Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa (raw, json)
Hash identifier:          SlVuY09EGW6oxOYwr5iV/r1ns7OILYUthn13Dqx07PM=
Subject key identifier:   8C:C4:33:66:6F:6E:E9:4B:5F:9A:75:47:E8:25:F1:7F:5A:7E:01:BD
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       2E21D0DD7CD0D5C0CBE89EF74F6D45AA8EA83C1C
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:47 +0000
ROA not before:           Thu 04 Apr 2024 02:34:47 +0000
ROA not after:            Thu 03 Apr 2025 02:39:47 +0000
asID:                     265393
IP address blocks:        168.194.164.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:21:d0:dd:7c:d0:d5:c0:cb:e8:9e:f7:4f:6d:45:aa:8e:a8:3c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:47 2024 GMT
            Not After : Apr  3 02:39:47 2025 GMT
        Subject: CN=8CC433666F6EE94B5F9A7547E825F17F5A7E01BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:1b:53:05:1b:1f:7d:59:ec:29:a1:21:aa:
                    fa:88:d8:3b:c6:42:03:b9:97:2b:20:fb:e1:de:8c:
                    9e:4b:f1:9d:79:c8:6e:f2:a9:44:e7:cd:23:c2:e0:
                    70:8d:84:db:ee:77:2a:45:0a:d4:30:d7:0d:40:77:
                    8c:29:16:9f:d4:c0:a6:40:9a:7d:72:17:3d:86:22:
                    84:a3:13:e0:3b:68:68:b0:5a:6f:d8:bf:3a:e4:de:
                    b4:fc:69:01:e0:b1:0f:82:98:8c:6b:16:29:2f:dd:
                    b5:5f:e3:c4:ae:67:60:cd:a3:d6:c7:5e:0b:fe:d5:
                    29:41:b4:48:c0:77:fa:72:be:d7:7f:f7:05:3f:18:
                    c5:56:e6:8e:ed:fd:0a:7f:0a:30:1f:41:8c:a7:e3:
                    4c:c1:38:b5:d0:da:32:9d:04:83:2a:8e:2a:85:b2:
                    b5:41:cf:6e:0c:1d:f9:c2:a3:c2:d5:7d:ce:6a:b9:
                    4a:9f:b5:bd:92:05:f1:e9:ad:34:b4:d5:b9:f2:aa:
                    a5:99:37:fa:f3:1c:2c:2d:5d:33:5c:2f:a6:6d:de:
                    09:ad:62:80:12:92:35:f1:cd:5f:b4:08:a4:6f:e0:
                    ab:c9:fe:3a:97:4d:75:eb:b7:06:1d:22:ba:9b:3f:
                    8a:95:21:2c:e1:41:b9:3f:b6:aa:04:bd:cc:5a:2a:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C4:33:66:6F:6E:E9:4B:5F:9A:75:47:E8:25:F1:7F:5A:7E:01:BD
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32322d3232203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:70:61:ba:63:de:90:97:42:db:de:6a:d3:24:ac:c0:97:
         2b:4c:8f:11:c6:bc:78:f3:5d:f1:d7:91:dd:24:54:39:6d:13:
         47:ce:1f:25:20:9a:48:f5:55:ec:eb:59:da:5b:e1:1a:ec:0e:
         b0:0f:2f:89:82:10:f1:75:76:de:80:51:29:4b:85:41:e6:44:
         fa:6b:0c:4c:a8:9f:a7:be:10:f4:95:5b:90:f9:e1:66:de:41:
         6e:56:22:f1:2c:b0:5c:b4:5d:8e:c9:5a:87:db:0f:25:32:da:
         9b:d8:44:9b:a7:1f:94:16:07:44:bf:44:03:ae:60:60:b5:8a:
         6e:4c:46:36:50:1a:a2:0e:12:6a:99:10:8e:6b:d5:03:58:12:
         bb:65:f9:bd:5b:83:74:7f:34:84:32:80:ef:7f:1b:87:d0:6f:
         7a:b8:6f:7d:6b:54:3a:cf:e9:dc:05:a0:46:dd:f1:17:22:ff:
         2b:1e:f5:eb:92:d2:5f:77:a1:5e:ac:1f:23:8d:eb:3a:ee:6e:
         94:d5:4d:49:89:32:58:cb:54:a1:ef:0b:2e:d3:99:8a:59:62:
         6f:21:01:fa:f9:59:02:b3:8d:05:c8:34:9b:70:3d:8a:18:a3:
         26:e9:3c:75:b7:ac:f0:65:8a:a5:c3:e3:f0:4b:1d:46:0f:2e:
         49:93:91:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org