Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3130392e302f32342d3234203d3e20323636343136.roa
File:                     3137302e38312e3130392e302f32342d3234203d3e20323636343136.roa (raw, json)
Hash identifier:          4hAuFaaRd9+lFX89dKReXvhIBqkbQts6Z/egwACwr5g=
Subject key identifier:   59:E5:E7:66:62:6B:5E:53:4E:4C:A2:BC:CC:9E:1D:4F:63:CF:12:EC
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       19E3FF9D43229E79616599253DC68708CB8F781F
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3130392e302f32342d3234203d3e20323636343136.roa
Signing time:             Sat 25 May 2024 15:15:09 +0000
ROA not before:           Sat 25 May 2024 15:10:09 +0000
ROA not after:            Sat 24 May 2025 15:15:09 +0000
asID:                     266416
IP address blocks:        170.81.109.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:ff:9d:43:22:9e:79:61:65:99:25:3d:c6:87:08:cb:8f:78:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 25 15:10:09 2024 GMT
            Not After : May 24 15:15:09 2025 GMT
        Subject: CN=59E5E766626B5E534E4CA2BCCC9E1D4F63CF12EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:47:72:c0:7a:48:0c:46:ba:13:9a:a2:07:
                    c9:ce:57:51:6d:77:45:79:77:b9:26:1c:1d:9d:9d:
                    74:da:15:d7:1c:5e:2c:1c:db:de:06:62:8d:8e:3f:
                    4c:86:4a:87:c9:07:48:ce:2a:a3:a2:62:2d:b3:fe:
                    57:20:a0:e7:cb:22:39:27:e6:f0:97:17:6d:d6:ad:
                    4e:51:3e:9f:27:67:33:4c:96:7b:c0:14:d7:c0:d3:
                    61:0f:ab:10:3a:3a:00:fc:09:3e:95:b9:cf:c3:b2:
                    a9:8b:7c:77:90:04:f1:06:b4:7a:4c:9e:c0:d9:0f:
                    1c:2f:93:7b:cd:34:9b:77:f5:b8:54:6b:ea:b4:71:
                    77:4a:d2:d4:76:d0:07:bd:c9:d0:a8:2f:08:54:90:
                    98:a2:df:77:94:78:47:83:39:b5:ae:85:d2:ba:99:
                    9e:3a:9d:e9:d5:f5:81:06:db:7e:bf:e7:f1:42:f7:
                    df:20:2c:46:2d:63:39:2a:b4:09:a3:7f:76:5f:41:
                    4c:f3:90:1a:6e:8e:25:a9:03:61:5f:23:3b:80:ea:
                    4c:71:66:62:87:1e:35:eb:03:de:c4:e0:28:4e:50:
                    be:45:e7:7c:6c:25:f2:bb:ec:39:7b:af:27:06:87:
                    ae:1f:ef:1e:71:75:b2:cd:e4:2a:b4:8e:4b:43:72:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:E7:66:62:6B:5E:53:4E:4C:A2:BC:CC:9E:1D:4F:63:CF:12:EC
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3130392e302f32342d3234203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:aa:8e:3a:93:0c:5e:0e:e6:0d:d8:dd:8b:88:5b:e0:32:dc:
         32:f9:dd:26:d0:2f:cc:8a:13:e3:63:77:fa:1b:f9:06:2a:4a:
         d1:ce:ae:eb:d1:61:73:c8:c8:55:dd:9f:c9:a9:2a:10:dc:b1:
         ec:ef:2b:85:e9:07:75:e4:53:a2:64:f4:b4:91:86:91:f4:ba:
         31:70:c4:67:e7:5b:3e:55:ee:61:1c:ce:c8:cb:ff:52:5a:7f:
         4c:e6:c0:f9:5c:1a:29:b3:11:78:38:57:72:3f:42:a1:53:19:
         31:7d:f7:62:a7:0e:a1:1d:58:e2:a7:4b:a8:37:b0:18:b6:60:
         a7:c1:3b:9f:b6:d6:f9:8c:3f:e8:dc:86:f8:a7:4b:c3:a1:48:
         40:b8:b6:c0:13:07:43:f2:0e:fb:8b:31:3e:35:07:ee:0a:fd:
         a7:14:3b:ba:f0:ce:49:0d:7e:f9:8f:c0:60:61:85:ff:a0:75:
         eb:74:af:7f:eb:4b:7a:e9:46:f7:a8:2a:cd:51:94:e9:6e:ce:
         ca:f9:cd:d3:48:c4:b2:6c:2f:5e:a9:83:d4:3c:8b:ae:f1:3e:
         2b:9b:23:cc:f8:45:28:03:7e:e5:ec:79:ef:61:d3:24:0b:4d:
         0e:95:d8:31:a3:76:3f:f9:90:6d:7e:7c:4f:70:d3:09:3e:18:
         26:ad:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 03:51:10 2024 by rpki-client on console-fra.rpki-client.org