Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          qNJpkr212xY6zEC5j6A6nmwCswj4NBr/kz4inYOmYDk=
Subject key identifier:   56:EE:44:FD:65:65:44:19:91:79:BD:B7:96:CB:3F:5D:A8:E3:A5:6B
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       4F05C36885DE747FAA9EF526F2CBDD172DFDDA83
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 14 Oct 2024 01:49:52 +0000
ROA not before:           Mon 14 Oct 2024 01:44:52 +0000
ROA not after:            Mon 13 Oct 2025 01:49:52 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:05:c3:68:85:de:74:7f:aa:9e:f5:26:f2:cb:dd:17:2d:fd:da:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:52 2024 GMT
            Not After : Oct 13 01:49:52 2025 GMT
        Subject: CN=56EE44FD656544199179BDB796CB3F5DA8E3A56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:36:7b:3d:f9:46:3d:ea:9a:00:d2:26:70:fb:
                    6c:d0:2c:03:e5:b8:f8:94:46:61:8d:47:32:10:3c:
                    1b:ad:04:c3:6a:25:04:22:5d:07:03:c5:e3:55:0d:
                    c8:d8:f2:c7:b1:4c:c0:f9:da:23:59:45:4d:bf:e5:
                    32:b8:78:11:74:17:1d:52:1b:d7:07:18:91:a8:86:
                    6d:1b:d7:11:4a:6a:ab:52:14:73:59:be:b8:86:e0:
                    87:60:0a:d7:69:87:78:16:5d:b0:cd:76:ad:b5:f5:
                    eb:88:75:f6:57:c7:fd:1e:85:4a:70:7c:7b:c0:83:
                    86:89:b3:52:b5:75:b7:39:1f:92:b6:e7:d0:5f:0a:
                    6c:71:ac:7f:58:00:7d:7c:45:70:45:84:ec:6a:50:
                    3d:3c:a5:d3:02:c6:76:e5:ff:df:61:69:fd:36:d6:
                    aa:72:5c:0d:19:4d:70:7e:4e:42:68:eb:fa:1e:85:
                    6d:10:24:ef:52:3f:82:37:8f:38:83:d6:77:29:16:
                    82:3e:0c:85:4c:7e:fe:2f:1c:8f:f2:5e:93:9c:cb:
                    89:87:b3:e7:da:9f:e4:df:8a:1a:9d:11:a0:ab:2e:
                    68:ac:98:eb:a3:ca:2d:90:66:1e:9f:aa:c4:fe:c2:
                    20:85:f7:86:47:7b:72:40:27:4d:c2:cd:fa:c7:4c:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EE:44:FD:65:65:44:19:91:79:BD:B7:96:CB:3F:5D:A8:E3:A5:6B
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:e8:ac:49:d4:99:69:ff:dc:a3:a5:62:01:f5:51:5f:74:1b:
         28:ee:17:cf:a1:74:30:24:7d:65:6e:ec:2d:1f:07:8c:cb:d8:
         c2:58:a2:7f:e5:c5:ff:ad:e5:43:bb:02:72:4f:3d:54:c0:3a:
         9b:24:4b:fd:7a:fa:6b:08:8b:e1:58:2a:ca:f9:95:c9:52:f8:
         51:5b:88:9b:dd:fb:cf:fc:e2:7e:37:bd:56:a8:a7:1a:fe:15:
         2a:4f:a9:42:8a:32:ad:64:1c:6b:b0:86:aa:2d:a2:3c:c6:00:
         9d:71:95:b5:dc:fa:95:ff:76:00:47:d9:92:ee:5c:ad:89:2c:
         a8:f0:05:e7:25:f4:96:7b:2e:ba:b0:3c:7c:99:10:b5:95:50:
         1e:5b:32:c6:96:45:aa:96:4a:41:a0:66:ab:32:9c:e7:4d:94:
         3b:e4:79:76:5c:a6:27:95:4b:90:d3:0e:72:d3:2e:ec:24:fd:
         92:74:f6:d6:dc:16:37:43:4f:db:9f:e7:84:57:1e:82:0c:03:
         85:5f:b9:c3:70:c8:45:c4:f4:4b:dd:4f:c0:f4:9b:cb:20:95:
         35:97:7e:9a:e0:b8:a7:80:79:d5:a7:d3:b9:9b:88:20:75:4f:
         de:1c:57:ee:fc:66:e9:5e:3a:08:fa:f3:cb:3d:c2:02:a6:ca:
         c5:46:49:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org