V6owoXwPTc/apv9XgZcBnIRbSOFESZk=
Subject key identifier:   2B:E4:FC:61:F8:D9:C7:75:11:5D:01:FD:3E:42:3B:ED:A1:6B:2C:C6
Certificate issuer:       /CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Certificate serial:       0620E98491517A364420D31CDC80A3C37DC82D37
Authority key identifier: E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3232203d3e20323636333234.roa
Signing time:             Wed 19 Jun 2024 18:14:13 +0000
ROA not before:           Wed 19 Jun 2024 18:09:13 +0000
ROA not after:            Wed 18 Jun 2025 18:14:13 +0000
asID:                     266324
IP address blocks:        170.238.36.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:20:e9:84:91:51:7a:36:44:20:d3:1c:dc:80:a3:c3:7d:c8:2d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25F3D52DD8C272CC64492A7621AE551E084A019
        Validity
            Not Before: Jun 19 18:09:13 2024 GMT
            Not After : Jun 18 18:14:13 2025 GMT
        Subject: CN=2BE4FC61F8D9C775115D01FD3E423BEDA16B2CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:ff:a6:0b:40:df:24:cd:6c:08:68:96:08:
                    41:00:3b:b8:27:f4:02:eb:6f:17:7e:33:c6:0f:a0:
                    fe:ed:94:b3:84:86:67:6f:af:6b:43:65:de:16:90:
                    4f:56:c2:ec:6e:f2:5b:50:d6:c2:f1:7b:64:1d:4a:
                    b9:54:06:d9:34:45:aa:db:cb:41:ab:ee:e7:45:22:
                    54:eb:21:c3:12:ea:fe:f7:29:bd:3b:e3:2a:8f:12:
                    98:03:70:3a:12:8e:85:f9:81:51:ff:5f:bc:bc:ed:
                    09:7e:d2:f8:45:7c:64:8a:93:34:b4:dc:33:52:87:
                    7e:71:c5:0e:8d:1b:b8:38:32:74:22:9d:86:b9:a4:
                    6b:05:57:4a:51:5f:4d:30:41:b9:a8:ce:c5:a1:2b:
                    68:ce:ac:86:aa:a0:6d:da:cc:92:90:d8:13:3d:b8:
                    b6:1e:7f:d2:71:a2:84:77:d5:8f:eb:2b:68:0f:c3:
                    81:0d:b6:1d:c7:05:49:25:38:a1:7c:26:e0:2e:e0:
                    0e:0b:14:e9:24:6b:09:3b:c1:70:be:ee:91:91:4c:
                    79:f7:59:34:9a:d0:6e:df:1d:93:68:75:95:dc:1b:
                    07:26:b3:f5:82:19:b4:9f:a4:cc:8d:bb:82:6d:62:
                    d2:3a:01:75:94:58:2c:92:fa:5e:3e:52:86:58:fd:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E4:FC:61:F8:D9:C7:75:11:5D:01:FD:3E:42:3B:ED:A1:6B:2C:C6
            X509v3 Authority Key Identifier:
                keyid:E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33362e302f32322d3232203d3e20323636333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:28:29:7f:cc:e7:b2:0a:e1:59:9b:01:c3:e8:91:b9:db:80:
         9e:35:2b:89:01:f8:90:f8:a1:30:15:48:ed:fc:3b:3c:fa:e9:
         e2:2f:bd:4b:aa:ea:f0:89:00:85:5c:e7:82:71:c3:9b:b5:68:
         ab:05:5a:36:d3:ae:90:92:f9:d7:26:fb:ad:d1:a1:83:3b:b8:
         97:f8:79:dc:a4:86:f8:af:b3:29:06:2d:95:f0:99:be:f3:2b:
         96:e3:d5:25:c5:3e:8c:17:62:d8:1e:ee:72:63:94:95:a7:71:
         7a:3a:82:0b:59:5f:4d:19:24:70:de:e2:f7:af:5d:26:52:3d:
         b7:25:c6:c7:1a:2b:0b:f2:0d:d3:7a:f7:65:7d:f4:e1:25:78:
         26:ae:35:95:d7:04:e0:83:88:6f:32:80:ee:44:90:a5:bc:42:
         47:f5:69:2b:03:f4:26:27:e3:aa:5f:97:23:c8:5f:b1:a8:56:
         e2:4b:5c:7a:aa:2b:90:b1:3e:fd:4f:aa:7f:f7:de:85:34:5b:
         f9:a1:33:ba:7a:0f:95:9a:37:6e:8c:3b:89:c0:e5:b5:ba:27:
         8d:58:c1:15:b5:17:e9:79:d5:fd:35:28:5f:bb:10:a5:17:6b:
         ac:15:55:38:3a:97:8b:7c:29:db:65:8b:58:79:18:cc:ce:6f:
         49:dc:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 00:22:47 2024 by rpki-client on console-ams.rpki-client.org