Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
File:                     3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          GPO6SKNQ28/BQQde1maHRwguf8EgkI+s3IsyXsQjXUk=
Subject key identifier:   4B:D0:94:73:88:3D:D0:21:AD:1E:D3:64:AE:35:55:0A:91:41:58:5C
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       153279305924D63F4724634729043BC40F9B4498
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     262509
IP address blocks:        168.121.52.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:32:79:30:59:24:d6:3f:47:24:63:47:29:04:3b:c4:0f:9b:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=4BD09473883DD021AD1ED364AE35550A9141585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:30:1c:f0:65:64:d5:a1:58:2b:8e:dd:91:
                    da:f1:dc:66:04:54:ea:f4:9f:1b:cd:74:cf:21:f6:
                    da:eb:d4:ab:d2:da:2c:ef:e8:cc:44:0a:0c:d4:f1:
                    35:fd:5e:55:ed:db:77:b7:24:cb:67:64:0d:e6:6d:
                    d7:9c:67:89:63:6c:3b:d5:75:b9:3b:48:66:09:c7:
                    c2:75:b8:06:e1:e6:e3:f7:dd:72:2d:34:8c:8a:90:
                    5c:01:cd:ad:b2:50:12:76:e2:be:2c:0a:ae:76:cc:
                    73:b6:ac:bb:5e:eb:29:bd:94:71:4b:3a:7b:a8:9f:
                    03:56:8e:87:7e:4c:9a:b0:74:05:d4:86:0a:b9:13:
                    9b:17:80:1f:33:6a:ae:67:d5:c3:5b:ca:3c:20:6e:
                    f7:b0:e5:d6:73:45:2d:6d:db:a2:7b:de:c9:36:c5:
                    df:ad:c1:2e:87:63:51:13:5e:83:72:00:a8:26:36:
                    af:31:b0:5e:5d:a5:a9:6f:cc:3a:38:46:4b:81:86:
                    2c:98:df:ce:a1:c4:15:33:b8:3d:b1:78:50:6b:29:
                    46:6c:02:62:69:62:a4:bd:13:2d:35:05:2b:81:40:
                    ac:01:13:aa:75:0d:d0:dc:67:2f:6a:f1:34:e3:f4:
                    32:86:8a:9a:45:37:42:c7:32:d8:be:9e:aa:d1:4a:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:94:73:88:3D:D0:21:AD:1E:D3:64:AE:35:55:0A:91:41:58:5C
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:ba:27:36:aa:ac:6d:24:c1:9c:b6:2f:f0:81:1f:2a:aa:
         c2:cc:d7:ec:b4:d2:ef:8c:8c:fa:37:20:ca:cc:93:06:dd:ee:
         dd:23:f5:f3:19:3c:75:60:4d:d2:99:18:3f:85:43:a1:6c:24:
         96:43:77:53:68:07:60:16:ed:61:f9:6d:76:eb:52:64:df:9d:
         0d:81:7e:7c:c0:e8:a9:95:e8:03:f7:58:30:fe:26:01:ca:64:
         3b:37:a8:74:1e:80:f9:8d:5c:10:c7:da:33:ed:62:5b:c4:01:
         08:9f:61:e7:71:c6:d6:04:5a:88:01:83:5b:58:99:f5:84:19:
         bc:4a:27:b3:7b:b7:e2:be:85:f5:00:27:c4:7f:6e:1b:88:92:
         00:16:a4:de:f7:30:ec:db:2e:f6:28:68:77:6a:e3:13:11:87:
         1d:07:42:1a:f5:2a:b9:63:26:a6:18:94:9e:cd:be:7c:4f:9c:
         fd:b3:32:77:e0:66:7f:77:75:da:0f:b3:f0:2b:eb:87:78:f2:
         dd:d4:63:e8:75:19:5b:c3:9e:ea:d2:66:69:f8:2a:2e:b4:02:
         a4:fc:b5:bc:ba:40:07:da:84:ea:d6:6b:2b:4b:a6:52:e5:e5:
         ea:e1:71:e0:33:59:3e:5f:d7:1c:41:8a:7d:32:09:d6:60:09:
         42:e2:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org