Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa
File:                     3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          iNdDwvTcmzspsBARruvvbjjZwZ8FF+bjy8qp64J+s9Y=
Subject key identifier:   8F:C8:ED:7B:FF:E8:E9:F1:4F:31:22:BC:DA:9F:83:F9:D4:80:67:C8
Certificate issuer:       /CN=944E34DEA91B28826835424C55845E9BDF8C78BA
Certificate serial:       69E17756BB8B957AD7236367CA9724CF79BE8B38
Authority key identifier: 94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa
Signing time:             Thu 04 Apr 2024 02:59:51 +0000
ROA not before:           Thu 04 Apr 2024 02:54:51 +0000
ROA not after:            Thu 03 Apr 2025 02:59:51 +0000
asID:                     263151
IP address blocks:        170.239.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e1:77:56:bb:8b:95:7a:d7:23:63:67:ca:97:24:cf:79:be:8b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944E34DEA91B28826835424C55845E9BDF8C78BA
        Validity
            Not Before: Apr  4 02:54:51 2024 GMT
            Not After : Apr  3 02:59:51 2025 GMT
        Subject: CN=8FC8ED7BFFE8E9F14F3122BCDA9F83F9D48067C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:41:cd:6d:a3:5a:52:52:95:07:4c:b9:b7:
                    1f:62:92:f7:ee:70:5c:48:ec:1a:20:9b:67:8e:ef:
                    1e:62:0f:6a:30:ed:b2:39:47:64:33:07:a2:db:4d:
                    86:9f:1a:8b:ce:cb:b6:22:fe:38:dc:6b:64:7e:8c:
                    ec:88:27:2a:d4:fb:60:1d:d6:57:62:1e:32:4e:1c:
                    ef:89:4b:18:0b:01:6b:be:af:78:a5:1e:10:0f:69:
                    68:83:47:8f:ba:89:f2:a8:4c:1d:f7:31:50:75:50:
                    b2:c9:b2:4b:3d:69:d8:65:c5:57:dc:06:55:a5:f4:
                    b7:4c:00:62:74:d1:20:64:ef:6e:ea:08:51:d1:c8:
                    49:9a:9a:c4:36:cd:11:1b:82:0a:17:70:0b:18:e9:
                    4a:f5:ad:39:db:80:c2:19:47:ee:dc:5a:60:dc:8a:
                    d1:9e:30:6c:04:85:8a:60:73:ea:bb:2e:2b:3d:41:
                    2d:b1:69:4b:f6:c8:61:42:b2:5c:52:53:81:9a:75:
                    f2:4a:d0:69:41:b5:1d:82:1e:c0:8d:98:01:8c:fa:
                    8d:17:5b:23:4a:37:ab:84:d1:1e:b7:89:1d:46:4c:
                    9b:df:85:0f:2d:83:fa:43:51:b1:e6:48:f8:1a:30:
                    0b:96:bb:0f:1d:da:4c:60:81:bf:1f:d4:02:94:b0:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C8:ED:7B:FF:E8:E9:F1:4F:31:22:BC:DA:9F:83:F9:D4:80:67:C8
            X509v3 Authority Key Identifier:
                keyid:94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/944E34DEA91B28826835424C55845E9BDF8C78BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3137302e3233392e33362e302f32322d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:6a:f9:29:89:99:d6:ae:c3:1a:4a:5b:c0:5f:a7:a9:bc:c6:
         8f:85:20:48:df:ec:1b:39:2d:c5:37:a2:c2:63:83:bc:37:cd:
         2d:e0:32:fb:87:a3:ff:02:77:92:f4:49:d8:77:d9:65:ff:94:
         f5:cd:1b:f9:fb:91:90:6f:bd:88:06:0a:e5:ef:3d:f6:37:1a:
         2a:d0:a5:72:c2:59:a9:61:37:d0:14:33:16:55:56:11:7b:07:
         84:6c:53:17:c2:f5:da:c3:fe:22:39:27:8b:e0:9a:cc:2f:9d:
         ff:70:c1:0f:f7:c4:c2:a8:a5:d5:b9:f5:14:79:5f:89:ab:13:
         1a:88:2b:a2:61:cb:e0:e6:4f:a0:13:ae:bc:40:6f:24:9f:b8:
         dc:de:09:3b:4b:c0:67:7f:42:ef:cf:31:e8:74:fa:0c:6b:4d:
         63:53:b4:b1:de:3a:ca:4c:e7:73:fd:8e:48:b0:e0:d2:f0:7d:
         b6:88:dc:eb:19:91:a7:fb:45:49:16:12:64:d3:0c:c1:d8:fb:
         fd:50:23:53:30:9d:1a:99:83:de:1a:a1:1b:94:a8:46:2b:5d:
         7b:ec:73:63:19:3d:39:f3:ed:03:44:19:8a:67:c9:75:93:b0:
         0c:0d:86:58:d9:15:a3:96:b3:86:36:7c:5c:6c:9f:5c:7b:3f:
         d0:9e:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org