Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/3137302e37382e3137322e302f32322d3233203d3e20323636323938.roa
File:                     3137302e37382e3137322e302f32322d3233203d3e20323636323938.roa (raw, json)
Hash identifier:          mJmUGcqgX6+EfyO9LxmCxdrUei+sQbop5DfQXKDdOz4=
Subject key identifier:   2E:83:74:32:EE:55:7A:DB:C0:43:21:04:94:B7:B8:AD:78:F9:1D:0C
Certificate issuer:       /CN=38391C65CACADCE14764C39BDCAF54A341E5BCD3
Certificate serial:       749CE61FB669FCB4CFAF5003CE6032605961D0D6
Authority key identifier: 38:39:1C:65:CA:CA:DC:E1:47:64:C3:9B:DC:AF:54:A3:41:E5:BC:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38391C65CACADCE14764C39BDCAF54A341E5BCD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/3137302e37382e3137322e302f32322d3233203d3e20323636323938.roa
Signing time:             Mon 13 May 2024 13:41:17 +0000
ROA not before:           Mon 13 May 2024 13:36:17 +0000
ROA not after:            Mon 12 May 2025 13:41:17 +0000
asID:                     266298
IP address blocks:        170.78.172.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9c:e6:1f:b6:69:fc:b4:cf:af:50:03:ce:60:32:60:59:61:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38391C65CACADCE14764C39BDCAF54A341E5BCD3
        Validity
            Not Before: May 13 13:36:17 2024 GMT
            Not After : May 12 13:41:17 2025 GMT
        Subject: CN=2E837432EE557ADBC043210494B7B8AD78F91D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:28:8b:5a:a6:9f:6d:89:23:06:f7:fe:5c:13:
                    dd:1a:98:fb:47:f9:85:b1:54:a4:59:4c:39:a0:d1:
                    df:f4:4b:f2:66:30:9d:ab:68:b7:ad:36:54:de:e7:
                    1c:d5:b3:b7:07:a3:5b:94:0a:da:29:98:37:40:88:
                    2d:02:38:1b:8d:df:4d:12:26:f7:d9:0b:ab:cb:0f:
                    b2:d9:36:a5:c3:d2:21:74:ba:61:ad:29:24:9a:6d:
                    04:38:18:f3:ed:37:48:be:d6:80:25:7b:58:74:c7:
                    55:68:1d:14:5a:1c:78:7b:da:b5:a3:47:ec:89:f3:
                    e6:39:d3:9e:ca:de:46:c4:99:f4:a8:d1:ea:98:d8:
                    d5:e9:60:0b:5c:a6:f6:5c:6e:d3:a4:c3:97:2d:71:
                    9a:89:d6:f5:0b:3e:76:31:21:fc:f9:8e:03:9b:da:
                    e8:76:31:6f:83:b6:94:8c:bf:0e:ca:43:88:ac:b0:
                    92:c0:94:b3:55:bc:53:aa:4c:32:55:1e:61:89:e7:
                    52:c2:5b:60:f7:33:d2:9c:72:74:c5:90:2b:6f:17:
                    93:4e:a8:a0:63:43:ef:29:64:38:be:6f:97:91:07:
                    37:42:ab:66:3f:5f:62:c9:89:8c:05:cb:af:50:e6:
                    00:aa:2b:d1:f8:16:9e:90:aa:45:8c:78:c5:0e:e1:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:74:32:EE:55:7A:DB:C0:43:21:04:94:B7:B8:AD:78:F9:1D:0C
            X509v3 Authority Key Identifier:
                keyid:38:39:1C:65:CA:CA:DC:E1:47:64:C3:9B:DC:AF:54:A3:41:E5:BC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/38391C65CACADCE14764C39BDCAF54A341E5BCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38391C65CACADCE14764C39BDCAF54A341E5BCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/3137302e37382e3137322e302f32322d3233203d3e20323636323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:61:4a:92:2b:5c:85:ce:5b:9e:af:1c:58:c8:f2:2a:54:d6:
         2d:79:0d:f6:f0:80:e1:d1:3d:ff:97:2a:f4:5a:35:2d:b4:58:
         2a:60:a0:02:e5:91:97:a8:8f:4d:ea:fc:62:3c:80:d0:ad:e3:
         25:57:70:82:1f:02:ce:ac:74:8b:f1:ed:20:f3:15:a2:9f:23:
         6c:00:ca:4d:06:2d:81:b0:27:85:19:50:d8:57:07:b2:08:ed:
         6f:91:bb:f8:f6:32:a9:01:08:a5:a9:e0:f5:d8:e6:d1:f6:44:
         13:b8:ce:06:37:ec:2d:fe:61:50:f2:e3:71:a1:c5:e6:0a:69:
         0d:05:40:af:95:f5:51:5c:b1:bd:94:76:0a:e6:9f:46:b9:e6:
         e8:6c:0c:a3:75:6f:63:9d:52:f9:95:1f:fe:52:32:0a:a5:a5:
         74:a5:6a:ce:46:3c:2f:02:bf:cd:42:b5:6e:24:f8:1e:6d:03:
         88:f1:b6:22:04:1e:b2:bf:38:2c:6f:3e:a1:5e:25:d3:b0:ce:
         dd:5e:d2:d7:cb:84:1c:ee:fc:0c:ca:b5:af:0f:0d:26:9a:7e:
         bd:ac:20:3c:a2:9c:4b:cd:66:80:dc:7c:07:d4:ca:69:76:57:
         35:ae:07:a6:88:bc:17:c8:7d:49:9e:91:06:e1:43:cb:7d:38:
         5b:69:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 12:10:59 2024 by rpki-client on console-fra.rpki-client.org