Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233342e302f32342d3234203d3e20323635393833.roa
File:                     3136342e3136332e3233342e302f32342d3234203d3e20323635393833.roa (raw, json)
Hash identifier:          VaGvpP+CFEQrTjkXBHPTqo976Jj6Y3j6TUu9V2CPj0Q=
Subject key identifier:   0D:2C:8F:C7:01:10:B7:72:2D:B5:0C:45:7E:D3:58:77:81:2A:23:73
Certificate issuer:       /CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
Certificate serial:       4A92B40B22AF597DB80A4358D4F14ABD7D8A9ED8
Authority key identifier: C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233342e302f32342d3234203d3e20323635393833.roa
Signing time:             Thu 18 Apr 2024 11:39:11 +0000
ROA not before:           Thu 18 Apr 2024 11:34:11 +0000
ROA not after:            Thu 17 Apr 2025 11:39:11 +0000
asID:                     265983
IP address blocks:        164.163.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:92:b4:0b:22:af:59:7d:b8:0a:43:58:d4:f1:4a:bd:7d:8a:9e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017
        Validity
            Not Before: Apr 18 11:34:11 2024 GMT
            Not After : Apr 17 11:39:11 2025 GMT
        Subject: CN=0D2C8FC70110B7722DB50C457ED35877812A2373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:d3:46:63:06:c1:28:ea:fd:69:5d:14:a9:
                    44:58:ce:0c:e0:24:ea:9e:c1:e4:7c:c2:e5:ba:13:
                    95:ff:8a:fa:1d:4b:f2:23:95:21:50:df:a9:3f:44:
                    ec:e6:e0:a8:79:2f:cc:14:73:d8:82:cd:45:29:b5:
                    05:23:af:ba:50:4e:97:8e:a6:77:4d:9e:f6:3f:bc:
                    40:de:05:0b:ef:7a:48:a3:da:8b:7c:17:55:ba:e8:
                    02:0a:4a:8d:a5:05:20:23:33:b7:2d:e8:92:d1:09:
                    3d:c2:89:d8:ad:89:8b:be:40:00:7d:24:ca:a2:a1:
                    2a:12:2f:8e:7c:49:a9:88:03:c8:e5:97:b4:df:ca:
                    92:01:41:c9:22:3f:a4:cf:9c:68:da:04:d3:d5:6b:
                    ea:fa:76:bf:26:7e:93:6c:f6:26:55:3b:ca:ee:5f:
                    d2:c1:97:87:56:60:33:0b:1e:38:52:2c:b7:f1:72:
                    cc:c4:ab:f7:98:ef:aa:79:87:9e:41:0f:d7:a0:f3:
                    c7:87:0e:34:2b:c7:ee:de:17:f1:cf:71:48:95:50:
                    5c:17:27:b5:9c:c8:06:f5:8a:7c:aa:17:98:61:4a:
                    b4:c2:16:4f:d4:a0:36:b6:0d:bf:6f:4f:0a:b3:fe:
                    8e:72:65:13:c8:7f:ff:d9:b1:75:b6:32:ad:d2:5b:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:8F:C7:01:10:B7:72:2D:B5:0C:45:7E:D3:58:77:81:2A:23:73
            X509v3 Authority Key Identifier:
                keyid:C5:45:47:AC:B7:5B:BB:CF:83:A5:C4:E8:CE:FE:0C:8E:A3:CD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C54547ACB75BBBCF83A5C4E8CEFE0C8EA3CDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/3136342e3136332e3233342e302f32342d3234203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:07:b8:47:6d:86:79:79:74:e2:62:91:d0:de:e4:7e:76:bb:
         98:64:e9:c1:c0:01:9f:b6:ab:d1:c7:0b:49:f9:bf:52:94:03:
         8f:29:66:00:57:ab:ad:d1:3e:e4:c0:23:10:6a:93:11:a2:a4:
         02:27:76:36:3e:ad:09:1b:cd:39:0f:f5:2d:d4:a3:6e:95:a9:
         59:d5:a2:83:32:5a:a6:fd:7c:d8:91:1d:a2:c1:c9:af:c3:01:
         b9:da:60:6a:a1:b8:82:47:03:29:ea:1f:1c:41:21:37:4b:42:
         4c:7f:1f:58:13:84:a8:f2:b2:5e:2c:8b:e9:33:2a:9c:9c:68:
         f2:d8:2b:bd:c1:23:22:77:31:4a:ca:ca:8b:d2:9e:b4:fe:a7:
         48:8b:7b:48:ff:1c:56:fb:6a:d6:93:ff:ef:70:99:5f:3a:c6:
         08:a2:4d:dd:cb:b6:99:b7:14:5d:99:69:7d:02:e6:f9:e9:f9:
         64:3a:c7:f4:6b:f2:f1:94:14:35:f6:55:c3:5f:ab:de:f7:77:
         67:09:be:a9:f9:df:7e:c2:a4:1c:6b:d1:dd:21:7e:af:00:e5:
         f7:af:81:e7:82:6b:50:b2:30:9c:b0:b6:95:cf:ae:f6:95:e0:
         14:35:68:4b:c9:03:21:e0:16:3a:5a:31:a4:c6:ca:d9:45:69:
         00:f2:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:54:14 2024 by rpki-client on console-ams.rpki-client.org