Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa
File:                     3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          b/8QbQi5t36PX0oXuFXZAyp/FPWySjOoiL68f86pAsM=
Subject key identifier:   FA:03:7C:8B:57:E8:9B:9E:6B:25:B3:DA:C0:F3:AE:5A:4C:07:CE:8A
Certificate issuer:       /CN=5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9
Certificate serial:       2D78E5F648D3FD871384A412050D8075D57CA2ED
Authority key identifier: 57:84:F5:F6:D8:2B:E2:B6:C9:5B:70:93:85:B7:10:FE:5D:1E:F0:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa
Signing time:             Thu 04 Apr 2024 22:12:54 +0000
ROA not before:           Thu 04 Apr 2024 22:07:54 +0000
ROA not after:            Thu 03 Apr 2025 22:12:54 +0000
asID:                     262785
IP address blocks:        170.238.80.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:e5:f6:48:d3:fd:87:13:84:a4:12:05:0d:80:75:d5:7c:a2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9
        Validity
            Not Before: Apr  4 22:07:54 2024 GMT
            Not After : Apr  3 22:12:54 2025 GMT
        Subject: CN=FA037C8B57E89B9E6B25B3DAC0F3AE5A4C07CE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6e:84:97:e2:07:13:8a:32:a4:e7:de:8e:52:
                    90:d1:95:dc:4d:fa:54:db:65:c9:ae:8a:77:8e:f1:
                    db:98:d1:2e:d5:28:38:8c:4d:55:41:59:49:f6:bc:
                    1c:9d:e7:e8:b5:7b:87:1b:c7:b7:2f:09:af:88:f9:
                    e2:ad:33:97:0d:77:c9:6d:f8:31:c2:f3:11:1d:1f:
                    72:38:f0:45:55:6c:8e:19:3f:cf:fc:ae:04:21:92:
                    4a:88:3d:dc:12:db:b1:6d:a5:bb:18:45:bf:ab:a6:
                    7e:f9:09:8f:2e:30:58:5b:29:02:63:ae:94:3e:b2:
                    f5:f3:7a:ac:00:17:7d:cb:c4:95:c7:a9:77:08:6e:
                    21:1c:e6:ce:a4:de:55:40:5c:ec:9c:fb:e7:a6:d8:
                    87:1e:2c:b5:f5:ca:6b:bd:c2:0a:a7:60:0c:10:3d:
                    96:0e:22:a7:d5:9e:83:56:ab:6e:94:af:b4:91:3f:
                    b0:02:13:5f:79:b3:84:6f:b6:c0:fc:b9:2d:9f:86:
                    19:f5:fb:56:80:cc:51:52:7c:c3:19:ba:9a:f5:c9:
                    73:18:71:e1:e9:1e:23:4f:0e:bd:c1:4d:f3:bc:fb:
                    e3:f4:f4:2c:b7:9e:01:6b:94:d2:2c:e1:18:7e:58:
                    f8:a0:9b:67:4f:f3:8c:01:f1:35:8d:23:18:34:57:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:7C:8B:57:E8:9B:9E:6B:25:B3:DA:C0:F3:AE:5A:4C:07:CE:8A
            X509v3 Authority Key Identifier:
                keyid:57:84:F5:F6:D8:2B:E2:B6:C9:5B:70:93:85:B7:10:FE:5D:1E:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5784F5F6D82BE2B6C95B709385B710FE5D1EF0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/1/3137302e3233382e38302e302f32322d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:90:70:42:0d:67:46:4a:7e:de:24:c9:d0:07:ef:33:3a:dd:
         29:8f:4d:7b:a7:5f:d7:5c:42:04:89:48:3a:41:09:95:b1:ad:
         b9:a2:10:75:6f:f9:f0:51:91:5f:79:b9:31:24:fa:f6:78:fe:
         3a:56:8f:ff:4c:eb:8e:39:a1:42:33:d8:18:03:b2:0c:d0:94:
         a5:ab:27:2c:4d:01:a5:64:53:07:fa:52:2b:cb:f8:35:63:7e:
         70:85:8f:8f:4d:41:9c:66:8f:cf:ed:03:69:d6:d5:23:e0:23:
         ed:91:99:b4:c5:7b:55:de:57:c8:7c:f7:19:41:c3:e4:7e:da:
         e4:f3:78:38:3b:9a:ab:e2:f6:57:06:1a:bf:c4:3d:34:c8:cc:
         20:e5:e8:9d:c2:ee:0e:d9:c8:d9:32:34:4f:5a:02:21:31:02:
         46:b8:02:e7:44:fc:eb:98:84:3e:b4:86:58:c8:06:64:48:4c:
         62:c4:d8:c3:e9:e7:f1:47:6e:98:34:96:a1:55:48:4b:a1:36:
         4a:80:0d:14:ed:8f:89:59:9d:94:f5:5c:63:52:18:5b:26:8f:
         09:2f:a8:b1:3d:5a:f7:cf:3a:0f:9f:98:46:3f:e4:98:76:3d:
         b3:9d:bd:b1:1c:3c:40:26:e8:ee:70:33:75:54:c2:db:eb:61:
         40:25:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 21:29:10 2024 by rpki-client on console-fra.rpki-client.org