Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          GAXZjGTdsdwBX3WdPbSqh9MWIMgh0t8jOqr3UHBL4/U=
Subject key identifier:   7F:06:54:BD:85:D4:4A:5D:49:02:3E:90:DA:DF:47:87:80:75:80:2D
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       06A5B945F03CE57ADE4B54B5A80A1B5F8DB2FB9D
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:08 +0000
ROA not before:           Thu 10 Oct 2024 19:27:08 +0000
ROA not after:            Thu 09 Oct 2025 19:32:08 +0000
asID:                     262296
IP address blocks:        168.181.199.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a5:b9:45:f0:3c:e5:7a:de:4b:54:b5:a8:0a:1b:5f:8d:b2:fb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:08 2024 GMT
            Not After : Oct  9 19:32:08 2025 GMT
        Subject: CN=7F0654BD85D44A5D49023E90DADF47878075802D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:9a:31:3f:f5:d5:79:f5:5c:8f:7d:fb:33:
                    56:27:10:a5:cf:5f:a0:77:17:33:b7:c0:61:d9:a1:
                    b1:da:fe:20:2b:a7:f1:6b:e0:12:4e:1b:4e:83:67:
                    39:ce:81:df:a3:25:eb:75:e9:8f:fb:05:2a:a6:79:
                    c9:6b:d4:dc:9c:ee:45:bc:59:52:d6:9e:2b:f4:dc:
                    44:39:7b:32:7c:53:03:9b:cb:43:4c:3b:67:e2:0e:
                    db:b6:03:f3:1d:04:65:9c:87:b5:ca:80:1a:ad:48:
                    d2:7d:f2:67:b0:8f:83:ba:fd:95:a3:8d:35:e8:23:
                    9b:00:ea:21:cc:84:bf:19:fe:66:71:ba:d3:44:75:
                    2f:66:2d:87:ec:3a:6e:76:70:e7:50:fc:b7:b0:6f:
                    76:65:e7:08:32:f7:3d:ef:4e:1a:17:a3:5b:0d:e2:
                    5a:d1:11:11:a1:59:2a:ec:e2:de:d6:ac:b9:39:93:
                    09:25:9a:76:b7:18:41:ae:8a:a4:76:3e:22:e1:60:
                    86:b2:d0:02:af:20:46:cf:64:33:b4:85:6f:e1:50:
                    6e:ef:12:20:9a:16:8b:d5:95:f7:de:96:96:c5:39:
                    c5:47:c3:04:db:51:1f:81:b5:27:3b:00:44:d5:ef:
                    bd:b7:df:68:f5:d4:45:d5:6a:0b:5d:d4:7b:96:4f:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:06:54:BD:85:D4:4A:5D:49:02:3E:90:DA:DF:47:87:80:75:80:2D
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:79:6c:df:86:cd:d4:35:b6:0d:62:e2:28:41:08:2c:6f:43:
         a3:4c:22:18:74:7e:7c:d1:75:74:57:43:a2:ce:e1:71:47:b6:
         8a:63:f9:67:fa:6c:1e:1a:97:50:50:f3:fd:30:a9:fa:6d:d1:
         98:2d:6d:33:55:40:8d:0e:2f:d3:05:bd:30:c0:a8:6a:e0:e9:
         ae:2c:1b:65:eb:55:b5:13:28:6a:02:55:fb:d0:c3:1f:d8:54:
         4c:cf:c3:22:c1:26:17:0c:66:08:0b:78:29:d3:b0:32:7a:c4:
         db:ad:e3:f6:d3:c5:24:84:49:87:9c:1f:eb:34:1a:d2:72:db:
         13:7b:5f:f1:97:84:72:f9:37:71:bc:10:23:2f:b5:83:85:3a:
         cf:f0:1f:b5:48:4a:08:56:93:22:ad:15:16:ec:d8:9e:16:76:
         29:5c:4a:f5:df:c9:39:cf:3a:d8:7e:f4:84:09:49:90:7d:fb:
         b9:96:db:68:ca:a7:3c:8e:20:c7:83:7f:61:00:44:c4:5b:d8:
         bc:05:33:ce:96:4d:e8:3e:b1:8c:c0:51:56:59:59:76:a8:3f:
         f9:8a:44:a5:8b:20:bf:d6:2c:99:6f:6d:6e:ba:8c:be:7d:ed:
         2c:ec:76:cb:f3:99:e8:dd:93:02:14:09:14:54:48:49:1d:e2:
         4d:1c:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org