Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32342d3234203d3e20323635393833.roa
File:                     3136342e3136332e3233322e302f32342d3234203d3e20323635393833.roa (raw, json)
Hash identifier:          GRRjYi0+MC5qr0zemKI/l1XOIcEF8XtgaxoXFFc2qLE=
Subject key identifier:   7E:83:AC:E0:78:04:11:C4:C8:AA:0D:7E:C9:63:46:2E:4D:D4:54:E9
Certificate issuer:       /CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
Certificate serial:       5858F08F1D2D2EFE91D048B4E8F4299122BF0B96
Authority key identifier: C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32342d3234203d3e20323635393833.roa
Signing time:             Thu 18 Apr 2024 11:39:12 +0000
ROA not before:           Thu 18 Apr 2024 11:34:12 +0000
ROA not after:            Thu 17 Apr 2025 11:39:12 +0000
asID:                     265983
IP address blocks:        164.163.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:f0:8f:1d:2d:2e:fe:91:d0:48:b4:e8:f4:29:91:22:bf:0b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
        Validity
            Not Before: Apr 18 11:34:12 2024 GMT
            Not After : Apr 17 11:39:12 2025 GMT
        Subject: CN=7E83ACE0780411C4C8AA0D7EC963462E4DD454E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:5b:ce:3e:6c:ae:bc:3e:7b:f4:1a:1c:65:
                    1a:44:9a:43:6c:be:66:98:8b:52:d1:47:ab:98:03:
                    f4:16:09:4a:23:83:30:2a:0f:99:fb:5d:61:eb:f9:
                    a0:16:2a:a7:36:4f:34:80:53:63:dd:80:1a:7c:4a:
                    17:47:73:57:58:90:7d:5b:23:0d:38:39:0e:58:77:
                    a8:75:6e:44:92:3e:0e:18:bd:3f:19:9c:b4:04:b7:
                    49:77:b7:e4:4b:e9:f7:7a:0f:4d:e6:a0:be:b9:6d:
                    d4:96:37:ab:ff:03:f5:b0:fb:48:31:28:b1:69:f6:
                    d2:70:76:34:5f:4c:36:63:c7:68:1a:76:ee:ea:48:
                    94:f6:8b:9b:45:34:24:29:f8:20:3a:4a:68:30:02:
                    6c:62:47:d9:94:68:99:2d:a9:d2:0d:7a:50:2b:a6:
                    e8:a6:c7:e8:7e:fc:f7:0e:e8:93:f1:8a:9c:87:aa:
                    ba:0c:4d:9c:1f:c0:0c:fc:13:58:3e:4d:17:87:56:
                    80:50:fa:76:20:01:b7:05:e6:63:c1:3e:db:8c:e6:
                    24:94:c5:6a:ab:a3:29:3f:85:11:29:49:cb:3c:ff:
                    f7:5e:a1:d5:34:ae:50:e9:d7:7e:d9:5a:4a:e8:6e:
                    ac:72:20:50:81:c8:fe:b0:16:89:2f:38:63:73:12:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:AC:E0:78:04:11:C4:C8:AA:0D:7E:C9:63:46:2E:4D:D4:54:E9
            X509v3 Authority Key Identifier:
                keyid:C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233322e302f32342d3234203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:cd:24:e2:41:53:c8:cc:f3:2a:1d:84:ab:57:d5:c4:a5:
         22:7e:89:f1:44:63:5a:1a:30:bf:be:3f:51:e4:53:76:1d:cf:
         a6:ad:3b:78:f8:ce:c2:7e:fd:0c:86:77:3f:75:39:4e:19:8f:
         07:0a:89:8e:f0:37:82:bd:0e:b0:11:83:4d:8d:fb:14:13:0d:
         d0:c4:e8:4e:33:fb:6e:94:f8:e9:6c:4f:20:dc:a4:40:90:68:
         80:f5:8f:8e:b4:82:27:ae:1e:9d:0f:c6:50:b5:78:61:56:88:
         63:dd:45:24:05:fc:f1:59:25:15:9e:ab:52:b9:78:43:d0:b3:
         be:fc:9f:80:aa:a2:ba:d3:36:c2:aa:a4:75:8f:bf:04:88:11:
         4c:1a:8e:a5:11:15:80:ff:7f:6d:a9:78:91:91:91:68:80:f4:
         bb:4c:91:63:90:e6:28:d6:cc:37:ae:17:b6:90:43:b6:cb:4d:
         8e:0f:f4:06:ef:c9:11:c7:b8:20:66:b5:19:11:d9:92:fb:bb:
         6b:c6:10:de:1c:ed:36:88:cc:37:fd:69:fa:91:ba:95:94:ea:
         d1:0c:8a:8a:55:24:54:4c:ef:9e:75:f1:a5:8d:ab:c3:62:4d:
         80:58:71:c3:c2:6f:95:07:bc:91:40:5f:13:c2:93:2c:32:c0:
         f9:2a:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:24:18 2024 by rpki-client on console-fra.rpki-client.org