Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          aTuD/BHNbS7709gmS3TozQx9HFX8YEq31HPOLXNUgNY=
Subject key identifier:   03:15:0A:02:95:0E:50:1F:81:78:B8:78:24:82:A2:74:CA:BF:8D:68
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       0DDF23163FE49D51B8FDF35C4F9C24C2C18DCCEE
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:40 +0000
ROA not before:           Fri 20 Sep 2024 16:22:40 +0000
ROA not after:            Fri 19 Sep 2025 16:27:40 +0000
asID:                     262296
IP address blocks:        168.181.196.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:df:23:16:3f:e4:9d:51:b8:fd:f3:5c:4f:9c:24:c2:c1:8d:cc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:40 2024 GMT
            Not After : Sep 19 16:27:40 2025 GMT
        Subject: CN=03150A02950E501F8178B8782482A274CABF8D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:f3:58:15:ee:95:cf:0c:ae:97:93:0f:af:
                    cb:20:f4:24:3a:c6:35:ff:bd:0f:72:c5:a8:c6:17:
                    23:fa:69:37:31:a9:51:e6:13:50:25:57:d4:85:40:
                    84:5a:b3:0a:96:ee:e0:a2:c1:c5:e6:00:43:82:ac:
                    ff:e4:ed:03:5c:be:05:1c:9e:8c:22:31:fc:07:48:
                    a0:bb:08:db:e5:b4:f1:4b:c4:16:51:2f:b7:12:43:
                    5d:31:07:b0:7e:f4:08:8b:df:49:b3:b4:ce:9e:ec:
                    00:d4:b9:ca:a2:48:93:b9:fa:42:b7:4f:b1:45:f8:
                    ac:98:85:d5:55:6a:bc:6a:da:b5:66:41:40:b0:d8:
                    b3:a4:00:8b:3a:e3:0e:49:d3:51:92:d4:39:b7:ab:
                    3d:89:ca:06:12:af:5c:12:ad:02:9e:96:70:fb:c4:
                    42:86:88:d0:2e:bc:3c:57:34:75:84:3f:4a:71:9c:
                    bc:9d:65:f2:a5:12:55:46:5a:91:44:e0:09:f3:41:
                    81:77:e1:c4:04:e8:fa:8d:2f:9f:01:1e:69:10:1e:
                    82:a7:9b:63:24:e4:48:78:c9:1e:4e:5d:5e:0c:90:
                    c7:d5:61:e5:62:66:4d:9e:58:da:4f:87:30:83:b5:
                    4b:c2:1b:fd:70:ef:3e:2b:20:ff:60:be:0b:05:a8:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:15:0A:02:95:0E:50:1F:81:78:B8:78:24:82:A2:74:CA:BF:8D:68
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:09:fa:ce:b5:db:81:2e:e1:49:0d:a9:c6:26:4e:2e:49:2e:
         61:11:22:2c:ae:a8:b5:76:5e:86:16:f4:dc:a3:39:4e:a4:cd:
         f9:a6:4d:82:c4:ba:53:88:2f:17:e2:de:ce:4e:85:9b:e7:59:
         e3:17:8a:43:a9:08:1c:5c:06:3c:c2:6f:0b:a7:d1:ab:19:e0:
         52:ad:7f:d8:d5:27:db:49:eb:ab:ce:11:fa:72:8a:2c:18:7f:
         e2:a4:9d:c2:4e:75:b1:91:a2:bc:19:54:11:6e:7b:96:5f:82:
         06:d8:28:c0:2c:41:be:bd:12:71:cb:6e:71:de:b4:d3:cd:d4:
         ec:d8:d4:de:ef:21:97:19:f7:24:70:7b:f5:e0:fd:e9:dd:c5:
         64:94:f6:5d:09:c8:9d:48:d5:eb:c1:db:2b:ce:0e:a7:3a:a9:
         25:7c:c8:4c:91:29:91:b8:c7:e2:6d:9b:c5:02:87:6a:04:01:
         7a:3b:f6:02:6c:02:5c:92:23:40:2d:dd:a1:48:69:9b:fa:d7:
         3b:cb:0b:37:e7:1f:92:95:a2:21:ca:46:90:63:4d:c6:d6:c7:
         73:71:be:5e:15:59:70:de:27:c5:e4:1e:c5:40:8e:2e:7c:8f:
         70:3c:30:1c:7f:3d:a0:0e:f2:87:a8:f2:4e:26:73:04:ba:59:
         98:37:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org