Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa
File:                     3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa (raw, json)
Hash identifier:          gbluFBzUo+AT4S5JTm3wHHSA4nJUyQhktFl062VzxuY=
Subject key identifier:   C4:20:30:68:65:2B:02:DB:75:54:A8:10:FD:88:1D:A4:8E:DE:E6:95
Certificate issuer:       /CN=F69AA99C56F931362559734CF519AD71790C2490
Certificate serial:       716B608013C18C79FE44F47534D8A917B0BF28E5
Authority key identifier: F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa
Signing time:             Tue 03 Sep 2024 23:20:52 +0000
ROA not before:           Tue 03 Sep 2024 23:15:52 +0000
ROA not after:            Tue 02 Sep 2025 23:20:52 +0000
asID:                     263292
IP address blocks:        170.150.80.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6b:60:80:13:c1:8c:79:fe:44:f4:75:34:d8:a9:17:b0:bf:28:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69AA99C56F931362559734CF519AD71790C2490
        Validity
            Not Before: Sep  3 23:15:52 2024 GMT
            Not After : Sep  2 23:20:52 2025 GMT
        Subject: CN=C4203068652B02DB7554A810FD881DA48EDEE695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:3b:a2:2d:c8:9d:c8:d8:7f:a5:27:75:fd:
                    ce:4e:4b:57:56:47:b7:1f:3c:6d:07:7e:ac:23:0a:
                    11:82:f0:98:4c:05:65:93:80:3e:34:4b:cb:21:ee:
                    80:b1:1e:d3:07:ad:db:cd:d8:b6:fe:2e:cd:a9:ce:
                    a9:36:ee:ab:14:11:02:4c:4e:0e:c1:e2:1d:aa:7c:
                    50:0d:df:f7:26:ca:d7:da:e7:0d:2e:69:46:c4:f1:
                    ee:cc:b8:74:f7:c4:6e:d6:0f:b5:35:0a:78:5d:c6:
                    2f:18:23:c1:58:69:22:b5:ef:5e:3a:0e:a5:a1:0f:
                    79:0c:9b:cf:d2:3e:f8:2c:13:e3:c8:09:b4:3c:bf:
                    d8:04:f8:0e:36:20:fe:17:41:a1:ce:ef:dd:ba:ad:
                    78:65:3f:49:38:4c:2b:80:8c:77:3b:a4:ed:4f:c4:
                    0d:1b:9b:bb:66:c4:87:1f:e5:d2:03:cc:64:b2:8a:
                    b1:f3:3a:db:f3:b6:72:cc:ec:2a:75:0c:ec:67:38:
                    1b:6c:80:5b:55:65:e9:03:9f:ce:03:28:d1:cc:c3:
                    3f:c8:17:25:10:d8:84:7b:eb:74:a6:30:8f:4d:af:
                    6c:ff:c8:90:21:a1:a5:0f:f0:94:64:c7:77:72:60:
                    c2:3f:e4:a7:8b:fc:81:a6:21:ff:74:4e:e4:16:75:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:30:68:65:2B:02:DB:75:54:A8:10:FD:88:1D:A4:8E:DE:E6:95
            X509v3 Authority Key Identifier:
                keyid:F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137302e3135302e38302e302f32322d3232203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:20:24:0f:bf:7d:06:8a:8f:e4:a7:d6:0e:71:e6:7c:56:
         d7:34:b6:fb:42:d4:f3:56:4a:e2:9f:b2:64:7f:f7:2a:90:a3:
         4b:af:c2:10:88:a4:bd:86:f0:07:e5:f8:06:91:25:84:f7:a3:
         36:e4:26:4d:43:6a:23:b1:f4:48:7d:82:57:d6:f9:0c:34:0f:
         d8:ce:7f:47:cb:b7:5f:5e:49:70:d0:64:f4:aa:a7:17:da:91:
         07:ca:14:0e:04:47:bd:4c:eb:41:4e:e9:9c:83:fb:b4:cd:7e:
         14:fd:82:17:38:36:e6:d2:f3:14:59:44:61:b3:cc:3b:a1:5e:
         5f:eb:6b:19:48:2e:91:e0:de:dd:76:4f:25:3d:24:d7:20:83:
         85:5a:4d:c6:b5:e4:dc:d0:07:7a:06:de:0a:26:3d:45:2b:7c:
         44:7d:07:f6:89:57:68:c6:4e:68:85:21:82:bb:16:0b:51:3b:
         ca:8d:02:95:b9:3e:7f:c9:41:b9:68:43:06:b3:d4:af:59:55:
         0d:96:a8:c8:ad:f0:29:40:f2:35:c3:f9:34:e4:15:02:9d:fe:
         d2:46:d4:86:cd:bf:10:c0:19:cc:d5:49:70:eb:19:8b:93:83:
         c8:00:e0:d9:44:63:33:4f:1d:d6:f3:1b:c4:1d:15:f3:3f:7a:
         fd:51:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 04:50:14 2024 by rpki-client on console-fra.rpki-client.org