Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34322e302f32342d3234203d3e203631363934.roa
File:                     3136382e3139342e34322e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          ShTaYj8wvm48KDaBqr640g6UZMrriqp9vpKp10yRhx4=
Subject key identifier:   B1:CA:03:15:1C:1C:22:B9:57:AB:60:07:51:B6:0B:9B:96:C2:C0:CD
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       35BE073E8FC1714D6BB730CA8B35A61AFDB5D913
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34322e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:05 +0000
ROA not before:           Wed 03 Apr 2024 19:14:05 +0000
ROA not after:            Wed 02 Apr 2025 19:19:05 +0000
asID:                     61694
IP address blocks:        168.194.42.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:07:3e:8f:c1:71:4d:6b:b7:30:ca:8b:35:a6:1a:fd:b5:d9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:05 2024 GMT
            Not After : Apr  2 19:19:05 2025 GMT
        Subject: CN=B1CA03151C1C22B957AB600751B60B9B96C2C0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:5d:96:80:fc:65:56:f3:fa:d6:6f:55:5d:
                    88:9b:71:3e:f5:82:1c:5e:76:23:9c:39:47:6b:f5:
                    18:67:36:18:68:d9:d7:bb:79:fd:0f:e8:40:47:75:
                    a5:f8:5d:b5:bc:1f:9e:49:64:4e:c5:3d:b8:74:c4:
                    05:51:4f:35:c3:8b:cd:45:50:3a:73:f4:7d:5f:db:
                    ee:00:48:7b:ae:cb:0c:c2:43:f5:19:09:9d:b5:e7:
                    0b:d3:b1:66:bd:d4:45:03:1d:7b:65:c0:e7:83:78:
                    5b:19:a6:46:93:be:8f:77:e5:bc:6b:e2:52:c0:46:
                    67:9e:0f:e0:73:c9:af:d1:71:77:6c:29:a4:72:ad:
                    f2:11:ee:6d:c7:8f:b6:2f:df:40:40:d6:64:ed:ca:
                    79:cb:9e:4d:77:55:fc:03:5e:2f:18:2f:28:97:71:
                    3e:bd:41:81:2f:a8:5f:28:25:fa:c8:89:93:81:41:
                    16:b4:39:ef:ea:e6:bb:60:1c:1c:dd:19:81:f5:ab:
                    79:9f:7c:b0:a9:92:a5:0d:f3:23:41:bf:1a:d7:d9:
                    35:2b:6b:ab:1d:ea:ac:e5:57:ba:8d:ad:24:cf:62:
                    4c:20:bf:8c:5f:17:2a:5d:27:13:7e:0f:37:e9:4e:
                    b9:41:0c:79:3e:fe:e2:56:a6:24:2f:35:9e:76:16:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:03:15:1C:1C:22:B9:57:AB:60:07:51:B6:0B:9B:96:C2:C0:CD
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34322e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ae:ee:e3:ed:8b:12:dd:74:20:d5:39:63:10:84:77:e6:d8:
         fa:d8:33:57:f8:9b:24:a1:3a:ea:ed:47:c9:95:e5:df:36:a4:
         e9:83:e4:48:2b:d8:c9:1a:8f:b8:0e:e6:01:dd:19:76:bb:be:
         6d:8f:7b:03:29:ef:20:01:74:93:f2:a8:99:dd:8d:43:c5:b1:
         58:27:38:0c:8a:ec:5b:ca:9d:07:ad:68:04:8e:0e:9f:6a:b5:
         ba:e1:53:e8:c1:04:cf:40:a8:8e:9f:9e:51:5d:e8:37:43:58:
         0f:81:8b:3c:cb:a5:25:17:ee:cd:cb:c9:d9:33:eb:34:4c:67:
         9e:ca:90:7b:74:36:2b:a5:76:92:f5:8c:df:c8:dc:34:eb:91:
         4a:ad:7d:9a:29:3a:30:40:9a:fa:b2:e8:0f:1c:40:00:65:19:
         93:19:0f:29:3e:a8:18:ad:d8:8f:8a:a8:2a:34:1f:38:57:47:
         aa:f8:ea:99:2e:0e:77:bd:cf:b4:a0:2e:8d:a6:32:1d:68:e3:
         f8:c3:a1:16:ce:55:2d:29:e9:5f:d2:a9:8d:94:9f:b7:fd:fd:
         97:d9:69:b3:9a:06:5d:f8:36:06:1e:ee:91:4f:a6:8f:1c:88:
         af:3b:91:ec:b9:54:bb:22:96:09:ea:a9:bd:dd:60:b2:0f:72:
         ca:f7:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:58:46 2024 by rpki-client on console-fra.rpki-client.org