Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa
File:                     3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa (raw, json)
Hash identifier:          9sZnoC/8l5sHl73ZchGQ9fXj8mGzzAzGCsdGxKrDduc=
Subject key identifier:   D0:FA:21:FF:DC:34:59:CD:0D:09:C6:8C:70:6F:F6:C8:97:01:3F:E7
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       6FF0863ACF060E648A1289B7080760383F3B2B65
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa
Signing time:             Mon 08 Jul 2024 16:53:09 +0000
ROA not before:           Mon 08 Jul 2024 16:48:09 +0000
ROA not after:            Mon 07 Jul 2025 16:53:09 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f0:86:3a:cf:06:0e:64:8a:12:89:b7:08:07:60:38:3f:3b:2b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: Jul  8 16:48:09 2024 GMT
            Not After : Jul  7 16:53:09 2025 GMT
        Subject: CN=D0FA21FFDC3459CD0D09C68C706FF6C897013FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:37:3b:cb:f5:c2:05:65:44:bb:46:71:b2:
                    18:32:2f:06:4b:e9:f9:50:c5:8a:b9:15:76:2b:6d:
                    2d:8b:56:e8:20:5a:eb:e3:c0:ce:89:c1:2e:21:e1:
                    d5:7c:81:65:99:91:71:e1:d3:e7:39:e2:de:ba:fa:
                    0c:5f:8c:cf:9e:0e:bb:b5:13:f4:d9:da:e5:5d:3d:
                    0e:bf:25:29:f5:74:be:7c:b9:c4:1e:7d:a1:8f:9c:
                    26:a3:17:87:f3:99:6e:b7:63:f8:5e:29:10:48:a8:
                    e8:c4:bb:5b:e8:ed:df:3c:77:b2:43:4a:a4:e2:ef:
                    43:80:a4:e3:a1:e5:fe:33:b6:5e:01:46:7c:58:74:
                    80:fd:b4:1e:4c:16:a3:38:0e:5f:60:8f:a0:ca:6a:
                    ad:8a:52:97:44:43:0a:1e:0d:fc:f3:94:f3:ed:e7:
                    ed:c5:c3:14:83:8f:b9:ec:d1:ca:de:b0:e0:d6:5c:
                    9c:93:42:70:40:cc:b1:aa:8c:d1:40:94:37:d4:fb:
                    c0:b5:13:7e:22:bd:55:8d:8b:18:2c:0b:c5:a5:cf:
                    80:ff:6a:ff:db:de:48:2e:03:0a:ca:dc:9d:32:b6:
                    df:fe:2e:de:24:4f:c4:52:2d:4a:1c:24:b5:a7:33:
                    95:d3:5b:eb:b1:96:16:fa:d5:c4:a2:28:fc:47:4e:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FA:21:FF:DC:34:59:CD:0D:09:C6:8C:70:6F:F6:C8:97:01:3F:E7
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/3134332e3230322e3132382e302f32322d3232203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:f6:b5:ea:14:e7:2a:45:0a:4b:11:0c:ff:87:5f:99:26:
         f7:c9:72:2a:47:72:6c:69:cb:36:22:f3:c1:67:4d:de:07:8b:
         37:cb:bd:c1:d4:5b:8d:a3:91:37:d1:03:85:0c:b2:56:b4:42:
         a9:08:26:8b:c9:49:eb:d4:5a:b1:0a:aa:3a:c7:59:f3:88:6d:
         ca:e1:8b:a5:51:cc:9e:75:c9:dd:b7:5d:c0:ce:75:a7:18:87:
         3e:78:50:a2:8e:b2:69:fd:6b:ff:e0:e1:fd:c4:de:7d:41:c7:
         e6:8c:8c:f5:3d:33:15:78:03:af:98:94:fa:46:b6:5d:54:67:
         da:9f:c0:aa:e4:2d:2b:69:de:60:8f:20:6e:f1:37:86:70:7a:
         aa:1d:7c:d3:b0:fd:58:94:a0:63:ec:f0:ad:e6:3d:f3:d0:b9:
         d8:eb:bd:4e:c6:2e:66:09:2d:b7:b8:52:11:1d:7c:d6:1f:a0:
         a4:cb:f3:c8:b1:bf:e8:eb:10:3f:b1:c1:27:96:24:77:54:dc:
         a0:c1:54:50:90:81:f7:29:6e:a3:f5:b8:01:d1:40:e2:aa:29:
         e7:46:a6:93:a2:f7:19:64:58:a2:d5:2d:b7:dd:52:b7:1e:c5:
         3c:e6:39:79:4a:22:db:1c:be:ff:a5:dc:72:25:90:26:7c:d1:
         91:16:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org