Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa
File:                     3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa (raw, json)
Hash identifier:          KVM7cIRT99/PT7Zjp2znDVkmJEa5xYmPtHesyo/XPrE=
Subject key identifier:   38:AA:F2:91:67:68:A5:07:8F:FA:D3:44:49:E9:67:CC:0D:EC:6E:FE
Certificate issuer:       /CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
Certificate serial:       6D347968C67E977D914A734869C3FC372DB235BE
Authority key identifier: 25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa
Signing time:             Thu 04 Apr 2024 12:58:03 +0000
ROA not before:           Thu 04 Apr 2024 12:53:03 +0000
ROA not after:            Thu 03 Apr 2025 12:58:03 +0000
asID:                     264998
IP address blocks:        170.84.156.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:34:79:68:c6:7e:97:7d:91:4a:73:48:69:c3:fc:37:2d:b2:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
        Validity
            Not Before: Apr  4 12:53:03 2024 GMT
            Not After : Apr  3 12:58:03 2025 GMT
        Subject: CN=38AAF2916768A5078FFAD34449E967CC0DEC6EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:2e:8f:7c:89:6c:c4:42:25:4f:ec:31:5e:
                    5b:1b:66:30:f5:55:8b:6f:11:27:70:71:37:a6:a7:
                    5c:a6:58:0b:d1:48:1e:13:89:e6:ec:c2:68:09:1e:
                    17:81:5c:65:29:bc:40:fe:52:26:07:40:49:8d:2c:
                    2e:09:a1:b1:89:ba:1c:ee:a0:50:18:af:77:c3:71:
                    2f:2b:b7:e0:14:64:5e:be:09:07:a6:ac:6b:25:e3:
                    08:1b:82:7c:88:80:30:11:f7:ba:f2:e2:57:11:6b:
                    b9:ad:ff:9e:d7:9b:34:79:ae:cb:02:a8:b0:e1:9d:
                    2f:29:6a:cf:69:bb:73:14:12:c8:3d:31:44:2a:69:
                    97:7e:46:c2:67:69:f6:f7:60:7c:df:46:4a:6f:7b:
                    a3:8f:aa:1b:5a:e4:43:b3:69:54:93:6d:52:16:20:
                    83:b8:c8:a9:ce:e8:91:7d:9a:2c:ed:43:55:ab:be:
                    03:12:1e:d4:b5:30:bc:89:2c:c7:40:f5:b8:63:9f:
                    b1:21:5a:8f:41:95:7a:dd:83:7e:56:08:f9:20:7f:
                    9e:e8:00:b4:34:00:d8:06:5f:7e:37:e4:55:21:cd:
                    23:fe:40:ef:29:31:b5:ca:b1:e2:78:2b:07:2a:06:
                    73:5a:1a:d1:5e:9f:2c:51:d4:0c:b2:a8:1f:b4:a4:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AA:F2:91:67:68:A5:07:8F:FA:D3:44:49:E9:67:CC:0D:EC:6E:FE
            X509v3 Authority Key Identifier:
                keyid:25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135362e302f32332d3233203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:65:34:b1:4c:9b:fb:e7:4c:69:ce:6c:9d:40:6c:46:97:
         22:5c:e7:e7:de:47:7b:e6:f6:3f:11:e2:d6:36:81:12:34:4d:
         e0:b9:0d:1a:e5:1a:bc:63:e3:e1:d5:26:1b:e4:1b:ed:4e:44:
         a3:6c:c9:67:48:cf:a9:88:4e:fe:aa:d3:6e:3d:87:40:07:f5:
         70:32:a7:b5:06:00:d5:fb:cc:69:c5:5a:b4:fa:be:18:32:8c:
         70:8b:97:c2:bc:c1:58:62:51:c1:d1:2b:00:55:66:2f:43:82:
         90:31:f6:18:ad:ec:88:6d:25:a7:fe:e6:87:8d:4d:1f:4f:48:
         fb:50:4d:66:97:7c:dd:a1:81:50:e9:7c:90:e0:80:f2:f7:b0:
         09:18:e0:62:04:8d:28:8a:21:b9:22:a3:44:a3:a9:34:8f:ba:
         6e:91:35:dc:a8:51:59:c4:0b:d3:e1:06:1a:6f:c5:e4:e0:5c:
         e7:d6:c1:c0:ca:95:2f:45:ec:1c:46:6c:36:d4:31:07:64:9c:
         98:ab:62:c0:d5:55:dd:57:26:3b:59:64:61:2a:4d:a6:7f:d3:
         b9:bf:0c:f1:8c:a9:b7:a3:4a:f6:7e:5e:19:4e:9b:ce:eb:73:
         f3:20:89:b9:21:95:6c:da:c3:63:a0:9e:55:56:ac:be:5a:70:
         6f:ac:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 08:03:48 2024 by rpki-client on console-ams.rpki-client.org