Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          iGKERug96BH+0u9g4bkcenaVRaAvA05BorU2EjKhbh0=
Subject key identifier:   71:17:39:F1:F2:7E:DA:99:49:F3:CE:03:3D:55:DA:4F:8F:93:3B:83
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       10C7293268ABF555C0CFB8E09CF687FC8EA3B036
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:03 +0000
ROA not before:           Thu 04 Apr 2024 18:19:03 +0000
ROA not after:            Thu 03 Apr 2025 18:24:03 +0000
asID:                     264936
IP address blocks:        168.232.83.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:29:32:68:ab:f5:55:c0:cf:b8:e0:9c:f6:87:fc:8e:a3:b0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:03 2024 GMT
            Not After : Apr  3 18:24:03 2025 GMT
        Subject: CN=711739F1F27EDA9949F3CE033D55DA4F8F933B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:95:78:a5:d0:bb:ed:d5:41:09:44:b4:28:
                    2c:62:ed:64:bf:e5:e6:a7:75:44:70:79:61:aa:af:
                    04:4c:cf:02:b5:70:7e:d2:aa:c1:6f:89:84:f6:f0:
                    38:a7:e4:da:36:d0:3e:ac:05:b1:ae:7d:6c:a9:1a:
                    b6:1c:e7:41:a3:45:ed:a3:94:2f:90:f3:01:50:36:
                    1c:41:11:56:9b:d3:40:c4:21:89:91:b1:0a:c6:7f:
                    17:5c:08:df:1e:87:7c:c7:70:2d:b2:3f:bc:7a:97:
                    2e:95:b5:54:67:f1:89:81:63:1e:cb:68:65:88:ef:
                    66:24:32:75:cb:6c:47:37:5a:5d:d2:c5:0d:b4:30:
                    a5:b0:cb:ef:1f:68:a3:c9:fb:62:57:a3:72:70:fb:
                    e0:22:33:e1:36:32:83:bc:68:fb:3f:ca:46:9b:54:
                    22:e3:4d:01:ee:0e:38:3d:52:7e:82:e7:20:49:5d:
                    e3:9b:71:10:e6:98:1d:ea:0d:38:cc:6b:f1:bb:b7:
                    85:b4:d3:56:25:0c:db:0e:a4:25:a4:41:13:65:78:
                    4e:a6:55:d4:de:8c:2a:c8:21:e1:c5:85:f0:2f:b1:
                    eb:d9:70:be:06:17:92:6b:58:d8:30:dd:4f:86:7a:
                    70:51:59:ec:68:18:10:af:f6:b9:82:0c:5e:3a:09:
                    08:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:39:F1:F2:7E:DA:99:49:F3:CE:03:3D:55:DA:4F:8F:93:3B:83
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/3136382e3233322e38332e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:f1:27:98:36:35:04:47:c6:ed:f7:56:9c:25:1e:9b:01:d9:
         92:83:fd:85:a3:93:4e:7c:75:06:8c:ac:f3:13:db:0f:8c:12:
         be:14:d8:98:31:04:b0:5e:d7:a1:c4:45:5c:3b:be:3e:07:f7:
         0b:b1:7b:2c:eb:10:12:ef:3d:bc:6b:13:10:6e:17:81:b3:b0:
         b7:57:98:a4:ec:c1:ec:98:94:8f:8a:34:a7:7c:e1:f3:6d:e5:
         71:b6:2f:4c:f3:fb:12:cf:85:1e:c0:1e:24:03:fa:05:0a:0e:
         cf:57:d9:c1:03:13:97:e8:12:df:1d:0e:6b:42:11:64:8e:6a:
         0e:20:75:7f:aa:36:2c:0f:2b:25:47:be:94:50:45:02:26:0a:
         9c:a7:d1:a5:6f:f6:8c:4e:c1:16:ef:fa:a5:91:49:02:f1:02:
         63:e7:74:37:83:97:38:5f:d5:34:8b:b1:3c:36:0f:ae:72:d3:
         92:23:3d:63:4c:d7:4b:10:19:a4:93:2b:b1:8c:f3:87:5f:e5:
         4b:51:21:1f:7f:f3:c2:5e:a5:bb:6d:2d:52:a6:bf:d9:54:71:
         64:a6:93:d2:be:f3:92:8a:51:be:9f:0a:a2:3e:b1:5d:b5:9d:
         12:e5:6f:c8:e9:af:03:19:c3:b1:fe:16:1f:b8:1c:5a:c0:20:
         66:50:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 08:09:24 2024 by rpki-client on console-ams.rpki-client.org