Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3332203d3e20323636343730.roa
File:                     3137302e38332e3135322e302f32322d3332203d3e20323636343730.roa (raw, json)
Hash identifier:          DuuzMorw61ZS4TipIefW+mDXsOWZUeKK0f/LlDErFZE=
Subject key identifier:   9C:94:30:67:25:F7:1D:C2:F1:F0:87:03:73:B3:31:64:9C:2E:16:20
Certificate issuer:       /CN=4F6BBD87751395114C910ADBBDBA9F81D89340F4
Certificate serial:       141F92EE0F2B5F6E282ED20D6CF2A736C7ED1D2F
Authority key identifier: 4F:6B:BD:87:75:13:95:11:4C:91:0A:DB:BD:BA:9F:81:D8:93:40:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6BBD87751395114C910ADBBDBA9F81D89340F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3332203d3e20323636343730.roa
Signing time:             Tue 27 Aug 2024 14:01:09 +0000
ROA not before:           Tue 27 Aug 2024 13:56:09 +0000
ROA not after:            Tue 26 Aug 2025 14:01:09 +0000
asID:                     266470
IP address blocks:        170.83.152.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1f:92:ee:0f:2b:5f:6e:28:2e:d2:0d:6c:f2:a7:36:c7:ed:1d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F6BBD87751395114C910ADBBDBA9F81D89340F4
        Validity
            Not Before: Aug 27 13:56:09 2024 GMT
            Not After : Aug 26 14:01:09 2025 GMT
        Subject: CN=9C94306725F71DC2F1F0870373B331649C2E1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:95:d4:66:b2:94:12:5c:52:40:55:66:a6:
                    01:40:0b:1d:25:ad:90:ec:6a:af:90:34:b8:6b:be:
                    aa:ce:4d:51:f1:53:5f:e1:e7:09:1d:9d:3a:19:7c:
                    e4:73:ee:fb:8e:76:6e:49:53:1d:bc:74:7c:53:1b:
                    c5:6f:07:73:fc:2b:b8:f4:13:8c:1e:a2:f5:78:38:
                    3f:69:54:c9:36:ee:b8:ba:9b:8d:d2:25:4a:c4:a1:
                    c3:ce:8f:2e:57:01:0e:04:59:22:c2:82:01:a1:d6:
                    4f:e7:8b:85:0d:f8:6a:06:25:f7:10:95:33:c7:73:
                    cc:00:2f:da:f9:23:25:46:2b:96:cd:85:45:7c:26:
                    1c:fe:14:00:e9:35:ef:0c:33:ee:31:30:d6:c0:48:
                    02:b3:aa:bd:4d:9f:d0:36:fa:eb:a9:06:98:62:45:
                    ac:99:2b:0d:9b:3e:a5:4f:45:2f:f5:43:73:22:a5:
                    9e:39:6f:7c:69:1b:00:a9:a3:bf:ea:02:4c:8a:76:
                    40:63:af:aa:93:78:a3:e6:83:43:1e:d0:8d:7c:10:
                    36:47:61:38:06:12:40:dd:50:e9:4f:4d:49:f2:2a:
                    95:f5:7a:44:c8:1d:b2:22:9a:c8:f7:13:04:76:ad:
                    95:9d:79:05:f3:ec:1e:16:c8:05:d5:5e:15:05:0d:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:30:67:25:F7:1D:C2:F1:F0:87:03:73:B3:31:64:9C:2E:16:20
            X509v3 Authority Key Identifier:
                keyid:4F:6B:BD:87:75:13:95:11:4C:91:0A:DB:BD:BA:9F:81:D8:93:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/4F6BBD87751395114C910ADBBDBA9F81D89340F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F6BBD87751395114C910ADBBDBA9F81D89340F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/3137302e38332e3135322e302f32322d3332203d3e20323636343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:97:92:3f:18:28:d2:61:c6:8a:cb:e1:45:73:63:26:09:
         ff:23:37:60:21:92:1c:27:84:05:f6:e2:03:34:c9:46:5a:f0:
         de:33:41:6f:12:95:97:8e:ee:c8:1b:f8:2b:9b:02:da:c5:cf:
         79:dc:fe:a6:4e:38:3f:49:c7:61:d2:b6:3a:c5:28:22:38:4d:
         47:8a:d7:e9:b5:99:af:31:98:71:dc:f8:56:34:d7:2d:3f:3f:
         d1:87:f6:83:7b:b6:78:73:65:9d:1b:5a:bc:ac:a1:98:5f:01:
         55:c6:b2:b0:6c:1c:eb:ec:99:b7:f9:d3:31:1a:bd:6f:f5:f1:
         8d:15:42:00:53:3c:2d:f3:dd:6f:1d:3b:c8:e6:5a:72:3f:df:
         4d:75:4c:26:6c:da:aa:b8:25:0e:fb:bf:62:1a:5e:03:8c:a1:
         29:8e:7d:3d:1b:d4:c9:76:a6:01:b2:02:fd:fa:50:bf:fb:e4:
         a1:15:09:d9:4c:ed:d6:0b:77:ed:a2:79:07:11:26:6f:9b:c2:
         84:4b:4d:29:de:ad:bc:92:8b:12:0b:b0:53:e1:72:6a:ae:7e:
         4f:68:5f:b6:68:46:47:3e:0c:ae:87:69:e0:cb:9e:b6:52:db:
         df:da:fc:40:2d:c8:13:44:d7:22:83:bd:49:e0:23:67:ce:ea:
         af:f6:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 12:45:38 2024 by rpki-client on console-ams.rpki-client.org