Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa
File:                     3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          I9CiWTAsQH60WmnUo8pBagaKTQ0FKA6sVSlGjrqYb44=
Subject key identifier:   84:AF:78:32:52:6D:5D:F1:23:89:3B:60:82:DC:20:1B:5C:AC:D4:E7
Certificate issuer:       /CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
Certificate serial:       139CE2700E664222C873B4AFBD9540A1C2818CD5
Authority key identifier: 2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa
Signing time:             Thu 04 Apr 2024 18:29:57 +0000
ROA not before:           Thu 04 Apr 2024 18:24:57 +0000
ROA not after:            Thu 03 Apr 2025 18:29:57 +0000
asID:                     53218
IP address blocks:        168.181.116.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9c:e2:70:0e:66:42:22:c8:73:b4:af:bd:95:40:a1:c2:81:8c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2289E4D91FC8EF3DA4944C1892DEC02089B94D
        Validity
            Not Before: Apr  4 18:24:57 2024 GMT
            Not After : Apr  3 18:29:57 2025 GMT
        Subject: CN=84AF7832526D5DF123893B6082DC201B5CACD4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:67:b8:a7:be:2f:88:c1:6a:71:5d:ea:0d:
                    17:c4:99:90:98:f1:eb:4b:24:9c:93:5c:d5:b8:7b:
                    00:3a:47:35:24:04:53:32:8f:11:00:bf:4e:4d:95:
                    d6:5e:48:f6:65:7e:e2:47:31:d2:b8:f6:c6:64:ec:
                    65:84:9c:2d:03:89:37:3d:37:26:13:29:9b:9c:74:
                    7e:64:0c:17:ef:42:04:3f:bf:0c:a9:23:67:8a:b8:
                    c8:a2:ce:bc:9c:6b:e8:d4:3a:29:99:3b:1a:d7:b1:
                    42:25:b6:90:30:ce:c9:d2:08:46:15:74:93:f3:bf:
                    44:f9:1f:bc:31:db:11:9b:d8:b7:7a:9f:ab:0d:a2:
                    49:ff:4a:f1:1c:e3:52:56:7e:e9:00:c1:8d:61:09:
                    67:11:3c:44:46:24:b5:a9:f7:3a:af:2a:e8:9d:ae:
                    c7:2d:c7:51:91:2d:a1:2f:e5:60:0f:d2:98:ba:58:
                    21:c3:1d:ff:73:1c:39:fa:63:46:38:c8:a5:e8:3b:
                    dc:1d:f6:9e:30:f1:a4:a2:03:41:b5:4d:d1:c3:fa:
                    6f:e3:58:0d:25:3b:21:ec:ae:cf:2e:bb:be:3d:c2:
                    26:ab:4a:f5:9c:12:9c:64:8c:9b:7f:3e:65:b6:b7:
                    29:20:8c:19:c7:91:cb:1a:8c:e4:5e:4b:03:05:83:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:78:32:52:6D:5D:F1:23:89:3B:60:82:DC:20:1B:5C:AC:D4:E7
            X509v3 Authority Key Identifier:
                keyid:2E:22:89:E4:D9:1F:C8:EF:3D:A4:94:4C:18:92:DE:C0:20:89:B9:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2289E4D91FC8EF3DA4944C1892DEC02089B94D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/1/3136382e3138312e3131362e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:e0:e1:70:4a:3d:eb:2b:e9:41:39:da:a3:8e:8d:a9:97:2d:
         a6:83:51:41:82:f5:26:13:69:30:3d:45:29:1b:6e:44:c0:1d:
         df:4d:f8:0b:35:b4:5e:e1:e8:1d:d0:0b:3d:e1:8b:24:c2:b5:
         75:18:db:86:d9:42:d5:0c:0c:dd:a2:aa:bf:2a:30:fb:38:33:
         26:04:54:63:30:c5:ca:f5:c9:8a:7b:34:d1:25:ac:00:66:a4:
         4d:5b:98:19:93:07:0f:07:2e:51:44:6c:65:6f:5a:77:1a:37:
         79:26:8f:4b:b9:b5:00:3c:a7:5f:4a:6b:7b:43:1d:b8:c3:02:
         23:db:e0:0f:4b:62:27:f2:43:ae:55:6d:f2:f0:08:09:b4:df:
         ef:08:68:5d:bb:88:32:41:00:2f:7f:7e:7f:2c:d9:51:9b:96:
         ac:a4:ea:0f:fe:cd:20:09:9a:1d:95:ae:27:d6:42:3f:79:1f:
         2d:01:51:f9:79:0f:5f:6d:73:bc:00:bf:25:b1:07:c1:1b:69:
         f8:5d:da:e8:7c:9a:cd:6c:3f:60:de:3f:96:69:21:83:42:94:
         72:20:b0:be:7f:82:df:fc:47:bc:dd:24:06:4d:2c:b6:12:6b:
         21:ba:36:91:89:2f:7d:d5:b3:63:75:3b:f9:83:00:f8:f3:a5:
         b9:0b:4f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org