Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa
File:                     3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa (raw, json)
Hash identifier:          mHFlMfD2CtL3a3LieQLGzFkA2siypcDqMSYCxhmUJdk=
Subject key identifier:   F8:EA:26:0A:73:35:42:3D:88:68:95:70:5C:78:F6:06:39:C7:E7:56
Certificate issuer:       /CN=93E8F1E8B26E54612C2C1B2E58182FE529B6AA21
Certificate serial:       226D3C04C97DA0520DA2E20F5343A9D389AB82ED
Authority key identifier: 93:E8:F1:E8:B2:6E:54:61:2C:2C:1B:2E:58:18:2F:E5:29:B6:AA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa
Signing time:             Wed 29 May 2024 21:24:41 +0000
ROA not before:           Wed 29 May 2024 21:19:41 +0000
ROA not after:            Wed 28 May 2025 21:24:41 +0000
asID:                     269194
IP address blocks:        170.247.28.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6d:3c:04:c9:7d:a0:52:0d:a2:e2:0f:53:43:a9:d3:89:ab:82:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E8F1E8B26E54612C2C1B2E58182FE529B6AA21
        Validity
            Not Before: May 29 21:19:41 2024 GMT
            Not After : May 28 21:24:41 2025 GMT
        Subject: CN=F8EA260A7335423D886895705C78F60639C7E756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:97:c2:63:18:ee:a0:67:ee:e1:b5:d9:1d:
                    ad:64:28:e6:10:b0:34:87:b5:69:09:c6:1d:4b:6d:
                    e3:f2:ca:6b:6b:46:b3:30:65:5f:ba:ca:ab:48:55:
                    1a:4d:97:88:89:1b:59:45:b7:24:90:89:97:bf:9d:
                    e0:ed:1c:4d:85:07:68:ac:be:a9:b9:9c:a3:67:a1:
                    0a:92:b1:3d:f8:2f:27:0a:4b:ec:da:e0:4a:9d:f4:
                    e4:da:0c:82:da:2e:f6:9d:41:b9:15:9b:7f:67:a0:
                    58:65:63:f6:6a:84:4d:16:0a:82:cf:8a:4a:8a:55:
                    7d:42:38:bb:46:7e:fc:da:f8:50:ef:a8:b6:50:61:
                    79:7c:64:ba:93:a9:87:84:20:09:4f:21:84:20:1b:
                    fa:f9:1e:30:d6:e8:68:24:a2:ab:91:0d:b8:4e:a8:
                    26:bf:8b:09:f7:48:e5:17:00:f1:64:71:0e:ac:34:
                    6c:74:68:c4:a1:3a:da:41:28:fd:ca:5a:8e:07:90:
                    d4:4b:3f:40:c8:b9:b8:d6:2b:54:c2:ad:ed:7b:90:
                    32:83:a4:12:f6:47:4d:04:63:52:3a:f6:b7:91:cf:
                    51:2d:49:63:0e:01:6e:27:d0:5a:0d:ab:e2:93:70:
                    ec:b7:f0:ce:76:1e:07:54:52:12:84:13:74:e2:fe:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:26:0A:73:35:42:3D:88:68:95:70:5C:78:F6:06:39:C7:E7:56
            X509v3 Authority Key Identifier:
                keyid:93:E8:F1:E8:B2:6E:54:61:2C:2C:1B:2E:58:18:2F:E5:29:B6:AA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E8F1E8B26E54612C2C1B2E58182FE529B6AA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/3137302e3234372e32382e302f32322d3332203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:97:b4:60:09:d0:fb:43:9d:e1:6b:b2:0f:e5:a7:72:d6:
         70:14:1b:25:30:1f:14:e0:7a:4d:eb:c1:0b:7e:d3:30:81:82:
         0f:a1:78:eb:02:9c:b4:ed:ea:09:41:75:08:5c:27:8e:25:55:
         42:02:d2:7b:9a:a0:fe:c0:78:68:a1:d7:f0:6a:5d:3a:57:c3:
         82:29:7d:8f:9f:69:df:f2:af:d1:97:56:6d:a5:8b:df:3a:3f:
         40:fa:c3:f1:0b:13:ee:43:e9:01:64:7f:a8:10:4f:8e:d0:5b:
         42:b7:74:33:1c:bf:f7:1c:c0:c1:ec:90:ed:86:e6:52:65:e4:
         f3:ea:73:c6:d2:01:f1:b2:4d:81:6c:7f:6f:10:00:0b:30:05:
         b7:ce:2a:90:99:bb:d8:83:34:e2:75:9b:26:9f:b7:2d:33:5e:
         1c:f2:4f:54:70:65:2f:07:7c:7d:d4:70:8b:52:7a:fb:85:9b:
         c4:dd:71:cd:10:fd:62:cc:35:52:e2:81:1e:b6:55:7b:49:c0:
         f3:14:fa:30:14:f3:4f:6c:a7:cd:d6:6d:73:ed:ee:ff:49:8a:
         a9:b6:aa:d1:9f:9e:a2:25:4c:3b:ab:01:25:0e:63:59:1f:49:
         7e:07:4c:49:40:ed:18:11:23:7c:92:72:e5:02:be:51:29:0a:
         ff:00:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 08:33:51 2024 by rpki-client on console-ams.rpki-client.org