Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa
File:                     3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa (raw, json)
Hash identifier:          IduL8GLy/296O7ZKmcKkCDVrAGxTNp5za/o+iPoJW5E=
Subject key identifier:   C6:ED:E3:C2:E3:1E:10:DA:B6:8E:09:4D:1A:BB:03:D9:38:13:7E:3B
Certificate issuer:       /CN=F7646425053708CC938EC4540ECBBF44B2849544
Certificate serial:       03C5FE7C9050DFB4130DD54499F7BE95160FCACA
Authority key identifier: F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa
Signing time:             Tue 21 May 2024 16:29:04 +0000
ROA not before:           Tue 21 May 2024 16:24:04 +0000
ROA not after:            Tue 20 May 2025 16:29:04 +0000
asID:                     267420
IP address blocks:        170.231.208.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:fe:7c:90:50:df:b4:13:0d:d5:44:99:f7:be:95:16:0f:ca:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7646425053708CC938EC4540ECBBF44B2849544
        Validity
            Not Before: May 21 16:24:04 2024 GMT
            Not After : May 20 16:29:04 2025 GMT
        Subject: CN=C6EDE3C2E31E10DAB68E094D1ABB03D938137E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:53:21:4b:35:6d:7c:80:e8:3b:86:18:6d:
                    aa:12:1a:1d:1e:79:d3:1f:52:a5:67:de:06:52:6c:
                    60:c1:e3:f5:44:50:ab:d2:c4:21:a1:98:77:d6:b5:
                    b9:6d:d4:e2:60:e1:ed:aa:4f:6a:1f:24:84:79:fa:
                    10:c2:1d:e1:49:84:69:db:1c:73:de:5b:72:a7:9b:
                    2c:3e:89:83:c9:aa:fc:dc:6e:5b:cc:16:2c:90:44:
                    33:25:93:b9:94:d8:8c:c4:c6:2e:60:4a:35:bd:1d:
                    02:fe:24:b3:84:0a:27:f9:8d:11:17:68:01:83:c6:
                    38:96:c4:01:e7:d1:4c:6c:46:dd:a5:bb:e2:49:e5:
                    72:28:87:cd:0a:e7:ba:92:d5:a8:1a:62:31:ca:92:
                    4b:b2:62:64:07:7d:b5:a2:1c:27:79:66:44:6b:50:
                    cd:01:5b:22:2e:d4:be:3a:84:93:53:94:e7:01:4f:
                    39:7b:00:80:25:06:43:6a:40:ab:fc:48:87:6c:82:
                    c5:fd:81:8b:73:f2:a5:ad:42:2b:f8:ba:21:c6:e3:
                    ea:7b:0b:65:18:3c:e8:d4:11:f9:42:15:b1:c4:20:
                    a8:a4:95:13:c7:50:28:6d:cb:4b:a1:1f:fe:41:5e:
                    2d:d0:74:e1:5f:f2:aa:53:62:9d:cf:9f:b3:5b:8d:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:ED:E3:C2:E3:1E:10:DA:B6:8E:09:4D:1A:BB:03:D9:38:13:7E:3B
            X509v3 Authority Key Identifier:
                keyid:F7:64:64:25:05:37:08:CC:93:8E:C4:54:0E:CB:BF:44:B2:84:95:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/F7646425053708CC938EC4540ECBBF44B2849544.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7646425053708CC938EC4540ECBBF44B2849544.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/1/3137302e3233312e3230382e302f32322d3234203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:18:fd:0c:17:21:1b:a7:22:d6:53:ef:b9:c3:7a:be:7b:
         92:6f:5a:ab:23:f5:77:6a:cf:9f:74:cd:d6:9d:01:bd:12:6d:
         6a:18:11:af:01:c3:2a:e4:f3:c1:97:05:af:78:1b:a5:9b:10:
         65:dc:aa:63:6d:e5:e5:01:cb:37:dd:46:0e:99:a6:c1:b6:50:
         84:bf:d1:25:87:f8:68:74:c7:03:01:b2:8f:6f:3d:6b:ad:16:
         04:5d:a2:a8:7d:f6:5a:12:01:96:be:09:a6:7c:54:d2:4b:6d:
         4a:da:81:49:82:4c:0e:db:f4:6e:63:18:48:c1:45:7f:77:07:
         07:bd:01:bb:74:4f:4d:95:e8:9d:cd:bc:8c:aa:c1:51:87:c3:
         7d:57:40:23:1a:f8:f6:91:0d:f8:be:66:a4:b3:a4:e0:c4:f9:
         8b:3f:9d:83:28:ab:94:bd:cf:74:9e:1f:fd:ff:20:6c:18:0d:
         fe:6d:b1:38:4f:87:c0:40:ae:6c:e2:17:f8:28:30:e7:14:2e:
         c0:cf:8b:fc:bd:75:a8:21:ab:f2:fa:4e:81:24:9c:2d:70:2a:
         88:2a:8b:75:54:30:fc:ae:b6:4c:3e:1b:a7:c3:05:cc:8d:5e:
         aa:37:3b:c8:04:4d:07:70:90:3f:80:68:3f:86:24:90:98:61:
         1f:73:49:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:05 2024 by rpki-client on console-fra.rpki-client.org