Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3136382e3138312e3233362e302f32322d3332203d3e20323635333531.roa
File:                     3136382e3138312e3233362e302f32322d3332203d3e20323635333531.roa (raw, json)
Hash identifier:          VoDTwwXrStF+VKLtYbv73OcMB9Fn+rmQRdSPvVJ2YBc=
Subject key identifier:   7A:F2:72:5C:F0:45:AE:03:B2:28:23:7F:3C:FA:13:BB:60:C7:83:47
Certificate issuer:       /CN=3527C81195C988EFF7060EA7D132610EE10C1F91
Certificate serial:       1DFB66BC4A3A2C3CCA9AA65589588C8BB3F45A6F
Authority key identifier: 35:27:C8:11:95:C9:88:EF:F7:06:0E:A7:D1:32:61:0E:E1:0C:1F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3527C81195C988EFF7060EA7D132610EE10C1F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3136382e3138312e3233362e302f32322d3332203d3e20323635333531.roa
Signing time:             Mon 22 Apr 2024 14:29:21 +0000
ROA not before:           Mon 22 Apr 2024 14:24:21 +0000
ROA not after:            Mon 21 Apr 2025 14:29:21 +0000
asID:                     265351
IP address blocks:        168.181.236.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fb:66:bc:4a:3a:2c:3c:ca:9a:a6:55:89:58:8c:8b:b3:f4:5a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3527C81195C988EFF7060EA7D132610EE10C1F91
        Validity
            Not Before: Apr 22 14:24:21 2024 GMT
            Not After : Apr 21 14:29:21 2025 GMT
        Subject: CN=7AF2725CF045AE03B228237F3CFA13BB60C78347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:5a:c3:bc:23:c1:36:1c:c7:94:56:3e:2a:
                    92:dc:98:79:8f:02:20:44:d9:f0:d4:41:21:fc:47:
                    66:9a:d0:cf:d3:e3:33:0a:13:2c:81:3a:bb:c3:d1:
                    71:03:0c:dc:70:50:32:32:42:4d:2c:e9:07:68:29:
                    b6:81:59:1c:b1:45:01:bc:a4:fd:7c:69:94:bf:63:
                    5c:df:93:47:53:4a:a7:71:32:6e:83:81:1e:ee:e3:
                    4b:00:eb:cb:61:2a:74:51:fc:dd:f0:d1:34:b1:29:
                    78:b8:d0:b5:0a:55:86:fc:4d:2f:a4:b5:a4:99:3f:
                    47:ce:41:71:84:1a:c9:6a:bd:55:60:9e:c0:64:94:
                    44:a2:84:76:cb:86:98:3a:b4:8f:77:b0:68:99:c6:
                    2a:e3:6f:c3:e8:72:9e:1f:39:12:2f:07:95:94:ea:
                    83:d7:1e:75:ed:d1:dc:a4:88:05:e8:5c:d9:50:ec:
                    7b:b2:07:0b:db:51:d4:a2:10:bd:cc:20:2d:6c:5b:
                    5d:4a:84:1a:f9:a6:b6:82:33:8f:c4:94:ac:b0:bf:
                    8f:01:9b:c3:19:ca:24:c3:ca:68:aa:a8:06:1d:7a:
                    db:ba:41:1e:6d:ef:d7:39:c2:b0:cf:6c:60:98:7e:
                    83:a4:c7:4a:85:33:13:ae:c9:43:eb:ab:33:14:61:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:72:5C:F0:45:AE:03:B2:28:23:7F:3C:FA:13:BB:60:C7:83:47
            X509v3 Authority Key Identifier:
                keyid:35:27:C8:11:95:C9:88:EF:F7:06:0E:A7:D1:32:61:0E:E1:0C:1F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3527C81195C988EFF7060EA7D132610EE10C1F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3527C81195C988EFF7060EA7D132610EE10C1F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YWwV2w1Hbcc7HRHzRVhoakVx6iEDa6VJM7Cuq2uZNJC/0/3136382e3138312e3233362e302f32322d3332203d3e20323635333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:54:cc:89:58:99:15:c9:91:c7:6a:e5:f7:a2:af:bd:e2:ca:
         2b:9d:6a:40:96:2b:c1:9a:30:d5:35:ed:11:5a:87:f5:7f:c1:
         fb:2d:77:d8:47:00:04:1e:e6:fb:6f:d7:87:ed:cd:78:08:50:
         58:0d:5a:cc:1e:bc:89:80:19:c7:b4:be:e6:08:c1:a7:e4:ce:
         f7:b5:c5:80:d0:04:86:70:1f:f3:31:a6:0a:fa:67:e1:3e:d4:
         c1:e3:97:29:3b:c1:5f:9e:1e:f2:43:74:3a:4c:9e:8a:d9:b5:
         dc:56:7c:a1:02:32:90:f5:25:fe:45:b3:8f:0e:a7:96:f0:c4:
         49:b1:19:e8:71:79:3a:90:6c:93:0e:12:40:54:f2:9f:43:07:
         e2:b2:e0:75:11:4d:f9:36:c2:0c:b1:1a:30:66:17:5e:1a:f3:
         05:e3:94:f0:32:eb:58:cb:ac:1e:f6:be:f0:05:56:24:9f:82:
         7b:fb:4d:23:dc:e2:53:e0:9d:79:83:0a:e4:ac:00:a5:e3:24:
         35:82:94:10:2c:0b:84:1b:11:94:01:67:54:5f:65:a7:92:5c:
         7c:ec:05:db:1a:04:00:18:49:fc:24:28:7a:fd:dd:3b:b7:43:
         50:7f:08:5a:3b:46:bd:95:0e:99:ac:4e:10:24:7f:2a:2e:a2:
         29:cb:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 00:22:47 2024 by rpki-client on console-ams.rpki-client.org