Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130362e302f32332d3233203d3e20323636313531.roa
File:                     3136302e3233382e3130362e302f32332d3233203d3e20323636313531.roa (raw, json)
Hash identifier:          C1lUKpP/j2zqQvXGj1TLoIG1LLgpO/Acyzm1jV9yFQE=
Subject key identifier:   11:6C:32:E9:41:27:F7:65:1F:AC:E3:D3:AB:7C:99:4C:69:80:A4:4F
Certificate issuer:       /CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
Certificate serial:       7673D1E20E5B282D77518F8C8EA5B17FF0308AE7
Authority key identifier: 78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130362e302f32332d3233203d3e20323636313531.roa
Signing time:             Sun 07 Jul 2024 17:19:29 +0000
ROA not before:           Sun 07 Jul 2024 17:14:29 +0000
ROA not after:            Sun 06 Jul 2025 17:19:29 +0000
asID:                     266151
IP address blocks:        160.238.106.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:d1:e2:0e:5b:28:2d:77:51:8f:8c:8e:a5:b1:7f:f0:30:8a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Validity
            Not Before: Jul  7 17:14:29 2024 GMT
            Not After : Jul  6 17:19:29 2025 GMT
        Subject: CN=116C32E94127F7651FACE3D3AB7C994C6980A44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f3:63:89:68:48:e9:f2:90:ee:24:4e:12:39:
                    d4:a8:f6:f9:23:05:7e:47:9b:ef:9f:15:f8:72:db:
                    de:11:e3:b0:56:ca:15:8a:e9:56:6f:33:82:7a:27:
                    e7:b9:8f:73:5a:95:7f:0e:6f:69:d8:c8:21:5b:db:
                    a4:06:2d:16:1c:b8:29:93:3f:0a:1b:e3:77:9f:53:
                    bf:5f:f3:06:9a:e9:df:b8:97:9c:19:53:34:f5:28:
                    71:f3:5d:bc:bc:79:84:65:4c:1a:e9:d3:de:81:df:
                    d8:8b:4d:67:88:9c:79:1a:91:1d:20:52:79:0f:ed:
                    44:9a:eb:57:1e:b9:d6:09:38:07:a6:b6:26:aa:19:
                    b8:23:1f:73:22:b3:0c:c2:db:22:4d:9c:86:76:e7:
                    f6:5c:ab:12:03:1c:68:07:46:43:b7:7b:a5:d3:e6:
                    c9:d1:77:c8:8b:a9:1b:8e:5b:e9:b3:2b:a3:e5:f4:
                    6a:42:f2:c6:8c:a9:90:34:de:b5:7c:29:53:0d:85:
                    89:22:c2:a8:43:bc:65:5c:08:9a:c0:8d:17:7e:47:
                    ea:5d:41:a6:d8:5d:d6:01:27:7d:e0:63:5d:a7:11:
                    c9:e2:13:10:15:f6:4d:ff:99:5b:2d:a4:34:d8:18:
                    3d:ba:9f:f7:1a:7c:38:4a:14:f7:79:21:57:43:74:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:32:E9:41:27:F7:65:1F:AC:E3:D3:AB:7C:99:4C:69:80:A4:4F
            X509v3 Authority Key Identifier:
                keyid:78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130362e302f32332d3233203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:95:f6:f8:bd:91:ca:4b:f4:e6:1d:f7:ee:12:6a:22:d4:75:
         98:b9:19:cc:a3:92:46:ae:01:5c:7f:5c:db:18:c3:d5:59:f8:
         e8:5a:ed:3e:07:ea:d8:f0:3d:d9:6e:b6:c2:46:45:d9:be:19:
         c6:ae:80:62:42:c2:66:de:31:e9:d5:f9:eb:b1:d7:51:ae:98:
         bc:bc:1e:f9:2d:fc:05:0c:fb:79:8f:b5:31:c9:5b:fd:d1:f2:
         68:3d:5d:26:5c:d5:7b:fb:05:9a:f4:65:62:d8:8a:6d:69:1f:
         e3:ac:78:4e:4f:41:d2:bc:6c:0d:54:47:e6:d3:fd:c8:90:5f:
         0e:29:dd:2f:ae:9e:17:0c:d1:54:06:ed:f1:33:eb:9f:12:1d:
         47:3d:6a:a4:e1:4c:b2:de:e1:1c:b9:36:87:ab:ae:ec:56:47:
         3f:11:63:72:8e:9a:4a:a4:a4:37:ff:9f:ba:ef:46:bc:fc:b1:
         3d:de:4e:5b:71:40:9e:e9:2b:70:d2:98:32:55:e3:ce:f2:14:
         b5:6d:29:14:53:cb:02:ef:1f:fd:21:5d:58:da:93:3f:d4:ac:
         34:e3:2f:22:68:a2:a3:28:a8:5b:89:d8:53:c6:bc:bd:56:77:
         e3:b7:85:d0:03:c9:eb:f3:19:01:a5:bf:b3:d8:ca:f8:74:a9:
         1f:58:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 16:54:14 2024 by rpki-client on console-fra.rpki-client.org