Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa
File:                     3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          5GK7njxyUVCh7wMN6aGg4PK+7B2VwGWOuFVEvpPOrPs=
Subject key identifier:   F7:AB:95:16:E0:9E:7E:DE:04:65:1B:27:39:1C:8B:D2:08:35:12:29
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       67F86B93D1111B9842CE59A5F0C50B6B8815E362
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:42 +0000
ROA not before:           Thu 19 Sep 2024 14:06:42 +0000
ROA not after:            Thu 18 Sep 2025 14:11:42 +0000
asID:                     262494
IP address blocks:        168.205.243.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f8:6b:93:d1:11:1b:98:42:ce:59:a5:f0:c5:0b:6b:88:15:e3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:42 2024 GMT
            Not After : Sep 18 14:11:42 2025 GMT
        Subject: CN=F7AB9516E09E7EDE04651B27391C8BD208351229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:12:26:1e:42:ff:f8:b9:25:cd:83:08:50:
                    ee:f4:d2:ca:2b:d8:30:fa:80:65:87:2d:6e:33:af:
                    5b:27:3e:10:12:50:43:b6:b2:74:2c:5e:6d:39:ef:
                    3b:31:55:db:cb:14:6f:ea:2e:f3:a3:f6:b8:06:cb:
                    90:00:c5:90:81:49:cc:73:3d:66:c1:be:aa:57:4d:
                    08:e2:07:60:2b:e4:eb:1a:09:c0:68:67:ca:0d:38:
                    55:0b:45:75:30:28:fd:b1:23:5d:ee:b3:a2:ec:44:
                    5e:8c:d0:85:25:33:93:fc:62:c6:b4:7f:f9:de:4d:
                    0b:ef:d0:6e:4b:1f:a0:16:dc:e0:e7:4e:d0:58:4f:
                    84:9d:6a:c2:0c:5a:61:64:90:96:f3:ec:b1:d0:53:
                    b0:24:ce:1c:ef:1f:13:78:90:72:82:50:fc:3f:83:
                    ad:e2:10:2a:07:14:18:68:ea:c4:d2:ea:e4:6a:04:
                    ab:40:2b:43:f5:e8:40:47:73:dc:d9:2e:66:9e:3a:
                    c4:3b:e0:d5:ac:a4:f3:25:73:9c:74:6a:4d:1f:54:
                    ce:3a:67:fb:a1:9e:77:90:69:12:54:6a:16:aa:a3:
                    a9:c5:ca:70:6f:d1:e3:3d:1a:ef:0e:6a:d7:cf:bc:
                    87:cc:c4:7a:29:24:39:a7:25:fe:37:09:f2:ec:68:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AB:95:16:E0:9E:7E:DE:04:65:1B:27:39:1C:8B:D2:08:35:12:29
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3136382e3230352e3234332e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:67:bd:e4:1d:d3:db:99:c2:6f:a3:37:83:0a:e2:12:a9:
         62:77:47:ac:d0:74:4f:81:86:ad:6a:15:b5:18:f0:80:8c:34:
         2c:9b:3f:97:50:2a:83:33:10:fa:6f:0e:fd:0d:8d:1f:31:5e:
         3c:73:9e:58:b6:c1:9c:0d:25:b0:6a:2f:3e:cf:b7:93:b3:9e:
         4e:87:1a:04:1d:e1:73:28:25:2b:e5:84:80:df:0c:f3:79:2a:
         2f:c2:ad:df:74:bc:3b:85:f5:8e:82:f3:eb:2d:6c:8b:e1:29:
         bf:1c:3b:a0:88:b3:c2:78:b4:41:d9:0c:67:47:e7:7f:75:62:
         a4:c4:a6:95:24:bb:f2:56:02:48:40:f3:60:2f:78:a7:7d:ea:
         5f:8c:3a:09:f8:6c:4d:bf:2a:b7:6a:73:4c:c1:ea:b3:5d:4c:
         c4:ee:80:d6:1e:3e:17:34:e6:cc:b2:61:88:57:9b:88:86:64:
         18:d1:15:08:4d:cd:6a:86:5c:94:fd:4a:40:1b:6b:1b:a0:4e:
         91:e6:1a:7b:48:ea:67:4a:2d:2e:f8:6c:26:2f:4c:7d:23:50:
         8f:6a:0e:0c:4a:ca:e4:24:b5:d9:ac:19:a6:a3:4d:ed:91:70:
         c9:e3:27:3e:61:3f:6f:08:c3:59:f7:88:51:c4:ea:77:8e:7f:
         fc:a2:ab:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org