Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32322d3232203d3e20323636313531.roa
File:                     3136302e3233382e3130342e302f32322d3232203d3e20323636313531.roa (raw, json)
Hash identifier:          O3JEp0NAdUMPR/uUBNKQiu37azbFsTFLki8HMUyj4NU=
Subject key identifier:   36:22:62:F2:0F:9A:72:E9:A3:17:C9:AD:CB:2A:A5:5A:DD:C0:17:17
Certificate issuer:       /CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
Certificate serial:       5B0870ED900357A47A81A0584FE6615BA36C18FE
Authority key identifier: 78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32322d3232203d3e20323636313531.roa
Signing time:             Sun 07 Jul 2024 17:19:29 +0000
ROA not before:           Sun 07 Jul 2024 17:14:29 +0000
ROA not after:            Sun 06 Jul 2025 17:19:29 +0000
asID:                     266151
IP address blocks:        160.238.104.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:70:ed:90:03:57:a4:7a:81:a0:58:4f:e6:61:5b:a3:6c:18:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Validity
            Not Before: Jul  7 17:14:29 2024 GMT
            Not After : Jul  6 17:19:29 2025 GMT
        Subject: CN=362262F20F9A72E9A317C9ADCB2AA55ADDC01717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:cd:63:06:f6:27:c0:a6:72:44:ee:2f:e2:
                    d0:9f:88:84:7c:83:0e:a3:6a:6f:5a:1e:f7:10:67:
                    13:c1:40:c1:43:7f:46:3f:8e:95:ef:6d:9d:06:7c:
                    ad:c6:94:d6:bf:3f:0f:64:f7:78:c6:10:0c:b6:b8:
                    23:ba:ad:5e:e8:5e:b8:f3:31:78:34:da:7b:fa:ec:
                    eb:a1:ba:e4:db:37:dd:40:49:6f:a9:cf:ea:4b:be:
                    05:01:f7:36:cb:4c:0e:9c:f1:f2:29:51:70:00:9d:
                    ee:76:ee:ce:6b:97:a4:f5:98:8e:c7:a7:e6:77:28:
                    db:88:c1:45:7d:83:85:97:ed:91:eb:3c:be:0a:d0:
                    ae:d0:f8:1d:4d:e6:06:c7:0a:ea:24:7e:06:ef:f1:
                    9e:69:3c:12:50:e3:87:4c:0b:1f:20:73:9c:0b:02:
                    18:e8:20:6f:a1:a2:83:61:3f:8e:08:2d:56:76:d2:
                    fd:30:f1:d5:c3:b8:b6:1f:49:9e:67:b9:3a:c8:34:
                    2d:d1:e7:99:50:dc:1a:26:17:9a:01:51:d2:32:32:
                    3b:2f:11:93:2b:16:9b:00:37:5c:86:53:21:c5:cc:
                    95:b1:68:ee:d2:ca:1d:0e:68:82:9a:c8:e4:c2:2c:
                    bd:33:f3:83:55:b3:8d:bb:a6:81:26:73:fd:af:1a:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:62:F2:0F:9A:72:E9:A3:17:C9:AD:CB:2A:A5:5A:DD:C0:17:17
            X509v3 Authority Key Identifier:
                keyid:78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130342e302f32322d3232203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:e9:d2:72:c2:24:7a:a6:5a:0f:13:37:14:96:ee:79:dc:
         a7:38:98:e6:e3:68:df:d2:ba:51:fb:64:87:90:3f:96:df:40:
         13:71:e5:d8:6e:08:2c:96:5f:75:66:97:55:db:95:95:47:a5:
         5a:38:dd:bb:f3:05:7f:61:c8:b6:8b:84:67:61:14:00:cf:f5:
         7c:c4:2b:47:c7:02:82:a0:1b:98:de:eb:7d:66:46:86:d4:02:
         b6:ba:46:a6:d7:6d:70:26:ef:c7:16:f9:cc:8c:2f:39:ee:45:
         9d:68:50:45:0a:4f:f9:a9:37:bb:6a:33:35:d3:50:4a:7a:93:
         f5:b2:5f:2e:0a:ce:81:d3:93:cc:35:2e:8d:85:1e:41:27:6b:
         d1:91:b1:14:c1:3c:76:89:46:91:2d:4a:0d:6e:20:59:c6:f7:
         f7:9b:3a:e3:08:ca:a6:30:0c:01:03:2e:28:61:2d:23:07:dc:
         69:95:3b:e5:6f:b1:35:a8:07:4a:76:75:b2:f9:d6:e9:ce:9c:
         b3:e6:70:30:5a:81:5a:dc:d1:e5:a3:17:41:07:8e:9b:d3:8c:
         80:ce:2c:7e:9b:19:ba:eb:33:3f:43:e0:75:73:87:e9:aa:29:
         24:3d:cf:9d:0f:79:17:77:f4:f3:04:51:66:60:d2:8c:f4:88:
         ad:d3:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 16:54:14 2024 by rpki-client on console-fra.rpki-client.org