Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa (raw, json)
Hash identifier:          v3nh54NowtfUR4pfqB9oUAS2fYIEXsEButV/18a9vCA=
Subject key identifier:   BF:1B:8A:76:F4:C2:06:89:33:73:75:D1:32:82:BA:41:B0:5E:84:EB
Certificate issuer:       /CN=4D40EC400BCF161D5176F6C2E3A646EBEADEB546
Certificate serial:       124CCC2FC0D52FA665622750EC3AD9BD909E0887
Authority key identifier: 4D:40:EC:40:0B:CF:16:1D:51:76:F6:C2:E3:A6:46:EB:EA:DE:B5:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa
Signing time:             Sun 11 Aug 2024 03:43:47 +0000
ROA not before:           Sun 11 Aug 2024 03:38:47 +0000
ROA not after:            Sun 10 Aug 2025 03:43:47 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4c:cc:2f:c0:d5:2f:a6:65:62:27:50:ec:3a:d9:bd:90:9e:08:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D40EC400BCF161D5176F6C2E3A646EBEADEB546
        Validity
            Not Before: Aug 11 03:38:47 2024 GMT
            Not After : Aug 10 03:43:47 2025 GMT
        Subject: CN=BF1B8A76F4C20689337375D13282BA41B05E84EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:21:5f:3c:07:14:6e:9b:9c:19:df:0d:72:
                    b2:33:ae:ca:e3:99:a4:67:81:b9:c7:14:ab:26:84:
                    91:97:dd:cd:4e:a0:7f:f2:0a:06:38:72:ca:df:eb:
                    59:19:89:d8:52:a7:f2:cc:9e:9f:de:d1:e4:bf:df:
                    f4:2a:96:16:96:f1:a9:2e:2a:1e:59:68:26:73:33:
                    cc:8b:09:f7:7a:90:02:39:19:a1:42:94:ab:6f:b0:
                    1f:ae:1e:d3:28:1f:c7:d7:3a:a2:e6:88:a8:6a:fe:
                    29:df:ef:c8:aa:23:08:6a:bb:4b:14:e7:fe:50:a6:
                    bc:18:2f:fa:90:b3:ce:b0:f0:95:a2:36:47:a6:e9:
                    c4:44:69:58:cd:5e:52:84:09:2f:f6:c1:1e:b8:f9:
                    30:64:b3:d1:4f:7a:37:b4:83:84:5a:19:84:77:e4:
                    2d:7a:1b:cd:13:24:9b:5d:88:d6:de:0b:1b:0e:fd:
                    36:2d:eb:7c:b4:5c:77:25:12:2e:56:70:b1:d0:1b:
                    46:ad:20:01:cf:4a:94:f7:48:13:a1:5f:06:93:df:
                    cd:a3:e4:11:ff:17:af:5a:06:a3:eb:24:0c:65:12:
                    5f:17:af:c9:a8:06:9c:d9:97:45:2d:8d:d7:fd:8b:
                    7b:f8:23:30:26:d0:19:82:48:59:34:99:04:a0:5b:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:8A:76:F4:C2:06:89:33:73:75:D1:32:82:BA:41:B0:5E:84:EB
            X509v3 Authority Key Identifier:
                keyid:4D:40:EC:40:0B:CF:16:1D:51:76:F6:C2:E3:A6:46:EB:EA:DE:B5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D40EC400BCF161D5176F6C2E3A646EBEADEB546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:93:a5:f6:1c:f4:73:e8:19:9d:73:bb:f3:8f:b9:70:32:89:
         95:0b:6e:b5:df:9c:dd:62:d6:83:db:52:68:42:f0:e7:2c:25:
         3f:6d:cf:ef:ef:ee:23:ad:f5:fb:59:72:6c:02:84:d7:83:35:
         ca:c3:ca:29:34:c5:a1:c0:8a:49:b3:52:3a:29:63:5d:ee:2d:
         49:f2:6e:dd:6f:a6:f2:35:76:ee:ec:ce:9a:a6:db:6b:78:2d:
         ad:d3:0a:98:12:67:89:6e:49:42:ec:cb:9e:98:5e:9f:cf:40:
         51:ad:a2:4f:2d:8e:69:7b:6e:3c:bb:a3:60:61:e2:0b:94:28:
         a2:c0:e6:16:88:3f:2a:63:c5:0c:4f:3d:21:f6:f8:bf:71:a5:
         d7:2b:13:e2:9a:4e:03:53:72:c9:b2:46:a9:82:20:19:b6:27:
         f3:16:45:b2:24:d2:7f:53:61:37:14:5e:b9:f8:f7:30:dd:72:
         df:e0:98:fa:5c:e5:38:dc:f8:a5:77:20:77:9f:bc:80:31:68:
         b9:49:74:08:52:81:a3:8c:86:6e:1a:3c:c6:1c:90:cc:01:36:
         b8:a7:a2:27:ea:6f:0b:66:59:4a:9a:db:33:e6:c6:c1:9a:d5:
         c0:ad:c9:f8:d4:7f:6f:76:fe:49:24:4b:0f:6d:fc:ee:34:f3:
         58:5e:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:52:52 2024 by rpki-client on console-ams.rpki-client.org