Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32332d3233203d3e203631363934.roa
File:                     3136382e3139342e34302e302f32332d3233203d3e203631363934.roa (raw, json)
Hash identifier:          RwPNdl5b7UuGjsRnRZL6ZbW6LR5OgTI/ssa2knxRT2g=
Subject key identifier:   8C:28:83:D3:5B:AE:D2:B1:0D:7C:69:79:23:C4:3D:3F:28:5C:40:BF
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       22FEA94B6386AF51D4F015ABED613FF65D2F657A
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32332d3233203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:09 +0000
ROA not before:           Wed 03 Apr 2024 19:14:09 +0000
ROA not after:            Wed 02 Apr 2025 19:19:09 +0000
asID:                     61694
IP address blocks:        168.194.40.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fe:a9:4b:63:86:af:51:d4:f0:15:ab:ed:61:3f:f6:5d:2f:65:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:09 2024 GMT
            Not After : Apr  2 19:19:09 2025 GMT
        Subject: CN=8C2883D35BAED2B10D7C697923C43D3F285C40BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:a7:24:8a:b3:a1:7a:a4:06:33:95:56:08:
                    b3:4d:fa:01:d7:cd:47:bc:73:aa:6f:3f:f7:ae:7d:
                    54:83:26:81:b6:1e:98:b0:f8:97:86:87:b9:78:82:
                    59:86:a1:85:aa:f1:1e:24:be:6c:e5:5f:68:ea:47:
                    16:49:c8:fd:9d:fa:21:60:98:09:4b:19:b1:2a:bc:
                    eb:35:06:d4:4e:e0:53:22:a8:8f:e0:60:3c:df:e0:
                    58:70:4f:5c:b5:bd:0d:ed:e9:55:94:43:17:54:bf:
                    6f:2b:e4:7a:cf:de:3b:67:1b:a5:66:bd:12:43:9a:
                    58:59:b0:e3:77:28:a2:c7:b4:a2:7b:32:9a:27:7a:
                    6b:cf:c1:93:80:6a:c6:8a:96:4b:1f:a6:23:68:20:
                    92:4a:69:3c:74:89:58:e9:cf:9c:9c:f6:45:76:6e:
                    b9:ac:35:ad:83:4e:fa:d5:5f:ef:de:52:fc:c0:18:
                    7a:8b:c9:25:3a:a6:1d:9d:02:80:40:33:cc:d5:b5:
                    97:b3:7c:67:79:74:5b:f4:95:ac:ba:3e:8d:7b:93:
                    6a:41:2b:d8:ee:cf:26:ed:f9:1a:74:70:b5:5a:4f:
                    48:c6:01:97:0d:4d:d4:50:c4:1d:c0:33:8c:3b:c4:
                    ac:5d:a5:8b:f8:56:9a:7b:b0:07:c9:5f:6b:64:25:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:83:D3:5B:AE:D2:B1:0D:7C:69:79:23:C4:3D:3F:28:5C:40:BF
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32332d3233203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:55:43:ee:dc:4a:e5:c1:22:d2:3f:23:4c:85:fe:66:6e:49:
         32:12:a8:65:d8:b9:26:53:2c:85:8e:98:e8:5c:6c:4e:13:9a:
         e5:d0:71:da:70:83:c2:1b:aa:fc:5e:d7:97:42:4b:a2:20:28:
         7d:15:0d:5d:ab:32:69:f2:43:d4:47:f4:bc:a6:6b:85:c4:80:
         bf:9e:1f:47:c3:bb:d7:a0:69:fb:9f:ab:6c:f0:68:b5:cb:22:
         98:3f:74:78:d3:06:63:4e:88:a1:5b:29:08:3c:bf:d9:78:66:
         93:4a:77:27:ef:c2:f4:94:90:61:6e:90:e1:ff:0e:9b:38:35:
         a8:2b:9f:09:38:5a:da:4f:a2:79:14:03:53:3c:24:99:1a:c4:
         53:4d:2f:0f:bf:85:7a:73:d6:d5:10:f4:53:34:51:70:39:d6:
         33:76:23:cb:10:14:6d:68:5b:ab:5e:06:df:b1:c5:9a:50:e5:
         44:1e:00:13:09:3b:9e:42:ed:c0:27:7c:1f:74:51:98:7a:f3:
         56:30:a4:40:ab:50:9f:a9:0f:51:58:d2:08:d6:4f:b9:cd:0d:
         2a:c9:48:62:70:94:c3:dd:5d:57:e3:a8:4a:b8:4b:45:20:6a:
         02:96:2a:70:b6:c0:bc:31:dd:06:e3:af:65:51:b0:af:8c:a5:
         b8:19:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:27:55 2024 by rpki-client on console-ams.rpki-client.org