Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          UHCloJCeyVMLMED408qQZ8PWgDugCHR0y5oz423K5DU=
Subject key identifier:   F6:5B:C2:B8:31:2B:23:6A:0A:85:1C:D4:85:DA:DC:5F:B8:9A:EB:26
Certificate issuer:       /CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
Certificate serial:       0436005FA2F550B2E52E6C8CBE95CD75C2EF4DD5
Authority key identifier: 5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa
Signing time:             Thu 18 Jul 2024 15:36:19 +0000
ROA not before:           Thu 18 Jul 2024 15:31:19 +0000
ROA not after:            Thu 17 Jul 2025 15:36:19 +0000
asID:                     265287
IP address blocks:        168.90.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:36:00:5f:a2:f5:50:b2:e5:2e:6c:8c:be:95:cd:75:c2:ef:4d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
        Validity
            Not Before: Jul 18 15:31:19 2024 GMT
            Not After : Jul 17 15:36:19 2025 GMT
        Subject: CN=F65BC2B8312B236A0A851CD485DADC5FB89AEB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:cd:fc:57:cf:2f:83:ac:eb:1b:25:ca:4b:
                    d9:94:a9:76:dc:e1:03:37:d7:6d:19:c7:ae:b8:7c:
                    38:d5:e8:bd:18:fd:3e:4e:e8:7a:9c:fe:75:f9:6b:
                    6d:1c:a9:01:d1:e1:d3:5f:64:7d:a0:6a:7f:54:22:
                    8e:05:03:7f:93:fb:8d:dd:f0:04:71:e9:d0:2b:38:
                    fd:89:88:ac:48:2e:52:ec:df:e2:6e:54:fe:81:03:
                    ec:c9:b4:e7:d4:c2:0d:36:e6:ce:bc:72:e9:f3:c3:
                    68:f6:47:c7:3e:20:08:79:9b:c0:45:00:24:a5:86:
                    a0:8f:2b:ab:24:ca:c6:65:01:83:19:0f:c4:29:d9:
                    df:23:41:20:c3:18:39:b2:c9:43:b3:2b:bb:82:6f:
                    cf:46:97:4e:28:7b:8e:b0:0d:96:2c:ba:59:5f:b5:
                    54:d3:77:14:57:b3:4b:dc:d7:3f:d9:b7:87:af:44:
                    21:76:c2:d2:df:52:9d:1d:49:08:4b:25:a0:9d:34:
                    af:e4:c1:3e:f4:43:e8:98:60:0e:06:21:18:d3:63:
                    e8:ba:8d:22:79:39:b5:3c:2c:49:d2:52:a5:53:27:
                    9e:bd:6c:ac:d5:45:f0:48:38:ba:91:6a:b6:66:60:
                    83:b3:0e:bb:a1:1b:da:a6:1c:8c:b7:62:3a:c0:55:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:C2:B8:31:2B:23:6A:0A:85:1C:D4:85:DA:DC:5F:B8:9A:EB:26
            X509v3 Authority Key Identifier:
                keyid:5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133332e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:d5:08:70:b2:22:94:7f:06:56:0c:73:07:71:68:01:d3:
         ca:cc:b7:19:70:68:64:09:79:f2:b1:c2:49:3a:05:9c:7b:b5:
         e3:f9:a9:a8:cb:62:4e:7e:87:4b:82:e9:dc:80:74:eb:71:3b:
         1a:a4:7e:f1:9d:c0:7a:8a:dd:f0:68:72:9b:75:fa:a9:1f:14:
         a1:bd:0b:e7:51:10:0d:15:f6:de:6a:26:64:6b:6c:74:03:e3:
         27:b3:3a:53:f5:b1:5d:8a:d9:db:7b:13:eb:6f:06:d4:da:70:
         1e:00:24:6c:a5:72:9f:fe:fc:6a:80:88:61:af:52:db:69:0a:
         0e:c1:5c:0b:d1:4b:84:1b:89:ba:13:f2:ea:bf:eb:e6:06:23:
         00:60:05:ad:c5:0d:22:f0:6e:5b:2e:66:f1:ff:d7:b5:61:32:
         35:3a:05:fc:01:ce:f5:c5:4c:03:47:ee:35:67:fe:be:5b:1a:
         3d:55:70:13:a6:fe:8a:00:8c:e0:4a:ab:e3:fe:5c:2d:c1:84:
         43:fc:df:32:51:8f:4a:13:a5:92:db:a2:2f:76:50:2f:9f:bd:
         30:0e:a4:18:a6:44:12:7a:be:1b:7f:63:df:6d:22:d3:6c:a2:
         dd:31:42:79:c2:ee:a0:d7:76:8e:77:49:20:ae:14:2b:98:ee:
         a5:24:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:33 2024 by rpki-client on console-ams.rpki-client.org