Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/3136382e39302e38302e302f32322d3234203d3e20323632393838.roa
File:                     3136382e39302e38302e302f32322d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          D8O6uZSqTvCsuL+MSHjktAUj3OxJNb7pWlo15CMqWNI=
Subject key identifier:   0B:E8:D0:E2:58:27:EC:27:F6:C4:2E:DC:59:66:9E:1A:9A:81:76:00
Certificate issuer:       /CN=FC757BE4339BCF80344EB1FC45CB5E0C4DD30034
Certificate serial:       60EE7ABCAA48FF34375374355E863736CDF9B9EC
Authority key identifier: FC:75:7B:E4:33:9B:CF:80:34:4E:B1:FC:45:CB:5E:0C:4D:D3:00:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/3136382e39302e38302e302f32322d3234203d3e20323632393838.roa
Signing time:             Thu 04 Apr 2024 09:23:36 +0000
ROA not before:           Thu 04 Apr 2024 09:18:36 +0000
ROA not after:            Thu 03 Apr 2025 09:23:36 +0000
asID:                     262988
IP address blocks:        168.90.80.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ee:7a:bc:aa:48:ff:34:37:53:74:35:5e:86:37:36:cd:f9:b9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC757BE4339BCF80344EB1FC45CB5E0C4DD30034
        Validity
            Not Before: Apr  4 09:18:36 2024 GMT
            Not After : Apr  3 09:23:36 2025 GMT
        Subject: CN=0BE8D0E25827EC27F6C42EDC59669E1A9A817600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:51:d8:ee:0f:0a:1b:30:5d:9f:bd:02:0d:
                    97:a6:d4:c4:31:3f:5f:fb:53:a4:f9:1e:6f:b6:1c:
                    fd:6c:43:d4:75:23:ec:c6:65:d5:cc:31:fc:7e:60:
                    c6:35:ae:ba:dc:ed:57:f1:c6:1e:28:6b:4c:10:5d:
                    44:07:16:dc:e6:6a:f3:b1:24:94:e0:ab:fd:f1:61:
                    17:81:24:e4:c2:bf:45:82:9f:9b:6d:24:59:d6:db:
                    5e:80:e1:43:d4:ff:1c:d0:47:41:09:85:32:81:b4:
                    9f:4d:3f:6e:f7:87:d7:e9:bf:2e:ac:eb:ec:03:71:
                    7b:c7:51:70:e6:39:74:77:bb:a2:91:37:9f:3b:4e:
                    5c:53:98:a4:f2:89:0b:13:0f:d5:76:00:57:21:71:
                    10:f2:ee:16:ac:d2:fc:0c:49:84:f1:9d:0c:a0:3c:
                    18:8f:98:f9:60:1b:49:b2:82:e5:24:8e:58:25:da:
                    e7:01:e3:30:0c:c0:a1:b7:43:52:b8:b4:08:c4:6d:
                    d9:74:ff:12:a1:f6:b4:f8:f5:bf:bb:3f:44:f3:46:
                    11:26:d9:a5:56:e9:0c:42:3b:de:3a:f3:2c:1f:03:
                    e9:80:fe:4e:90:a3:4d:19:5f:c0:61:03:79:a3:ae:
                    26:45:95:94:15:b7:4a:d6:f0:66:af:f9:1e:51:1a:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E8:D0:E2:58:27:EC:27:F6:C4:2E:DC:59:66:9E:1A:9A:81:76:00
            X509v3 Authority Key Identifier:
                keyid:FC:75:7B:E4:33:9B:CF:80:34:4E:B1:FC:45:CB:5E:0C:4D:D3:00:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC757BE4339BCF80344EB1FC45CB5E0C4DD30034.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/1/3136382e39302e38302e302f32322d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:58:70:37:fc:24:a2:d1:17:3e:9a:06:9f:a3:f5:15:6d:c8:
         36:64:11:8a:0d:f1:9a:39:c2:e8:f8:cc:2d:0c:7a:59:b0:6a:
         3a:36:bf:90:bd:93:ed:03:69:05:2f:6e:b3:ae:fd:68:fc:aa:
         7a:6b:f6:8f:e2:e7:09:a7:61:ac:c9:e1:fa:b2:05:bf:a7:89:
         2a:d8:1f:ba:dd:77:b0:22:ab:f1:5e:75:f2:6d:f4:46:61:0e:
         21:a6:51:f1:56:4c:91:6c:53:e5:15:6b:00:d3:d0:9e:87:e5:
         b5:d7:43:32:af:7e:4a:74:95:be:44:d8:bb:97:f5:f3:5f:c2:
         87:4d:68:fe:d2:fe:21:64:ab:6a:e6:ca:70:bd:c3:d9:22:b7:
         ba:96:df:88:d3:7c:aa:d0:e0:ad:e2:ba:a9:c4:9a:23:a2:01:
         d6:70:4c:f5:eb:99:7c:a7:6e:0b:6f:ea:f3:cc:a1:3b:8c:cd:
         76:72:a2:3b:64:7c:1e:0e:32:fa:74:54:db:85:4e:e7:64:30:
         23:e8:ff:92:d1:db:2f:5a:1c:26:4b:a4:e0:96:a8:08:f5:b1:
         5c:aa:2f:80:9f:e6:dc:f8:e5:10:ce:ef:61:1c:9f:35:f4:e2:
         1d:e8:6d:db:b7:35:73:6b:cb:34:2b:4e:dd:02:91:39:1a:d7:
         12:1d:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 09:08:52 2024 by rpki-client on console-fra.rpki-client.org