Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa
File:                     3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa (raw, json)
Hash identifier:          Nu69Zls9UXcgJMyUjlAaeBkV4fEOwiu783SdBe9fPQ0=
Subject key identifier:   AC:D2:49:4A:7C:5F:86:69:AE:6C:BD:F7:17:A5:54:11:6F:3D:9C:39
Certificate issuer:       /CN=1EF34900B7CA07556BBD0DFBBBE581A49E06720B
Certificate serial:       4E8A632BE4DAF885342ABD75EA11C828FD4718CD
Authority key identifier: 1E:F3:49:00:B7:CA:07:55:6B:BD:0D:FB:BB:E5:81:A4:9E:06:72:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF34900B7CA07556BBD0DFBBBE581A49E06720B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa
Signing time:             Mon 03 Jun 2024 21:06:13 +0000
ROA not before:           Mon 03 Jun 2024 21:01:13 +0000
ROA not after:            Mon 02 Jun 2025 21:06:13 +0000
asID:                     272757
IP address blocks:        170.244.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8a:63:2b:e4:da:f8:85:34:2a:bd:75:ea:11:c8:28:fd:47:18:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF34900B7CA07556BBD0DFBBBE581A49E06720B
        Validity
            Not Before: Jun  3 21:01:13 2024 GMT
            Not After : Jun  2 21:06:13 2025 GMT
        Subject: CN=ACD2494A7C5F8669AE6CBDF717A554116F3D9C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:d2:73:4e:d3:03:5f:99:dc:b6:35:22:f6:
                    6e:79:16:2d:3f:96:ba:0f:7f:97:a9:ef:8a:ca:bc:
                    a1:01:ea:63:2b:f1:7e:50:8d:88:93:31:9a:7a:dd:
                    15:3f:06:fc:55:4d:8e:9a:ed:a8:6e:35:32:a7:27:
                    4e:82:be:7c:fe:33:6e:28:b7:f7:10:f0:e5:0c:11:
                    fd:61:a7:a3:56:6e:3c:9f:c4:93:b9:91:92:bc:ec:
                    71:85:27:63:46:2d:68:e3:d9:57:81:cf:d1:45:18:
                    97:06:a4:1c:e2:4d:99:25:8f:e2:8c:83:df:81:34:
                    98:dc:44:c8:52:49:1a:70:42:50:80:51:f3:fd:43:
                    e5:a9:44:3d:9f:db:f6:2e:ef:db:f7:4a:49:6d:f7:
                    75:30:1d:bf:e3:af:41:90:33:90:70:9c:1c:0e:ea:
                    05:34:82:4a:c6:5f:76:5e:d2:79:3b:9a:40:ea:4b:
                    c7:25:03:9d:90:1b:13:78:b4:4e:8e:c1:f7:77:66:
                    ba:58:9e:60:58:31:d2:0c:cb:52:54:08:70:4a:10:
                    d7:67:ef:58:fa:a3:7a:17:4e:27:ad:8e:61:9d:c9:
                    9d:be:02:5f:29:28:c2:ed:37:95:41:6f:e0:f1:c8:
                    5f:09:af:c8:ed:01:8a:07:95:0e:6f:90:65:42:da:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D2:49:4A:7C:5F:86:69:AE:6C:BD:F7:17:A5:54:11:6F:3D:9C:39
            X509v3 Authority Key Identifier:
                keyid:1E:F3:49:00:B7:CA:07:55:6B:BD:0D:FB:BB:E5:81:A4:9E:06:72:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/1EF34900B7CA07556BBD0DFBBBE581A49E06720B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF34900B7CA07556BBD0DFBBBE581A49E06720B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/3137302e3234342e33362e302f32322d3234203d3e20323732373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:21:97:e5:f0:c9:d1:e6:6b:40:4e:b6:d3:73:b4:d5:c4:
         ff:7a:2d:a4:db:e5:78:51:a9:a3:2d:68:fa:3f:dd:d8:80:8d:
         2f:83:02:b7:ea:6b:ee:20:66:65:87:3c:32:75:e2:3c:58:ff:
         7e:89:f3:1a:98:0c:4c:5a:4c:0b:f0:ac:b7:f8:d1:aa:18:8b:
         f6:e5:2a:48:7a:ca:cd:63:d3:f2:e0:5f:a9:d8:74:aa:09:62:
         3d:9c:c9:c7:c1:ab:e4:53:13:4b:82:83:43:18:d2:96:56:ce:
         d0:e3:d9:bc:5f:5b:c1:15:e2:bf:3a:a2:f5:8b:71:7d:3d:f5:
         0d:f0:8e:b2:8d:93:ed:2b:c4:75:03:86:66:52:1b:dc:03:07:
         33:e9:75:84:9d:3f:a3:0b:f7:e1:65:a2:93:3f:cd:4a:2c:6a:
         6e:c4:a5:07:14:b4:2f:d2:d4:b9:c5:13:19:1b:40:0c:c6:ae:
         57:63:8e:03:db:46:1f:5e:37:db:5c:36:74:01:24:11:20:e1:
         5a:09:92:d3:2b:70:22:da:29:38:d2:5e:bf:b0:81:3b:a6:19:
         a5:6d:d0:84:64:77:6d:cf:a7:3e:a7:1b:46:03:76:a2:63:bc:
         63:4a:54:ab:1a:ab:74:ba:f3:d4:f2:00:49:d5:0b:5b:99:89:
         af:f5:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 02:24:46 2024 by rpki-client on console-fra.rpki-client.org