Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130372e302f32342d3234203d3e20323636313531.roa
File:                     3136302e3233382e3130372e302f32342d3234203d3e20323636313531.roa (raw, json)
Hash identifier:          fEV0gB/ylw3rjlBYK3Rt5Q5NGVyH8D3J4P88/7sda2o=
Subject key identifier:   59:E4:8F:4F:A8:15:56:30:7D:9F:37:53:D0:0C:AC:9B:59:2E:5A:10
Certificate issuer:       /CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
Certificate serial:       1411D1C1A82FEBCE3DCD7B42EE0E5D468D7F1972
Authority key identifier: 78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130372e302f32342d3234203d3e20323636313531.roa
Signing time:             Sun 07 Jul 2024 17:19:29 +0000
ROA not before:           Sun 07 Jul 2024 17:14:29 +0000
ROA not after:            Sun 06 Jul 2025 17:19:29 +0000
asID:                     266151
IP address blocks:        160.238.107.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:11:d1:c1:a8:2f:eb:ce:3d:cd:7b:42:ee:0e:5d:46:8d:7f:19:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7844A4130B44EBA72382E59A5F8133D0DA50FC7A
        Validity
            Not Before: Jul  7 17:14:29 2024 GMT
            Not After : Jul  6 17:19:29 2025 GMT
        Subject: CN=59E48F4FA81556307D9F3753D00CAC9B592E5A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:c9:7f:eb:0d:4f:00:56:bf:a9:40:bd:2d:
                    8a:03:c6:90:a1:f2:6e:65:18:6a:6e:60:62:39:cb:
                    6c:d6:c5:03:15:de:1a:4e:93:ad:33:32:99:13:77:
                    2f:4e:36:49:3a:5e:33:b6:07:15:a9:04:78:0d:6f:
                    89:5b:5a:74:62:78:f0:26:a5:d1:ee:ac:96:44:c5:
                    b0:50:d2:9f:38:50:f9:25:04:6e:ce:e1:51:3e:6c:
                    13:ba:19:7e:59:fb:f3:7c:d1:76:57:5a:c5:fb:d8:
                    5c:5f:89:5b:59:87:0f:2b:7b:bd:32:a1:e5:dc:9b:
                    0f:3e:a4:33:a0:2e:41:e0:8b:1c:a0:cf:db:9f:2c:
                    d1:36:d9:73:0c:8d:8f:3f:bd:5d:e8:c2:99:1c:86:
                    ff:a5:3d:49:08:39:15:0f:aa:6a:da:c4:50:5e:db:
                    be:5b:39:fa:8c:8d:37:9c:5d:81:7d:63:76:82:62:
                    90:ca:b0:19:c9:1a:f4:f1:8c:72:0e:63:d2:c4:89:
                    ef:3e:a8:5a:a3:07:6f:c6:15:ae:c0:31:f1:b4:0a:
                    a7:b4:e8:d7:0f:c6:99:82:8b:18:a2:72:2b:0e:d4:
                    8d:0b:f7:2b:85:a0:ec:42:3d:06:00:1f:38:54:f6:
                    1d:71:06:46:ab:2e:f0:4e:03:1f:bc:9f:5e:c4:b3:
                    25:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:8F:4F:A8:15:56:30:7D:9F:37:53:D0:0C:AC:9B:59:2E:5A:10
            X509v3 Authority Key Identifier:
                keyid:78:44:A4:13:0B:44:EB:A7:23:82:E5:9A:5F:81:33:D0:DA:50:FC:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7844A4130B44EBA72382E59A5F8133D0DA50FC7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KKncSsQfok4sJpdHNwXYvhD6ajbHCCqyv3e4nFWn6Ka/0/3136302e3233382e3130372e302f32342d3234203d3e20323636313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:99:0b:80:9f:bd:ec:4c:d2:8f:ee:9c:0a:f4:fa:a2:b8:
         26:97:54:ff:d9:f3:46:9a:bc:ee:80:af:71:d7:33:28:2d:b4:
         cd:6e:8c:b4:23:c6:b7:65:ed:f2:54:98:39:52:72:3f:1c:9d:
         7c:ae:fe:86:fd:71:dc:b4:f2:ea:4f:5c:a4:a7:8e:36:6b:73:
         3c:76:99:b3:90:cb:f2:b6:86:52:16:03:f7:e4:15:26:07:b5:
         15:da:27:a1:81:5f:50:fd:b6:45:04:81:08:32:59:9f:5f:04:
         b6:de:8c:14:55:1a:8c:0b:56:74:21:9e:c3:5b:15:68:42:3a:
         17:ee:57:f4:5b:ab:c8:5c:b3:63:a0:53:7f:2d:eb:1e:87:00:
         f4:20:85:99:35:e3:cc:78:be:f9:b1:4c:63:16:6e:f4:c7:c0:
         4d:c0:48:63:45:95:ad:a2:80:4c:04:35:af:06:a1:c0:58:68:
         23:f3:2e:a5:9c:5e:6e:3b:2b:8e:d6:73:5d:6b:8f:3a:2b:31:
         88:4a:e4:39:9a:ef:f5:a7:28:61:20:14:ae:e1:4b:0a:c5:58:
         fd:0b:e5:34:b6:34:bf:46:42:07:f5:c9:ac:0e:84:4a:aa:ee:
         f6:7c:21:d4:fe:3a:15:92:ce:c2:2f:80:05:8f:84:9c:57:5c:
         53:74:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 16:54:14 2024 by rpki-client on console-fra.rpki-client.org