Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          N12R1R6Bwq06NymDz7YbW6Bjzz6F8/1+yvjZm4R0rkM=
Subject key identifier:   7A:13:BC:D1:84:29:E5:D9:FD:C9:D5:A8:51:1A:45:E7:F6:6E:02:BF
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       6A485181B750DA34247F0FA002C7D61BAA8257C6
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:46 +0000
ROA not before:           Thu 04 Apr 2024 02:34:46 +0000
ROA not after:            Thu 03 Apr 2025 02:39:46 +0000
asID:                     265393
IP address blocks:        168.194.164.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:48:51:81:b7:50:da:34:24:7f:0f:a0:02:c7:d6:1b:aa:82:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:46 2024 GMT
            Not After : Apr  3 02:39:46 2025 GMT
        Subject: CN=7A13BCD18429E5D9FDC9D5A8511A45E7F66E02BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:eb:6e:af:d0:d7:aa:1d:7e:96:68:26:b9:
                    69:47:07:02:ad:d1:b4:fd:7b:ac:a3:79:0d:61:19:
                    a8:56:d8:06:39:fb:2d:de:54:87:bf:dd:2a:1f:c8:
                    13:b7:9d:1a:26:31:63:17:16:d2:25:3c:c3:5f:e4:
                    e1:81:95:6b:8f:38:59:61:75:86:a5:3e:c0:7c:b7:
                    12:1f:24:2d:e6:1d:f1:86:e6:8e:c2:2f:89:f9:9e:
                    24:bb:05:c2:1b:bf:b5:e9:92:4a:9f:4d:71:fb:1d:
                    0d:77:d5:37:d9:bc:95:68:06:18:48:13:fc:fb:ab:
                    78:12:3c:b7:f3:b5:7b:e3:1b:93:ad:c7:c9:bc:2f:
                    37:02:9b:47:43:be:c7:55:0f:04:88:d3:57:1a:fb:
                    1e:67:c1:64:af:61:6d:0c:67:b7:d7:21:a6:4a:33:
                    c2:89:59:ae:ce:b6:3a:77:be:72:77:8e:87:cf:16:
                    0d:23:00:fe:2f:1a:07:a3:65:09:28:b2:44:36:25:
                    25:0b:39:43:99:01:02:b0:a9:d4:4d:09:a2:7c:ff:
                    9d:cd:7b:89:97:91:c5:44:48:bc:7b:0d:0c:dc:aa:
                    eb:60:c7:17:42:2f:b6:d5:f9:99:13:75:e3:67:39:
                    f7:cf:16:3e:07:a8:70:ac:a6:17:5b:a4:f7:f7:b3:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:13:BC:D1:84:29:E5:D9:FD:C9:D5:A8:51:1A:45:E7:F6:6E:02:BF
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:32:b0:44:b1:75:59:d7:d4:b7:5a:db:1c:51:39:ea:28:ea:
         b5:8d:66:bd:36:5d:7a:72:1c:94:bb:6c:fe:55:88:ad:d8:aa:
         de:95:66:7e:5a:ea:da:f0:ea:9b:e3:1a:62:f4:8a:75:62:95:
         9a:39:5f:6d:b8:37:0f:9c:63:ea:87:4f:21:7f:0a:fb:5e:f2:
         b8:4c:72:3b:89:9d:ec:02:9b:5e:12:bd:d9:5d:de:60:21:a3:
         d7:67:a7:fa:db:68:2e:5f:18:5b:86:76:bf:00:10:37:84:55:
         b4:1b:4f:c6:a1:07:85:28:d0:3d:70:03:ee:5c:0c:08:53:40:
         66:b7:21:f4:aa:f0:17:94:f8:5a:5c:e9:1b:bd:8f:9c:1f:37:
         ec:3a:14:d3:75:21:48:87:ea:40:25:a1:cf:59:a2:bc:a9:70:
         63:2d:b3:fc:14:90:f4:bc:9e:83:5e:70:5b:21:5f:41:84:90:
         0e:c6:01:95:09:b3:f0:b7:1a:31:39:21:9f:f5:9e:27:79:2d:
         ec:a1:3b:1e:80:06:80:96:a1:0d:c1:f5:92:fa:c4:a1:51:9f:
         26:29:09:9d:a0:d9:01:c2:16:da:cf:7f:9e:91:af:31:56:9f:
         ef:bf:83:90:4e:a5:95:0c:91:d9:dc:77:68:c1:cd:2f:2a:5f:
         17:70:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org