Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa
File:                     3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          0vPGcVIWlBFyiwzUiftb4roc7HnoyWhXUs+2e7l1YGg=
Subject key identifier:   79:AA:2A:75:B2:F6:CB:F1:61:1E:79:4B:CD:03:E9:46:07:08:79:D6
Certificate issuer:       /CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
Certificate serial:       7C3D13E33274967BD0E17797D0C35D4BB888EBD6
Authority key identifier: D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa
Signing time:             Thu 04 Apr 2024 08:11:35 +0000
ROA not before:           Thu 04 Apr 2024 08:06:35 +0000
ROA not after:            Thu 03 Apr 2025 08:11:35 +0000
asID:                     262346
IP address blocks:        170.150.100.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3d:13:e3:32:74:96:7b:d0:e1:77:97:d0:c3:5d:4b:b8:88:eb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
        Validity
            Not Before: Apr  4 08:06:35 2024 GMT
            Not After : Apr  3 08:11:35 2025 GMT
        Subject: CN=79AA2A75B2F6CBF1611E794BCD03E946070879D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:73:9d:64:24:43:ce:16:14:4a:7e:de:2b:
                    1f:fc:05:e5:1c:0f:91:1b:0a:7d:2a:73:56:cd:4f:
                    19:ca:30:53:ce:9a:31:c5:4d:1c:7b:d2:af:2f:3f:
                    c0:29:59:a3:64:73:26:fb:af:d2:91:72:1b:22:cb:
                    3d:d7:dc:79:b1:d3:16:bf:e9:3b:2e:2d:d9:cc:83:
                    1a:29:88:23:9c:7d:07:e9:47:11:37:0b:ab:c2:c3:
                    00:f0:a5:42:f5:20:dd:5b:c0:19:2f:90:5c:42:2e:
                    aa:31:05:8f:c7:b9:48:52:7c:33:34:9a:7d:f8:21:
                    20:5e:9d:87:d7:20:35:85:4c:bf:ba:7d:cc:da:bd:
                    53:fe:4a:fe:ad:e3:64:ec:82:4b:04:36:a3:18:e5:
                    bb:24:55:3a:c2:d6:bb:96:a0:ea:14:7c:a1:0a:a9:
                    1a:d4:ab:4b:71:77:b9:3f:c5:d2:ed:0e:c6:9f:25:
                    b0:4c:58:0c:00:42:3a:fd:e7:c9:f1:dd:cf:c0:06:
                    95:10:9c:48:be:25:47:cb:86:da:00:1f:78:c3:37:
                    4b:24:09:17:fe:b1:4d:61:90:7f:dc:ab:aa:4b:e1:
                    c8:dc:da:f1:55:a5:0e:99:96:9a:bf:70:8c:f1:58:
                    e7:1c:e3:b8:81:c5:45:b9:d6:6c:8f:06:70:a0:d5:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:2A:75:B2:F6:CB:F1:61:1E:79:4B:CD:03:E9:46:07:08:79:D6
            X509v3 Authority Key Identifier:
                keyid:D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3137302e3135302e3130302e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:f1:60:fb:25:3e:82:ba:e8:19:38:a6:19:c0:5f:97:c3:ad:
         d1:10:5f:c4:ec:f8:91:08:6e:1f:76:54:ff:33:34:f3:e9:d6:
         04:06:1e:f2:79:48:4c:cf:b6:d5:54:45:57:2e:ab:36:46:41:
         e4:6b:ac:45:10:0b:b8:51:2b:da:ac:99:db:9e:c7:cf:a4:70:
         63:c6:8b:02:b8:2d:b0:cf:2f:b4:59:66:6b:c6:97:58:a5:51:
         60:eb:0c:b0:0d:87:4b:c0:a4:43:cb:1d:cb:ff:9f:a5:e7:c7:
         23:00:24:af:8e:13:1c:1b:5c:7a:2d:8e:47:bf:7d:4d:31:2a:
         8c:c7:f6:e1:7f:ad:7d:8d:51:72:7c:00:48:cc:14:e4:d8:92:
         a1:1f:0a:cc:9b:f5:b0:04:e1:d2:2e:1e:a9:31:9a:0f:87:d2:
         8a:93:7b:1b:c9:25:22:75:99:66:d8:e8:ae:8b:32:e3:75:b1:
         41:b0:01:28:bc:ab:02:61:4a:20:8f:18:68:c4:25:b3:f5:8f:
         cd:85:e3:8b:4d:29:6f:fb:48:90:c5:be:d8:9b:3d:1e:47:c2:
         88:a8:97:9c:5c:c1:1f:98:f1:38:eb:30:07:88:27:4e:de:40:
         c5:6e:55:d4:e5:c2:4e:de:83:dc:6b:61:fe:e0:f3:58:c6:fd:
         0c:c4:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 07:42:58 2024 by rpki-client on console-fra.rpki-client.org