Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa
File:                     3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa (raw, json)
Hash identifier:          Nku5bc+G588Gy/n2GQ5BgUShHq8vy265DbycLQXCpME=
Subject key identifier:   AA:EE:9A:33:59:14:C9:DE:26:84:F0:86:86:DF:DC:E4:6E:CB:BD:3C
Certificate issuer:       /CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
Certificate serial:       700BD9477875173EA00B4D89042D8F34B4A25857
Authority key identifier: 23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa
Signing time:             Wed 03 Apr 2024 19:11:43 +0000
ROA not before:           Wed 03 Apr 2024 19:06:43 +0000
ROA not after:            Wed 02 Apr 2025 19:11:43 +0000
asID:                     265055
IP address blocks:        170.231.122.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0b:d9:47:78:75:17:3e:a0:0b:4d:89:04:2d:8f:34:b4:a2:58:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15
        Validity
            Not Before: Apr  3 19:06:43 2024 GMT
            Not After : Apr  2 19:11:43 2025 GMT
        Subject: CN=AAEE9A335914C9DE2684F08686DFDCE46ECBBD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:e8:0d:e8:41:7f:c3:9c:d5:b6:28:b7:cf:
                    32:95:4a:6e:94:bf:ae:97:4c:88:1f:3d:e4:2d:60:
                    0f:f2:a1:71:1e:ab:d0:83:4f:18:f0:e4:48:d2:7f:
                    f1:0f:3c:26:97:5a:75:91:fa:04:b7:ee:5b:d2:ce:
                    80:90:57:6a:48:57:da:84:bf:9f:48:f0:7f:6e:23:
                    74:9b:e3:c3:33:72:c6:01:00:b8:8a:9b:cc:f7:57:
                    e8:58:2f:bf:7a:bd:36:3d:4c:76:d8:6e:33:c1:b6:
                    20:87:5b:b1:44:06:e1:9f:66:89:49:ab:32:be:32:
                    77:25:aa:54:50:f0:2f:a2:e5:1a:4d:4e:2f:7b:c6:
                    45:1b:04:cd:7b:bb:6a:76:83:73:ac:df:c3:12:85:
                    37:9d:5e:e9:0f:5b:7a:d5:a0:8c:88:e7:83:39:de:
                    11:93:00:79:93:8b:ae:55:54:7f:bc:87:08:7c:b0:
                    db:f8:9e:64:5a:35:0c:8d:05:31:7d:ff:7d:f1:0c:
                    95:25:a1:7f:d7:3d:16:c7:50:cf:a1:38:97:4f:f9:
                    75:a9:a1:5f:b5:69:69:b1:06:4f:6a:ce:3f:aa:e6:
                    1e:cc:82:a6:c9:7b:c3:77:a8:55:ab:fa:21:85:a5:
                    6b:f3:4d:7c:63:18:1c:5a:5b:03:b6:59:67:5b:1d:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:9A:33:59:14:C9:DE:26:84:F0:86:86:DF:DC:E4:6E:CB:BD:3C
            X509v3 Authority Key Identifier:
                keyid:23:A7:49:5C:CF:20:0B:1F:CE:8B:FF:D9:A3:58:8D:C7:38:6F:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A7495CCF200B1FCE8BFFD9A3588DC7386FDD15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJLhJfe6hkNEJAxa6z9tMktNPsBuiYnErLxfhac5fshU/1/3137302e3233312e3132322e302f32332d3233203d3e20323635303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:d5:de:a8:57:21:11:39:2e:51:f1:b9:23:73:81:0c:fa:58:
         cf:b4:91:81:c6:92:93:02:c0:e1:3e:f7:9c:31:ae:1f:d6:cb:
         db:06:f9:34:da:92:9f:87:28:89:87:e9:eb:bf:1f:fb:a9:6e:
         01:a2:2d:5e:34:40:f0:bf:0d:73:00:e0:6b:f9:ac:43:26:3d:
         e6:db:65:aa:2c:7f:f3:60:93:1e:a7:d2:2c:48:88:bc:0d:51:
         9a:b4:5e:a5:d5:ab:63:56:e2:93:42:c1:3c:46:f3:0d:91:c9:
         b3:e5:4c:c6:c3:7e:7f:6f:03:a2:a6:11:8c:e3:e4:02:32:78:
         31:24:bb:95:4a:f7:cb:48:41:9b:28:87:a8:2d:28:88:fe:ac:
         4b:6a:58:ce:59:02:38:e3:0c:da:c3:f9:24:06:44:9a:8d:d1:
         cb:bd:c6:96:ff:79:39:16:31:66:b0:5b:fb:a2:15:0c:e8:aa:
         5f:34:23:75:4d:bc:72:a2:f8:cf:47:5c:af:80:2b:42:63:44:
         45:d8:f3:59:ae:b0:ad:5c:9b:26:d2:41:b2:4c:de:c9:13:50:
         79:d2:54:0e:3f:3b:8a:03:1e:6a:9a:6a:39:a8:bd:8d:db:e7:
         06:cc:91:f2:f3:3e:2c:6b:e2:80:41:8f:2d:27:0a:a6:6b:6e:
         f3:c3:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:09 2024 by rpki-client on console-ams.rpki-client.org