Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa
File:                     3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa (raw, json)
Hash identifier:          TztuB3avPnNv4VR8+LjQZBkNSSbzrm3Zq4t0TLREOmw=
Subject key identifier:   34:9E:F3:24:42:3D:96:21:19:29:3C:FA:D2:04:FB:A8:EC:4F:44:EB
Certificate issuer:       /CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
Certificate serial:       2D8EFA8150FFC5E24E883F298936ECA09D4F82F1
Authority key identifier: 25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa
Signing time:             Thu 04 Apr 2024 12:58:03 +0000
ROA not before:           Thu 04 Apr 2024 12:53:03 +0000
ROA not after:            Thu 03 Apr 2025 12:58:03 +0000
asID:                     264998
IP address blocks:        170.84.158.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:fa:81:50:ff:c5:e2:4e:88:3f:29:89:36:ec:a0:9d:4f:82:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
        Validity
            Not Before: Apr  4 12:53:03 2024 GMT
            Not After : Apr  3 12:58:03 2025 GMT
        Subject: CN=349EF324423D962119293CFAD204FBA8EC4F44EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:a0:57:9a:b3:80:01:23:08:d9:f4:5b:ec:
                    e3:ac:32:c9:eb:91:dc:c2:aa:21:ad:21:dc:b9:f9:
                    47:be:6c:06:49:97:fc:89:b8:93:fd:a2:1e:d6:8c:
                    0f:61:7c:bd:06:4c:d5:40:be:60:df:4b:41:56:30:
                    56:77:d4:83:e5:7b:29:62:b7:1b:8f:8e:cb:be:9e:
                    69:d6:47:9e:04:8d:e9:a4:23:7c:8d:e6:2b:b1:ef:
                    0a:50:9e:c1:8c:10:09:43:57:ed:72:90:f6:88:27:
                    d1:e9:1e:2f:55:db:7a:fc:92:9c:db:07:80:4a:a4:
                    de:a0:b8:05:b7:34:f4:b2:75:2a:67:92:51:43:d4:
                    65:fe:09:63:05:5b:2d:2a:f7:8b:b3:60:96:e1:4b:
                    a7:a7:da:f5:7b:30:ef:4b:0c:13:c8:7d:d9:9e:33:
                    0c:ae:44:b7:b7:12:77:5d:41:67:80:4b:5d:50:28:
                    4c:db:83:3c:09:06:30:2f:24:8a:64:33:0f:47:60:
                    ab:f4:14:f4:72:de:be:82:3b:10:47:d1:f5:42:de:
                    39:7d:ef:85:1a:9c:87:e8:01:cf:7f:c0:71:f4:e9:
                    5d:b9:7c:6b:5d:2d:df:8c:47:8c:bf:ec:93:5b:90:
                    d1:be:ad:08:0f:85:41:93:bf:5b:90:9d:97:87:af:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9E:F3:24:42:3D:96:21:19:29:3C:FA:D2:04:FB:A8:EC:4F:44:EB
            X509v3 Authority Key Identifier:
                keyid:25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135382e302f32332d3233203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:39:df:58:98:d9:aa:4f:22:32:0f:5e:99:15:df:ef:02:d7:
         a3:77:0f:70:c2:e4:d2:22:ec:7f:53:c7:c4:39:51:7b:66:68:
         76:7e:e4:49:d2:42:44:1d:d4:1b:38:00:3d:47:58:69:ce:36:
         63:25:95:6a:01:fd:50:8e:e2:04:ab:46:75:dd:72:03:82:36:
         d2:1f:30:c9:3f:b5:6e:bd:89:79:54:4f:65:59:1f:7d:51:31:
         0c:d0:e3:79:a7:9a:13:5d:7f:aa:fa:6e:74:a7:c1:56:a1:9b:
         8f:d4:10:e9:ff:84:55:cd:77:dc:61:c1:f3:59:05:9d:a5:cd:
         4d:cb:c7:35:d7:44:f8:07:1d:43:c9:c9:6e:ab:a3:70:97:a8:
         5c:97:83:89:b8:d3:65:98:d8:58:a4:90:ce:32:45:f6:e6:43:
         92:0c:33:fc:06:4e:75:37:f6:f0:0d:fc:a7:28:6b:7f:3e:37:
         ed:4b:ea:87:f3:ef:5f:8e:cb:05:af:63:52:e5:49:25:1f:0e:
         32:4d:a2:ae:33:40:a5:86:9c:d4:cd:ee:24:37:ec:d1:d3:d2:
         04:7b:6d:0a:6c:38:80:8f:97:4d:da:70:d0:80:ef:24:5b:d2:
         17:f0:32:ba:70:f7:fd:70:aa:ec:b2:fd:52:3a:1f:3d:4e:de:
         47:43:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 08:03:48 2024 by rpki-client on console-ams.rpki-client.org