Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa
File:                     3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          el523YVf6iRkukl+4jcsUy0hYxZh/Bd2JzO2Y8vRPLs=
Subject key identifier:   C2:CC:EC:8E:65:A7:C6:6D:DD:1C:75:B5:4A:BD:61:E9:41:9F:E4:C6
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       2763FAFBA781276D39CE2110A355CB739E4A03F4
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:09 +0000
ROA not before:           Thu 10 Oct 2024 19:27:09 +0000
ROA not after:            Thu 09 Oct 2025 19:32:09 +0000
asID:                     262296
IP address blocks:        168.181.196.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:63:fa:fb:a7:81:27:6d:39:ce:21:10:a3:55:cb:73:9e:4a:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:09 2024 GMT
            Not After : Oct  9 19:32:09 2025 GMT
        Subject: CN=C2CCEC8E65A7C66DDD1C75B54ABD61E9419FE4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:5e:6b:9b:20:44:96:a6:eb:7b:8b:de:44:
                    59:5a:ee:c7:81:98:c6:86:d7:d2:60:ed:43:d0:0e:
                    58:f1:2f:99:55:aa:71:a0:d3:df:11:6a:27:33:85:
                    f6:90:1a:68:40:c8:f4:9e:52:a7:a2:76:35:b1:98:
                    02:d0:68:32:c5:e7:1a:83:88:65:25:eb:06:cd:67:
                    53:5e:b4:b0:d7:21:ad:47:27:77:c6:f4:19:1c:0e:
                    88:06:7c:ba:25:f6:fd:78:ea:09:55:22:d2:1e:1d:
                    9a:a1:80:76:26:53:7d:32:03:c7:5e:01:9f:38:57:
                    6d:c3:4b:fe:8c:eb:79:a7:89:29:d0:39:4c:b3:2b:
                    49:bd:c9:af:0b:de:91:a3:68:5f:92:4a:d6:a4:86:
                    31:32:63:54:33:7f:d0:c6:68:c5:33:df:89:f7:86:
                    de:b2:42:fb:9d:fb:35:d5:14:d0:83:72:4a:e6:7c:
                    1c:2a:1b:56:ee:cc:1a:a1:71:d2:07:0f:53:af:46:
                    29:9e:bd:62:61:1b:80:d7:7a:40:7a:71:f7:48:5b:
                    7b:10:9e:a8:3c:8a:39:1f:c7:0c:33:fc:9a:49:7e:
                    67:bc:0b:4f:f4:fc:6e:f7:8d:c2:96:33:7e:ca:1b:
                    45:3f:af:e7:3e:bc:d9:61:7b:50:c6:8f:a4:9b:15:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:EC:8E:65:A7:C6:6D:DD:1C:75:B5:4A:BD:61:E9:41:9F:E4:C6
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:25:b2:14:6b:57:d4:f9:8b:ea:f9:da:6b:b7:42:0a:3c:2c:
         2f:9d:5c:e7:33:8a:20:33:67:ae:36:81:c6:f5:f1:5e:db:d6:
         f7:0f:ec:56:ba:f6:a6:46:35:47:55:86:05:8e:5b:9d:ea:2c:
         4c:56:d1:6f:2c:89:15:42:49:c7:37:4e:b5:11:8b:83:4b:a4:
         a5:3c:a1:91:d5:61:7a:bf:26:40:e1:e0:b6:ff:4d:f5:4e:6a:
         ff:1f:c4:8b:44:90:df:2e:9e:3a:e9:d6:8e:b1:86:92:d4:e1:
         63:ae:61:1d:3a:2b:09:81:83:fa:37:31:19:51:16:b7:77:52:
         17:56:e9:50:e5:be:df:f7:48:10:36:b2:f3:24:ef:dc:57:33:
         33:23:4b:64:97:dd:4c:51:1f:c9:a9:f0:f1:fa:bc:2a:0c:d3:
         98:dd:1d:b4:fa:37:32:5d:b3:8f:5b:49:87:f3:8c:5a:14:54:
         d2:bd:3f:9a:2d:cf:af:e8:02:03:0c:c8:a8:8a:33:ea:07:6e:
         21:d4:41:37:1a:1a:c9:73:98:97:2a:28:61:fc:97:cb:18:ad:
         33:f1:c4:40:bf:75:dc:d0:2c:e2:a5:39:e9:3e:d6:80:ad:2a:
         0e:fb:90:88:7c:e8:4d:07:ef:7d:ad:ed:4f:46:14:f8:54:ed:
         66:f5:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org