Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          LLISJc6oxKobzn7WPFC3zR+fdQyFYg8U8gaaYieduhA=
Subject key identifier:   37:66:3A:3F:DF:D7:7C:01:D4:BF:0B:2F:A3:4A:BD:9C:5F:94:7A:E8
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       2A19C2B790FE92A61CEECA746E5F6C1E9EF71847
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:39 +0000
ROA not before:           Fri 20 Sep 2024 16:22:39 +0000
ROA not after:            Fri 19 Sep 2025 16:27:39 +0000
asID:                     262296
IP address blocks:        168.181.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:19:c2:b7:90:fe:92:a6:1c:ee:ca:74:6e:5f:6c:1e:9e:f7:18:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:39 2024 GMT
            Not After : Sep 19 16:27:39 2025 GMT
        Subject: CN=37663A3FDFD77C01D4BF0B2FA34ABD9C5F947AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:7f:da:fc:fc:ba:3c:4f:3d:34:83:e7:06:
                    14:bf:30:e2:cb:e0:26:ae:93:76:d2:72:a0:3a:1b:
                    b3:98:56:d9:69:bc:95:88:88:2c:ea:fd:5a:69:38:
                    1b:c6:58:3c:be:c7:9b:b3:59:ba:62:37:5f:d1:4c:
                    09:cc:3f:67:4a:f6:13:05:e4:6a:eb:d4:97:19:5a:
                    ab:06:fd:ee:60:2e:61:a3:bd:d0:97:c6:04:cb:7c:
                    b5:97:46:e8:91:a9:29:4e:2c:99:ff:81:28:43:45:
                    da:01:41:b0:81:23:c5:1d:bc:bf:d1:75:f3:47:3f:
                    97:32:f6:20:e0:7b:b9:91:7c:5a:81:3c:61:f3:9e:
                    25:14:23:73:98:4e:4c:d5:51:3f:13:25:2e:a0:8f:
                    1f:ba:b9:33:29:bc:3e:14:65:73:49:dd:55:a4:ee:
                    ca:d8:00:50:9e:43:9d:62:8f:97:91:70:b3:7f:45:
                    0c:09:44:d1:9c:1b:89:b1:dd:9b:38:82:07:a7:9a:
                    b2:59:16:ad:9b:8d:ad:b8:90:b2:56:4c:c4:e8:24:
                    27:5d:62:4b:07:29:81:5b:ae:19:eb:9c:61:e6:0a:
                    7f:e8:81:22:13:2d:c8:6c:a5:61:ca:a9:51:70:94:
                    7f:be:cf:5b:3b:fa:9e:9a:24:e8:e8:40:c3:7e:03:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:66:3A:3F:DF:D7:7C:01:D4:BF:0B:2F:A3:4A:BD:9C:5F:94:7A:E8
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:85:a9:6f:3d:14:df:f7:26:0d:e5:0c:f1:08:29:0b:a8:
         83:62:ae:d6:15:93:d7:c2:1b:86:c4:6b:62:34:4d:fd:e4:6d:
         93:20:05:6c:37:bc:92:54:a3:98:33:7a:1b:0c:14:1c:26:64:
         17:94:58:a2:95:02:35:53:48:44:5b:c2:97:39:f9:2d:8f:d5:
         44:6a:23:81:b9:60:8f:78:63:fd:dd:4e:41:c3:25:5e:06:85:
         15:c2:68:68:54:25:cf:3b:d6:b7:3e:6e:b4:4a:8e:e6:df:24:
         e3:85:3c:03:ee:46:3c:3e:d4:2e:10:f0:49:84:98:1c:c6:9f:
         c1:8f:8f:20:52:c0:a1:40:7d:72:ab:95:31:a2:b2:ee:43:aa:
         a0:fa:58:62:38:cb:84:38:2b:11:bb:17:5c:a4:75:54:21:f7:
         8b:5f:d4:57:41:14:12:56:92:9d:2a:d9:5d:85:c2:88:e4:3b:
         06:91:62:66:62:d9:61:dd:4a:ca:e0:42:12:39:c1:f0:d8:94:
         4c:b1:8c:31:14:5f:01:84:37:c4:cd:5d:6b:d4:f4:9f:8e:2e:
         ac:8f:f4:84:27:b9:f4:ad:47:15:14:c5:e9:0b:7f:e1:5d:06:
         9b:64:6f:2d:d3:29:fa:dc:a5:16:1d:43:c5:95:31:3c:6e:84:
         34:e2:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org