Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/1/3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa
File:                     3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa (raw, json)
Hash identifier:          7ss+vuR5zWtDs0U7WgywmM9GhIKCvrCpY1MAiiAywIU=
Subject key identifier:   AF:6A:A7:08:CB:43:93:DB:FC:96:0A:F3:25:6E:20:93:87:52:F1:8F
Certificate issuer:       /CN=1820D67932F383034A92F829BC621A5EA4711618
Certificate serial:       4507649398C2E20158029DC307923A67F97244A5
Authority key identifier: 18:20:D6:79:32:F3:83:03:4A:92:F8:29:BC:62:1A:5E:A4:71:16:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1820D67932F383034A92F829BC621A5EA4711618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/1/3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa
Signing time:             Thu 04 Apr 2024 12:57:29 +0000
ROA not before:           Thu 04 Apr 2024 12:52:29 +0000
ROA not after:            Thu 03 Apr 2025 12:57:29 +0000
asID:                     265287
IP address blocks:        168.90.132.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:64:93:98:c2:e2:01:58:02:9d:c3:07:92:3a:67:f9:72:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1820D67932F383034A92F829BC621A5EA4711618
        Validity
            Not Before: Apr  4 12:52:29 2024 GMT
            Not After : Apr  3 12:57:29 2025 GMT
        Subject: CN=AF6AA708CB4393DBFC960AF3256E20938752F18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:e6:8c:a5:af:fa:08:50:93:1c:40:75:d3:
                    30:9e:60:05:8d:79:77:01:eb:f2:66:c3:56:0d:ec:
                    9a:18:1e:c5:7a:ea:0c:71:7e:f2:f2:2a:92:16:96:
                    22:46:7c:e8:be:b7:bf:53:b4:07:36:dd:c8:45:ee:
                    2a:01:2b:b7:0f:cc:7d:b8:e8:f7:d6:91:4b:89:3a:
                    69:20:aa:6b:0f:62:a6:9f:3b:dc:5b:82:5b:0a:76:
                    e2:ca:49:30:78:d8:24:84:a5:32:13:fd:55:ce:8f:
                    6a:91:02:4e:cf:0d:26:0b:09:92:11:4e:95:e9:7c:
                    fc:36:dd:0b:a7:68:7b:15:74:cf:a7:4d:1a:9a:ab:
                    d1:52:a0:e1:7e:d6:f5:20:2e:e1:60:a2:09:ba:db:
                    2d:c9:14:52:0f:57:e2:37:fa:0d:49:7c:b6:ed:bc:
                    b0:53:89:ce:ed:b4:69:1f:0f:20:de:e2:16:27:31:
                    50:3f:07:35:ec:55:54:3c:4a:c9:51:68:74:b3:c4:
                    66:0c:c5:28:4b:9f:69:f7:fd:ac:ef:cb:da:1c:2b:
                    ae:30:ee:9b:02:5a:3c:0a:0f:80:52:e3:b8:3d:56:
                    8b:73:55:14:f1:18:34:54:89:6b:a2:80:81:a1:79:
                    42:42:6f:cb:c0:3d:ae:3d:92:7a:c1:02:20:28:a5:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:A7:08:CB:43:93:DB:FC:96:0A:F3:25:6E:20:93:87:52:F1:8F
            X509v3 Authority Key Identifier:
                keyid:18:20:D6:79:32:F3:83:03:4A:92:F8:29:BC:62:1A:5E:A4:71:16:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/1/1820D67932F383034A92F829BC621A5EA4711618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1820D67932F383034A92F829BC621A5EA4711618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/1/3136382e39302e3133322e302f32322d3332203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:d3:1e:fa:f3:cc:e7:4c:f8:d1:f1:dc:76:85:c6:74:1d:
         49:95:d7:fc:c4:5c:f9:b0:05:f1:d4:37:d5:37:55:0e:98:df:
         10:3e:e6:b2:3c:7c:85:ad:8d:86:95:b0:02:99:66:d0:aa:7b:
         9a:67:6e:b4:95:6b:19:83:06:b0:0d:79:f1:d9:ea:6c:13:b8:
         8b:fb:d6:2f:bc:66:7f:f3:50:1c:96:89:93:0e:0a:03:e1:e2:
         56:1c:d6:82:9d:b5:7f:6f:c0:8c:44:11:b6:09:02:26:3d:c3:
         a5:96:99:ba:86:ba:17:cc:7c:e8:2b:95:0a:78:00:c0:d5:a2:
         52:3e:6b:ae:18:5e:b3:1b:64:00:d9:d3:cd:8a:70:8a:ba:e0:
         73:96:00:b6:20:77:ab:a3:57:55:c4:9e:22:78:e6:74:35:93:
         a1:03:36:5c:dc:b9:f9:ce:e5:5b:12:cd:8f:d1:b1:79:04:3c:
         9d:c7:c5:90:7b:d1:5a:6f:fe:27:97:59:08:9a:9d:58:e0:a4:
         f7:a4:b1:0e:e3:f3:05:4a:4f:fb:71:6e:85:7b:7a:d5:1b:36:
         62:fb:b0:26:32:c4:55:ec:1e:e4:eb:25:41:f9:ff:4f:fd:5a:
         89:4d:1c:90:7c:5e:df:9a:60:3c:2f:37:34:74:96:d9:be:bd:
         e5:42:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 07:34:39 2024 by rpki-client on console-fra.rpki-client.org