Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          ye9aBduxOLkiIjcYNOcYKLThou7CQSFrlD8eFd36NVg=
Subject key identifier:   5F:63:BB:A2:B1:C3:5C:59:74:BE:B9:C0:64:E8:B1:9D:CA:EB:57:4B
Certificate issuer:       /CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
Certificate serial:       0849CE46116CC384FCDF3CEE9AEB61FB91D30BAC
Authority key identifier: EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa
Signing time:             Tue 03 Sep 2024 13:28:01 +0000
ROA not before:           Tue 03 Sep 2024 13:23:01 +0000
ROA not after:            Tue 02 Sep 2025 13:28:01 +0000
asID:                     267420
IP address blocks:        170.231.208.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:ce:46:11:6c:c3:84:fc:df:3c:ee:9a:eb:61:fb:91:d3:0b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599
        Validity
            Not Before: Sep  3 13:23:01 2024 GMT
            Not After : Sep  2 13:28:01 2025 GMT
        Subject: CN=5F63BBA2B1C35C5974BEB9C064E8B19DCAEB574B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:b4:d0:f9:c9:44:55:3f:0e:6b:16:4a:5a:
                    22:b0:da:59:7f:f4:86:0f:96:82:fb:2d:d4:23:f3:
                    4b:8c:4e:89:aa:a1:a9:5d:e6:6c:36:b0:ec:46:f8:
                    cc:18:14:eb:3d:12:90:9d:27:b6:73:fd:4d:8c:78:
                    be:ff:03:f8:c8:8f:34:8c:60:8a:19:84:29:8b:66:
                    49:fd:ed:56:4c:8f:1e:69:42:52:15:56:65:a4:38:
                    60:43:4c:91:0e:06:b3:f0:b8:bd:04:67:6d:78:6c:
                    d5:08:72:48:91:c1:30:de:17:be:25:58:22:e4:72:
                    36:bf:f4:1a:8d:85:9f:a3:ef:30:80:75:62:2c:09:
                    be:57:39:f4:6a:84:a4:27:b4:55:54:90:0e:2d:00:
                    b3:e5:8c:1b:ec:4c:41:3d:0f:4b:9b:7b:af:62:85:
                    dc:ec:8c:13:f1:01:7d:90:70:3d:e4:f6:33:98:6a:
                    68:4a:db:d1:3c:0a:5e:7b:12:ea:49:b9:05:74:e1:
                    10:a9:7b:74:81:e3:04:95:4b:ef:ce:02:d8:97:42:
                    79:33:ef:2c:e5:d9:e1:62:92:c3:86:4f:51:b6:73:
                    66:e3:af:8b:a8:ae:cc:dc:76:d4:76:73:7a:e6:a7:
                    97:ce:63:83:5b:43:86:c5:e8:e5:93:28:15:ba:f2:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:63:BB:A2:B1:C3:5C:59:74:BE:B9:C0:64:E8:B1:9D:CA:EB:57:4B
            X509v3 Authority Key Identifier:
                keyid:EC:74:A1:81:A1:DB:6C:EE:F8:C0:2C:28:C1:2D:87:B9:A4:EC:05:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC74A181A1DB6CEEF8C02C28C12D87B9A4EC0599.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:1c:d5:74:e4:81:9c:b2:8a:22:dd:f7:94:69:b6:67:db:50:
         f2:fb:40:ad:d0:74:15:db:0f:64:ca:94:06:f1:d3:fd:98:e4:
         d7:31:1b:6c:77:6a:08:b4:08:f7:6c:2f:cb:56:0b:bc:13:26:
         18:50:f1:01:50:7c:98:33:e9:9c:0e:a9:a2:34:fd:9b:ac:7e:
         ff:80:a3:60:d9:27:16:f2:6b:91:45:d9:65:9d:c9:35:a6:40:
         2d:5e:87:1f:fe:d9:61:40:09:46:d0:dd:a6:52:ef:3b:c2:18:
         03:e4:3c:f0:5b:ae:8c:be:bd:3c:d4:0e:fc:83:d8:c1:10:5f:
         e8:1d:00:e4:84:a1:d9:9d:75:b9:af:fc:c0:ec:51:3a:f1:07:
         18:6b:3e:ef:fe:d7:f5:2d:bd:8c:54:b6:98:6e:5f:4d:d3:7f:
         61:0f:54:80:95:88:6b:58:ff:16:29:56:6c:ef:a3:b2:ed:14:
         63:80:2f:ed:24:42:09:43:81:61:87:78:6c:7f:e5:95:e6:b2:
         53:ac:2f:eb:41:b2:11:74:27:8c:21:d1:4d:38:83:31:13:f6:
         34:c0:26:8e:17:84:46:15:da:43:bc:2f:db:b5:6a:ce:7d:20:
         5a:11:c7:89:9b:c9:59:bc:40:98:40:1f:92:d1:d8:f9:a9:e9:
         d8:59:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:46 2024 by rpki-client on console-ams.rpki-client.org