Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323731373531.roa
File:                     3136382e39302e3133342e302f32342d3234203d3e20323731373531.roa (raw, json)
Hash identifier:          fQsBxCKoGRb3sov1BO70gsZIiJ5Rmk/QyzvQu0SsGWU=
Subject key identifier:   9A:44:6E:09:32:F4:6A:4B:EB:71:79:6E:18:C4:4E:D7:3C:F3:BD:26
Certificate issuer:       /CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
Certificate serial:       482055692EC900B3ACBA01D97F9AD75ABA24AC57
Authority key identifier: 5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323731373531.roa
Signing time:             Wed 18 Sep 2024 16:00:48 +0000
ROA not before:           Wed 18 Sep 2024 15:55:48 +0000
ROA not after:            Wed 17 Sep 2025 16:00:48 +0000
asID:                     271751
IP address blocks:        168.90.134.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:20:55:69:2e:c9:00:b3:ac:ba:01:d9:7f:9a:d7:5a:ba:24:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
        Validity
            Not Before: Sep 18 15:55:48 2024 GMT
            Not After : Sep 17 16:00:48 2025 GMT
        Subject: CN=9A446E0932F46A4BEB71796E18C44ED73CF3BD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9f:a6:0d:71:26:c1:fb:42:36:f0:04:77:eb:
                    65:4d:9d:6a:7b:21:d9:be:55:13:72:1f:08:2d:8b:
                    41:ff:39:8e:eb:a8:1f:e4:13:30:1e:40:0f:cc:22:
                    88:4b:78:40:4a:ea:a8:90:ec:fd:48:cc:b5:d1:74:
                    42:ce:96:29:68:37:17:6b:ee:94:1a:e9:42:59:71:
                    67:1c:c3:e7:f7:83:92:3f:c4:24:d6:19:1e:c1:dd:
                    67:eb:24:0f:6e:3c:c0:4b:9b:55:44:af:7b:62:ae:
                    0f:c9:d8:5a:0b:1d:b2:7f:02:37:cd:63:c3:ea:6d:
                    c7:fd:12:f1:0e:c5:45:60:fb:bd:4d:b2:d4:d0:22:
                    af:41:7a:48:a4:d1:51:af:f3:ce:21:67:07:c9:bc:
                    71:77:6f:40:a5:f0:f3:e1:99:29:be:83:11:45:cd:
                    c1:19:cd:b4:f3:06:37:87:76:b8:1a:4f:55:b5:4d:
                    65:7a:c5:62:1c:d8:1f:94:94:37:d8:77:9c:98:09:
                    9e:83:ae:d8:33:3d:bb:5b:58:60:dc:60:99:79:9d:
                    5c:fd:fa:a4:fa:d1:9c:59:7d:17:cd:df:65:38:d3:
                    c4:bd:2d:0d:10:49:cc:b2:21:4c:bc:31:3b:e0:1c:
                    ab:71:16:8a:94:45:46:b7:f9:21:f3:86:c4:21:ab:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:44:6E:09:32:F4:6A:4B:EB:71:79:6E:18:C4:4E:D7:3C:F3:BD:26
            X509v3 Authority Key Identifier:
                keyid:5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133342e302f32342d3234203d3e20323731373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:dd:5f:53:e5:42:07:be:43:6e:20:b9:d1:ae:3c:bf:e9:
         f6:9a:ce:39:e5:16:29:af:b8:0c:42:6b:ad:da:ef:f4:c5:71:
         7f:30:1c:89:1d:27:59:2d:68:e1:42:78:91:11:36:1e:b7:e1:
         4d:d5:8d:98:83:40:b8:a4:60:e2:bf:6f:3b:3b:6b:c2:bf:ce:
         e6:10:80:0e:01:71:69:ef:a7:68:13:94:b5:98:c9:ab:2a:ad:
         c9:9a:b2:a4:09:30:c9:9e:49:a4:55:0f:2d:5d:9c:8a:37:12:
         1b:78:cd:b2:78:ac:e3:eb:e0:ca:d5:bf:7d:70:ee:1c:91:ea:
         60:d1:cc:96:b1:71:1f:a4:4c:23:e9:81:3b:9a:bf:2c:19:3b:
         fa:60:49:77:c9:ac:d1:1c:5b:f4:10:4b:6a:9e:4a:f7:cf:e3:
         79:b3:2f:8e:9f:21:54:dc:9a:04:58:0b:5f:44:47:2a:e3:20:
         60:89:3c:35:90:cc:52:1b:e5:36:f0:7a:c3:09:db:70:92:73:
         d2:ac:73:33:a0:7f:df:49:b2:37:2d:f9:b0:75:46:18:bc:da:
         96:e6:95:96:fa:0c:f7:06:13:3a:08:8f:2e:51:81:f6:32:79:
         01:30:77:87:cf:18:de:e3:67:d6:34:77:58:43:f5:2b:8c:17:
         c9:74:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 22 19:35:17 2024 by rpki-client on console-fra.rpki-client.org