Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3137302e37392e3132382e302f32322d3332203d3e20323633343836.roa
File:                     3137302e37392e3132382e302f32322d3332203d3e20323633343836.roa (raw, json)
Hash identifier:          qEncXxc+Iko0GK2qk2RVrhwuIuqOTYtjwyP+fsVYkTM=
Subject key identifier:   09:6F:E9:CE:91:05:25:B2:F4:C5:5B:2C:92:29:6B:7A:05:BE:4E:D1
Certificate issuer:       /CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
Certificate serial:       13295EAF6A3DFD55959F8BE39876453A4A201E09
Authority key identifier: 3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3137302e37392e3132382e302f32322d3332203d3e20323633343836.roa
Signing time:             Mon 26 Aug 2024 18:33:50 +0000
ROA not before:           Mon 26 Aug 2024 18:28:50 +0000
ROA not after:            Mon 25 Aug 2025 18:33:50 +0000
asID:                     263486
IP address blocks:        170.79.128.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:29:5e:af:6a:3d:fd:55:95:9f:8b:e3:98:76:45:3a:4a:20:1e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5A521D0400D454F230DFD5AC8D95290C0A8A51
        Validity
            Not Before: Aug 26 18:28:50 2024 GMT
            Not After : Aug 25 18:33:50 2025 GMT
        Subject: CN=096FE9CE910525B2F4C55B2C92296B7A05BE4ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:c3:f0:31:2f:5b:fd:ec:1a:08:87:cc:4a:
                    6c:a1:99:c9:48:40:52:f2:e1:09:0b:7d:28:21:00:
                    0d:5b:98:7b:e0:8c:b4:69:b5:91:c0:0f:38:97:17:
                    00:15:32:e7:95:5b:bc:1b:7a:f7:7f:14:61:42:9f:
                    4b:95:54:2f:cb:03:ef:71:d6:eb:91:56:b6:35:5a:
                    a7:06:26:ff:87:cf:b8:46:2e:82:47:20:f0:42:67:
                    df:7f:9b:05:a4:51:c0:cb:24:91:76:44:b6:7e:76:
                    a9:69:41:10:16:04:cc:e7:b5:1e:d3:0c:6c:30:23:
                    71:8a:d5:9d:7b:26:02:74:a3:72:9e:49:fb:71:3d:
                    03:c9:82:45:c3:56:91:8b:67:d0:a8:e2:b7:1e:cf:
                    6e:83:61:01:04:2f:7d:24:a6:8b:2d:72:cd:7b:02:
                    16:93:12:de:51:0f:bd:8f:c1:cb:54:06:0c:35:ea:
                    81:a9:f4:72:b9:52:da:89:6e:be:25:af:e6:c4:25:
                    01:70:5a:c2:61:40:61:e5:9a:57:04:cf:2c:cd:00:
                    cf:27:7e:71:12:4e:a8:23:3a:42:f8:10:92:cd:fd:
                    28:59:bb:43:c9:38:28:2b:85:a4:eb:cd:36:38:5e:
                    4f:b7:7e:4e:56:ed:06:2c:8c:26:46:a1:93:63:4b:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:E9:CE:91:05:25:B2:F4:C5:5B:2C:92:29:6B:7A:05:BE:4E:D1
            X509v3 Authority Key Identifier:
                keyid:3C:5A:52:1D:04:00:D4:54:F2:30:DF:D5:AC:8D:95:29:0C:0A:8A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C5A521D0400D454F230DFD5AC8D95290C0A8A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTHdLa73uJfTp5DaRa5nHwLcxRBiMDfogqTw37ni3fa/0/3137302e37392e3132382e302f32322d3332203d3e20323633343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:b1:b6:35:4c:80:0d:c3:dd:b9:47:06:bb:29:43:05:44:
         17:b2:5c:c3:3a:11:79:65:a1:09:c0:22:38:1b:ea:72:01:0b:
         a4:31:ce:4d:1d:c4:9f:e0:cf:a8:81:21:95:6c:c1:a5:0a:4f:
         4e:28:10:68:55:79:f2:1b:62:27:8a:ec:dd:0a:51:75:06:e3:
         ab:41:d6:f2:17:35:ed:43:18:cf:84:89:64:ea:f8:8e:dc:bc:
         7a:37:65:ad:3c:44:ef:3f:78:34:e5:fd:87:60:5f:f0:d6:1c:
         0c:50:e3:76:eb:fe:53:4d:f3:79:21:40:73:eb:27:57:a7:87:
         db:68:81:d7:1c:09:de:94:ec:67:27:e9:fb:80:ff:14:23:d9:
         77:94:ca:a5:da:15:08:0a:be:04:75:eb:32:26:af:fa:ec:b6:
         85:c9:11:3d:ec:f3:a1:65:5d:44:61:0b:e9:27:d1:19:c5:0d:
         27:4f:39:67:b6:b2:13:6c:fd:0d:75:31:97:48:2d:57:61:ce:
         c1:1d:f7:fe:c0:a6:11:d9:48:36:fb:1b:27:e2:68:a8:43:02:
         67:26:35:bb:ef:2f:f4:7b:2c:f4:b3:38:5e:9e:c4:47:8b:19:
         db:d1:5c:bd:0e:38:b2:2b:28:04:a0:a5:04:9b:83:3e:73:ac:
         db:d6:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 07:36:16 2024 by rpki-client on console-ams.rpki-client.org