Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa
File:                     3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa (raw, json)
Hash identifier:          EOZtQcl9ZpdGH5mGP/KHQ39+Va6wV2CRmu/VqJfNUq4=
Subject key identifier:   3B:05:93:E7:DE:96:F1:0E:F2:D2:20:61:07:20:1F:47:F1:CC:47:CD
Certificate issuer:       /CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Certificate serial:       7AAB668AE218B925845323284A627A006A8F8A75
Authority key identifier: 80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa
Signing time:             Thu 16 May 2024 19:43:24 +0000
ROA not before:           Thu 16 May 2024 19:38:24 +0000
ROA not after:            Thu 15 May 2025 19:43:24 +0000
asID:                     262342
IP address blocks:        143.208.208.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ab:66:8a:e2:18:b9:25:84:53:23:28:4a:62:7a:00:6a:8f:8a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F95120380D97B8617C6C767FCF3931BDE7880D
        Validity
            Not Before: May 16 19:38:24 2024 GMT
            Not After : May 15 19:43:24 2025 GMT
        Subject: CN=3B0593E7DE96F10EF2D2206107201F47F1CC47CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:b8:7b:ca:c8:92:ec:70:81:0d:14:f4:3a:
                    91:6b:a3:3d:95:0b:20:f8:9c:e9:14:82:bb:6d:55:
                    f2:08:f8:be:91:0a:26:6d:2c:8f:22:d1:47:b0:db:
                    d1:49:d8:24:a9:2e:68:80:77:d1:c1:b9:dc:7c:ba:
                    36:dc:1b:dd:15:42:26:54:7e:00:37:a8:77:f2:e8:
                    2f:f2:f2:8c:5d:e1:be:6a:a2:dd:a8:0b:c2:3c:cd:
                    bc:4e:35:d9:ee:aa:15:44:bf:d1:a9:21:93:4b:1c:
                    95:7c:cf:25:f7:9e:93:97:38:1d:d3:70:00:ee:a4:
                    db:fd:96:92:0a:0e:50:97:93:d1:9d:5a:13:09:f7:
                    bd:1d:e2:3d:a3:0d:f3:93:df:c6:d5:ca:ef:d1:7b:
                    83:ba:95:4f:5d:b4:0a:4e:f6:3e:13:bd:5c:f6:eb:
                    d8:b5:73:d4:0c:56:0a:ec:55:0c:07:f6:8d:14:68:
                    55:9a:d8:0f:b5:66:cd:ae:72:fa:bb:19:af:85:5b:
                    fc:78:67:f9:c7:12:81:6e:9b:1b:f1:90:25:a8:13:
                    f7:79:a6:9e:e1:20:ac:82:58:55:62:f9:94:3e:c3:
                    14:45:fb:cf:57:6e:0d:a5:08:20:f7:fd:c7:1d:d6:
                    4d:d6:ec:0c:a6:68:f0:b7:71:f9:f4:9a:fb:a8:92:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:93:E7:DE:96:F1:0E:F2:D2:20:61:07:20:1F:47:F1:CC:47:CD
            X509v3 Authority Key Identifier:
                keyid:80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:99:01:d6:d8:cc:8b:8e:89:b9:9f:08:ea:76:43:7c:23:
         79:62:c1:6b:2c:56:54:36:02:24:7a:84:60:f7:e5:1f:d9:da:
         99:3a:ae:eb:de:e9:0a:0d:74:4d:57:b8:0e:96:b0:29:a4:a3:
         ec:3a:13:87:6f:88:ba:ef:3a:4e:f8:d4:f0:c7:a2:38:1b:69:
         e9:4f:e2:de:59:b8:24:5a:d1:ee:dc:74:fc:7f:e9:ad:2a:75:
         ac:32:cb:17:fb:05:9c:18:73:e1:85:f5:27:d0:b5:7f:71:e5:
         d4:16:1b:9d:bf:57:63:47:92:42:48:d8:36:ff:43:06:f6:d8:
         51:0a:ca:f8:97:d4:be:2b:36:ed:78:e6:c6:48:a9:1f:86:b4:
         4e:35:44:0d:8a:4a:df:55:2e:3c:10:45:a7:68:44:51:1c:13:
         4a:35:4c:b3:73:fc:ca:74:3b:02:5b:09:c4:e8:39:61:b8:af:
         0c:62:ac:79:6b:e7:69:dd:3b:a3:36:d7:5c:07:93:fa:d6:7f:
         d7:db:43:d0:f5:a4:7a:c3:6b:7c:8c:46:e2:eb:11:e7:da:b0:
         09:f4:4f:bd:a2:f4:68:95:20:03:03:89:30:c1:d7:ed:af:1b:
         ef:e7:3f:79:09:d1:a7:91:0e:5b:0a:c5:6e:16:18:61:a6:01:
         d1:16:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 01:11:54 2024 by rpki-client on console-ams.rpki-client.org