Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32322d3232203d3e20323635323837.roa
File:                     3136382e39302e3133322e302f32322d3232203d3e20323635323837.roa (raw, json)
Hash identifier:          7rI93yE9igwlNuT9D08BdaMQMMkncR2+QD7l9Sj5n1Y=
Subject key identifier:   D7:6D:2E:63:27:3C:4E:A0:74:2E:1E:06:AF:B2:0D:24:73:24:54:E5
Certificate issuer:       /CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
Certificate serial:       310D7F9E892DDCFA745A32FA2B43FF4848E4D469
Authority key identifier: 5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32322d3232203d3e20323635323837.roa
Signing time:             Thu 18 Jul 2024 15:37:07 +0000
ROA not before:           Thu 18 Jul 2024 15:32:07 +0000
ROA not after:            Thu 17 Jul 2025 15:37:07 +0000
asID:                     265287
IP address blocks:        168.90.132.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0d:7f:9e:89:2d:dc:fa:74:5a:32:fa:2b:43:ff:48:48:e4:d4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
        Validity
            Not Before: Jul 18 15:32:07 2024 GMT
            Not After : Jul 17 15:37:07 2025 GMT
        Subject: CN=D76D2E63273C4EA0742E1E06AFB20D24732454E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:6d:a7:70:5b:0b:26:16:0d:8c:db:60:48:
                    ed:8d:d8:86:fe:28:07:2d:d2:d4:f8:86:d9:54:61:
                    c3:13:87:62:21:63:58:dc:d0:da:52:06:b7:21:1c:
                    65:6a:7e:09:df:76:a8:8b:a4:ed:f6:cd:40:aa:b6:
                    db:33:45:28:4f:db:3e:7d:f3:7d:de:e4:94:16:a1:
                    4b:97:64:79:6d:69:7f:d7:9d:1e:fb:ce:63:36:94:
                    a2:79:36:41:1b:f6:98:cf:cb:82:cc:22:15:a6:a6:
                    c0:13:48:e7:24:31:fb:b4:e3:c5:23:3e:dd:c9:9d:
                    1c:cf:20:9e:23:1b:ad:11:12:33:07:9c:c6:fa:6e:
                    82:2c:8a:4f:45:94:ca:48:df:a3:c4:8f:14:b4:a4:
                    ae:26:c0:2d:79:bd:2f:18:1f:0e:fd:ab:86:4f:70:
                    ae:32:e7:94:28:35:ce:01:cc:a4:80:b2:3b:f3:cd:
                    50:bc:57:00:98:af:03:84:35:f4:2b:4b:ae:49:cd:
                    2f:ca:93:46:ca:33:15:23:73:1e:0b:e4:5c:42:39:
                    4a:9b:a5:5f:a8:70:b4:c8:cc:da:86:ac:f6:aa:e6:
                    b8:65:9f:cb:7a:d3:e1:d3:59:be:6b:8d:d7:bf:e1:
                    c0:d3:74:41:cb:25:f9:ca:e7:c1:d3:9e:bd:fc:20:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6D:2E:63:27:3C:4E:A0:74:2E:1E:06:AF:B2:0D:24:73:24:54:E5
            X509v3 Authority Key Identifier:
                keyid:5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32322d3232203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:d9:66:94:79:30:c7:65:15:f4:bc:8d:7c:76:9a:2c:f1:
         cd:01:09:ef:67:ca:2a:cd:24:7a:c8:90:52:f7:9d:87:27:e0:
         22:98:ae:78:bd:3a:ff:98:e5:e2:29:0d:25:62:02:46:d3:8a:
         49:ee:cb:d2:cf:f7:8f:58:25:a7:57:8d:7d:bc:a2:b9:8a:0b:
         a6:ba:ef:08:28:3d:18:ab:d3:6d:99:3a:15:86:82:f1:c7:9d:
         e4:7f:f9:f3:8d:55:fc:8a:85:9c:ef:14:5a:69:23:ea:8a:fd:
         bc:5a:3a:99:37:af:d3:20:1a:23:55:09:97:1e:74:09:c9:6b:
         a8:01:11:61:12:3d:e5:2f:e3:59:8a:be:6c:ba:0b:80:2d:83:
         7d:ca:09:95:08:8a:06:7d:da:02:a4:7b:50:a0:59:cd:e9:7a:
         ed:81:72:fb:bc:ce:9d:97:c0:f9:c4:7c:79:ae:4a:00:2e:db:
         b9:eb:dc:df:91:30:fd:8f:8e:2f:cb:36:df:c3:9e:a4:82:69:
         08:cb:f8:2e:f2:16:17:a3:77:06:99:d4:91:5e:1c:02:f1:38:
         5a:a2:f9:86:11:49:7f:dd:4d:b4:aa:34:21:d9:24:21:93:f0:
         8b:ab:00:e3:bc:05:9f:cd:c4:f6:8e:10:7e:18:d1:82:26:15:
         3b:98:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org