Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32342d3234203d3e203631363934.roa
File:                     3136382e3139342e34302e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          txVLKj+JlVga8utb8NysNHYXLPQFA3WsMQiWp6Kmd4A=
Subject key identifier:   4E:6D:26:95:18:64:69:92:79:A4:20:D5:BF:79:9E:97:DE:27:4F:43
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       22AC25C3E906DC3869F93B1786F8642232E39E79
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:08 +0000
ROA not before:           Wed 03 Apr 2024 19:14:08 +0000
ROA not after:            Wed 02 Apr 2025 19:19:08 +0000
asID:                     61694
IP address blocks:        168.194.40.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ac:25:c3:e9:06:dc:38:69:f9:3b:17:86:f8:64:22:32:e3:9e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:08 2024 GMT
            Not After : Apr  2 19:19:08 2025 GMT
        Subject: CN=4E6D26951864699279A420D5BF799E97DE274F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:df:61:1a:92:62:86:59:71:9c:69:d0:a3:
                    1e:6e:89:62:22:bf:9d:92:20:65:ce:16:68:11:24:
                    e4:ef:2e:1f:c8:81:2f:c1:67:e0:3c:e0:83:f2:a0:
                    c0:c5:54:d4:f8:39:20:51:56:6e:4d:c2:25:d6:4d:
                    1a:8e:b8:5f:9b:f9:9f:19:78:93:cc:82:63:2e:76:
                    3f:1f:df:c3:5a:10:5b:06:02:ec:12:7a:0a:c7:5f:
                    62:bb:e7:2f:8a:f4:c5:0f:89:84:dd:97:14:93:0e:
                    7f:8f:69:de:58:e5:9f:8f:d9:74:1c:09:d1:8b:20:
                    55:d5:2e:a5:ba:1e:0a:7b:ae:92:4d:dd:ac:46:f2:
                    40:c4:64:fd:4b:bf:84:28:74:f9:ea:34:09:89:4e:
                    04:46:bb:40:7f:2a:08:1f:42:5c:e5:bc:bc:9b:42:
                    d9:7a:ab:a7:9f:89:4a:31:10:b6:0a:76:35:0e:0c:
                    c7:78:e7:bc:f6:2b:7d:25:ce:b4:7f:36:0b:77:25:
                    e1:c9:b2:a8:3c:65:95:ea:29:bb:fb:26:70:e4:34:
                    2c:02:1a:60:8d:9c:75:9f:50:59:d4:df:3e:17:50:
                    35:9a:86:d4:67:6b:c6:ac:f0:51:1f:03:36:d4:13:
                    a4:38:39:9b:7a:54:fd:9a:ba:19:10:09:c6:0f:c5:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:26:95:18:64:69:92:79:A4:20:D5:BF:79:9E:97:DE:27:4F:43
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34302e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:64:9e:c0:fd:6f:2d:5b:bf:3c:e5:8d:62:18:5b:84:47:d1:
         0d:4f:95:a7:83:d7:5b:bd:71:12:15:99:39:66:f5:9e:72:64:
         7a:28:64:78:c8:e2:30:08:83:1e:1a:61:fb:55:08:90:6e:13:
         59:73:5c:df:50:73:01:08:bb:e7:32:7a:c5:9d:bc:fa:a4:16:
         a9:10:4c:61:2d:f5:a8:33:c6:4d:cc:b6:4e:68:9e:03:6c:03:
         13:9c:a2:af:39:6b:4d:e0:53:1b:f2:71:d5:d2:df:a8:27:2f:
         3c:cf:ee:9a:46:94:81:c4:dc:42:fc:61:5f:5c:7a:44:94:e2:
         b1:70:eb:bb:2b:5e:c4:bc:3b:08:aa:22:eb:d5:f1:1f:fd:67:
         0a:b9:c9:01:39:8e:fb:66:3a:9b:f1:5f:83:33:ba:af:26:5e:
         a2:e4:5a:8d:f4:03:9d:5d:d0:34:17:ad:0d:f4:8d:e1:92:95:
         2e:36:38:eb:11:f8:6f:6b:85:ba:8e:1f:13:64:9f:6b:6e:b0:
         cf:65:cb:ab:98:61:ed:3f:cc:a0:44:e6:77:39:da:34:ae:b2:
         a6:a4:77:c5:54:03:d7:e5:66:91:85:14:7e:f5:16:99:c9:98:
         48:65:e5:fe:74:8d:16:c4:b2:77:7d:a8:f1:5f:8c:d8:8c:a3:
         19:0f:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:58:46 2024 by rpki-client on console-fra.rpki-client.org