Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa
File:                     3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa (raw, json)
Hash identifier:          XVN02nnMwG6MCCCZMhXmMYk0hkvAz9ZfpC6xhz50xYE=
Subject key identifier:   50:47:E6:74:0D:7C:C3:D1:71:EB:FA:AC:9B:C0:4E:6F:8E:07:BA:C2
Certificate issuer:       /CN=C9AC44E82605C0D3C3383877074774E2849AC537
Certificate serial:       7597D0D8DEEFBF492F55C42B600843178C253349
Authority key identifier: C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa
Signing time:             Wed 10 Apr 2024 12:55:38 +0000
ROA not before:           Wed 10 Apr 2024 12:50:38 +0000
ROA not after:            Wed 09 Apr 2025 12:55:38 +0000
asID:                     266314
IP address blocks:        170.238.52.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:d0:d8:de:ef:bf:49:2f:55:c4:2b:60:08:43:17:8c:25:33:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AC44E82605C0D3C3383877074774E2849AC537
        Validity
            Not Before: Apr 10 12:50:38 2024 GMT
            Not After : Apr  9 12:55:38 2025 GMT
        Subject: CN=5047E6740D7CC3D171EBFAAC9BC04E6F8E07BAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:06:82:c0:c3:ef:bf:3c:a8:17:7b:bb:a2:
                    3d:c3:e9:8e:f3:48:35:a4:fa:ff:f8:22:eb:3f:9e:
                    ed:32:9b:fa:d0:98:c8:9f:3f:f2:df:e7:d7:a9:1f:
                    91:ba:29:21:6c:f7:44:8c:67:a3:36:90:36:d7:e0:
                    3b:f5:2d:4b:d9:33:cf:12:f8:57:90:58:07:4d:f1:
                    47:06:68:7d:7d:65:5e:a9:38:2f:1a:95:f8:f7:11:
                    b0:51:c8:8e:24:c7:ed:8a:e2:36:b8:e9:5f:86:19:
                    22:95:a1:73:2d:c7:3c:42:6a:5d:ed:96:8b:38:9e:
                    21:d9:a0:fb:52:16:7c:64:76:36:e7:aa:c3:8c:d6:
                    a3:ea:20:51:b3:c5:49:da:d3:9d:ef:38:a4:fa:a2:
                    4b:97:94:79:18:93:3d:c1:be:49:40:d5:f6:05:9b:
                    7f:63:e4:db:76:8e:9a:e1:a0:6d:b1:59:4b:99:af:
                    a0:25:ac:4a:65:89:ab:b7:ee:49:91:6a:e9:24:68:
                    fa:21:84:dd:c1:2c:a7:5e:e9:9c:c2:84:ca:86:1c:
                    52:dc:9d:bb:83:59:63:12:45:3c:67:77:16:c4:f7:
                    72:e1:39:60:f7:ea:60:0b:6f:3c:20:e5:50:3c:12:
                    a4:e9:87:70:72:60:1a:4c:52:62:58:6e:4f:fb:61:
                    89:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:E6:74:0D:7C:C3:D1:71:EB:FA:AC:9B:C0:4E:6F:8E:07:BA:C2
            X509v3 Authority Key Identifier:
                keyid:C9:AC:44:E8:26:05:C0:D3:C3:38:38:77:07:47:74:E2:84:9A:C5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/C9AC44E82605C0D3C3383877074774E2849AC537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9AC44E82605C0D3C3383877074774E2849AC537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBL3R5Hdzdmv55p2meCsbMCFkPNsubEVBxikAfevFo7t/1/3137302e3233382e35322e302f32322d3234203d3e20323636333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:d5:4e:8c:60:27:77:9d:96:0b:80:aa:8f:14:80:d8:45:
         03:78:68:38:b7:c4:aa:a8:c5:4d:e9:af:ea:66:3c:28:57:a3:
         29:cc:f3:1f:67:ce:91:46:30:7a:be:03:1b:b7:5f:4e:3f:d9:
         b5:b7:16:b5:c4:0f:1a:ee:96:f6:4a:20:8e:90:cc:a6:a4:b0:
         a6:9d:09:e6:0e:a1:0e:86:b2:be:03:41:4b:ab:f0:d6:4c:85:
         bf:6c:fb:01:66:0d:96:eb:8b:08:d4:33:c6:a9:3a:a3:9b:9f:
         7c:e0:78:54:3e:8e:f9:fe:d6:5c:41:ce:73:6e:ac:4c:f4:a0:
         40:b6:28:ca:7f:33:44:bb:64:b4:0e:6d:d8:24:11:c4:34:4f:
         a3:32:b0:9c:65:85:42:5c:8a:b2:1a:16:80:c3:12:eb:9b:8b:
         dc:49:e1:50:26:a5:35:8a:59:e5:6a:e3:1f:08:93:14:41:79:
         7e:aa:89:2f:34:60:79:b0:ca:0e:04:74:0a:5a:8c:5b:01:44:
         06:72:25:ed:e2:63:1e:30:97:34:15:47:23:38:d3:9b:cf:f0:
         05:34:36:80:78:fa:b1:c0:9b:70:66:9f:12:59:95:ce:1a:eb:
         ac:43:f1:57:f7:d2:24:38:4c:8c:dc:91:b4:6a:32:36:ea:61:
         f0:21:6b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org