Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa
File:                     3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa (raw, json)
Hash identifier:          PCpTMMBg3QL+4NNrQdVdok1gNhrWCShnoW15eLeujSI=
Subject key identifier:   1A:7B:28:26:42:FC:CA:35:55:BE:C1:63:6F:DC:04:D0:F5:F8:66:1E
Certificate issuer:       /CN=2504E16F52BD73EF878EA49008DBB404C890352F
Certificate serial:       6C3452D566C80A9B587D9842112CEB4E4BAA234B
Authority key identifier: 25:04:E1:6F:52:BD:73:EF:87:8E:A4:90:08:DB:B4:04:C8:90:35:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa
Signing time:             Wed 24 Apr 2024 18:14:54 +0000
ROA not before:           Wed 24 Apr 2024 18:09:54 +0000
ROA not after:            Wed 23 Apr 2025 18:14:54 +0000
asID:                     265161
IP address blocks:        143.255.212.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:34:52:d5:66:c8:0a:9b:58:7d:98:42:11:2c:eb:4e:4b:aa:23:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2504E16F52BD73EF878EA49008DBB404C890352F
        Validity
            Not Before: Apr 24 18:09:54 2024 GMT
            Not After : Apr 23 18:14:54 2025 GMT
        Subject: CN=1A7B282642FCCA3555BEC1636FDC04D0F5F8661E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:ea:ae:8d:22:7a:68:48:b7:a7:b1:5b:a9:
                    f1:59:e4:4c:6f:a1:fb:32:31:f7:ab:18:81:8d:6a:
                    86:ee:f5:76:72:c9:00:35:82:c6:71:f7:45:f9:02:
                    2c:2a:df:a8:e1:4d:7a:89:b3:b0:20:fe:6b:0d:96:
                    ee:a4:62:9f:41:6e:b7:52:ff:cc:ed:f1:2f:b3:fe:
                    b3:fd:ce:33:2c:93:18:77:f6:83:b6:4d:cb:3a:35:
                    9a:1b:1e:46:12:19:2a:bc:86:f7:d3:7e:31:5d:d8:
                    d5:07:45:4e:13:3f:5b:d0:5b:04:13:14:2a:cf:a6:
                    7f:3f:31:5e:49:3b:fb:59:bd:c9:9d:7e:4a:fc:19:
                    31:63:f8:c0:46:9d:91:d2:42:bf:99:fc:36:2b:ea:
                    64:3c:dc:69:ef:c9:2b:b2:6b:28:97:5a:99:8b:56:
                    90:7e:91:f9:92:b7:a0:7e:fe:91:e5:ab:97:9d:e3:
                    4f:54:98:d4:96:53:1e:f4:4f:b1:44:49:46:87:c2:
                    23:39:bd:58:bf:e2:80:60:1c:f5:6f:25:07:45:04:
                    a8:12:c6:7c:d7:71:e5:0c:99:26:e7:55:31:d9:bf:
                    a0:9e:7f:a6:db:3f:90:bd:fd:6a:ce:05:19:b7:84:
                    ca:e2:c7:d8:aa:40:f0:ca:c6:2e:c1:59:62:0e:d5:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7B:28:26:42:FC:CA:35:55:BE:C1:63:6F:DC:04:D0:F5:F8:66:1E
            X509v3 Authority Key Identifier:
                keyid:25:04:E1:6F:52:BD:73:EF:87:8E:A4:90:08:DB:B4:04:C8:90:35:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/2504E16F52BD73EF878EA49008DBB404C890352F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2504E16F52BD73EF878EA49008DBB404C890352F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:ea:3c:05:96:6a:dc:a0:6f:56:3c:2f:6e:93:cc:47:b2:
         26:a6:a4:ab:bd:47:f7:60:fb:b8:a3:ff:cd:f7:35:e8:bf:2b:
         9d:ef:11:97:0c:20:1a:a0:df:d7:11:f2:2d:51:e1:53:82:43:
         79:f2:38:e2:d7:22:6a:38:54:46:db:15:09:6a:14:5e:95:31:
         23:14:1a:9d:5c:d7:21:66:f4:d5:db:e4:82:4a:a3:28:a2:10:
         29:65:e6:d3:43:72:be:2d:76:ae:7e:f5:84:9c:7a:c1:17:b0:
         57:29:2d:6e:f9:bc:47:be:e6:e1:49:c9:e1:e2:7d:aa:23:64:
         0a:55:66:9e:14:0f:31:af:0a:02:30:6d:62:b7:f7:cd:2c:8a:
         c3:29:6f:2f:93:16:17:9a:16:88:66:8e:23:6a:b4:82:1d:50:
         e6:78:19:ed:f7:ab:b4:1a:c9:46:f5:b9:fa:47:c7:51:c1:7c:
         fb:3e:4d:ca:20:37:10:e6:3d:4a:cf:aa:15:2a:fb:37:09:33:
         45:90:19:c4:84:e6:1a:a0:e8:0b:f1:29:7b:42:2b:47:10:47:
         4b:fa:57:c5:3f:60:ab:aa:58:fd:c9:c4:1c:7e:82:3e:8d:70:
         0f:5d:1e:37:64:16:cd:80:00:ea:f0:62:e4:19:80:4c:be:b8:
         54:26:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 18:59:58 2024 by rpki-client on console-fra.rpki-client.org