Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa
File:                     3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa (raw, json)
Hash identifier:          ee7rnmLl+9sdbkbL19YZt6cToodloRgWFpQ1K0mAUfs=
Subject key identifier:   4A:DF:19:10:C8:99:59:98:A9:A8:D2:A1:3C:0B:2D:C6:95:2C:A0:79
Certificate issuer:       /CN=86BA241CDEDDD0EB0837151FECC1703934F67367
Certificate serial:       419D7C260F7DC9D2F81968956AEE161417A9EC7B
Authority key identifier: 86:BA:24:1C:DE:DD:D0:EB:08:37:15:1F:EC:C1:70:39:34:F6:73:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86BA241CDEDDD0EB0837151FECC1703934F67367.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa
Signing time:             Thu 04 Apr 2024 23:47:22 +0000
ROA not before:           Thu 04 Apr 2024 23:42:22 +0000
ROA not after:            Thu 03 Apr 2025 23:47:22 +0000
asID:                     264437
IP address blocks:        131.221.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9d:7c:26:0f:7d:c9:d2:f8:19:68:95:6a:ee:16:14:17:a9:ec:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86BA241CDEDDD0EB0837151FECC1703934F67367
        Validity
            Not Before: Apr  4 23:42:22 2024 GMT
            Not After : Apr  3 23:47:22 2025 GMT
        Subject: CN=4ADF1910C8995998A9A8D2A13C0B2DC6952CA079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:10:3b:98:28:14:ae:f5:8f:7e:22:b1:a8:
                    97:60:d0:bd:d5:5e:0e:3d:16:a5:fe:6c:ff:1d:af:
                    98:a8:c5:0d:a8:ef:e5:2c:9f:34:89:93:7c:73:26:
                    2f:04:34:cd:47:6a:a4:ba:38:ab:18:ab:6f:17:d3:
                    65:ba:18:b2:74:ae:1b:06:ee:73:fc:5b:4c:79:0e:
                    11:c6:e9:4f:cc:f7:16:9a:60:51:a8:30:2e:c8:1f:
                    f0:d7:1c:8d:fe:09:75:cd:82:03:16:9d:71:a7:f9:
                    60:b5:0d:22:a1:29:d3:cb:07:50:8d:90:8f:87:ea:
                    1a:66:e1:50:09:2b:2a:cc:13:08:ed:03:ee:b2:08:
                    8f:0f:a0:6b:90:88:7f:d6:16:97:81:fa:96:bb:3a:
                    a7:95:d2:5f:da:b4:be:a4:15:74:80:2d:fd:00:af:
                    8c:a8:30:21:32:41:85:4c:9b:1e:90:63:ab:81:f1:
                    74:0b:c0:27:82:06:27:2b:d6:62:2a:9f:0e:99:74:
                    d7:ce:12:0c:a0:3b:78:99:db:37:3a:e9:c7:dc:3f:
                    84:7b:a3:03:12:a4:ce:91:7f:e7:8d:ee:23:f6:75:
                    4f:fe:5d:fd:20:64:01:93:cc:a8:c1:99:30:99:51:
                    47:06:5e:b1:3d:ff:15:c8:8b:d9:f0:c2:f9:fc:e4:
                    9c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:19:10:C8:99:59:98:A9:A8:D2:A1:3C:0B:2D:C6:95:2C:A0:79
            X509v3 Authority Key Identifier:
                keyid:86:BA:24:1C:DE:DD:D0:EB:08:37:15:1F:EC:C1:70:39:34:F6:73:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/86BA241CDEDDD0EB0837151FECC1703934F67367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86BA241CDEDDD0EB0837151FECC1703934F67367.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/1/3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:89:a0:75:8e:87:da:db:97:4c:e8:de:af:f6:4a:5a:03:db:
         e8:61:62:4a:26:31:6f:1a:6a:2b:39:8a:3b:c2:61:44:0a:da:
         a3:2b:cc:bd:9b:ca:2e:ab:b1:df:5f:75:e7:a8:3d:44:71:17:
         f3:07:92:dd:35:ae:89:d3:3d:c9:c1:e6:e9:68:0e:f8:87:96:
         ac:2e:f1:29:2d:c3:37:0c:5a:ae:b8:4e:01:82:a2:7c:08:e7:
         ad:af:0e:f2:0d:1e:02:b9:7f:d8:1f:87:c2:d5:b0:d8:80:69:
         77:db:c3:be:6c:e9:e4:4c:23:a7:e7:b9:95:da:50:a5:26:d6:
         0f:64:4f:0e:44:95:27:65:85:aa:f4:e7:5e:c2:df:e5:07:14:
         bb:fd:6d:42:7d:be:09:9d:34:64:fb:cb:f5:6e:8d:64:be:3f:
         f5:82:57:42:f7:89:6b:92:4c:5c:23:5d:ec:7c:46:84:fa:9a:
         1a:9f:bf:44:df:c4:45:b9:ce:2b:78:07:f6:03:9d:28:a5:5a:
         20:b4:15:f4:16:b3:7a:1a:09:12:15:12:fa:8a:22:35:14:26:
         54:54:12:32:cd:8e:f9:69:b3:39:51:e1:c6:48:a2:8f:20:f1:
         30:32:18:78:3c:05:2d:99:b3:e0:5a:42:db:c7:13:7f:b1:7f:
         33:74:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 23:53:30 2024 by rpki-client on console-fra.rpki-client.org