Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          4u2xeH/9fbIkb1TkdZx2NTnTk76xA31fOg11JGMBqa4=
Subject key identifier:   2C:19:34:15:5B:D7:15:86:F6:4D:67:6B:D1:32:CC:70:8D:79:1F:28
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       465AFE2D68F98E8F547AA3C02824C3A13FAB91A0
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa
Signing time:             Thu 02 May 2024 16:26:55 +0000
ROA not before:           Thu 02 May 2024 16:21:55 +0000
ROA not after:            Thu 01 May 2025 16:26:55 +0000
asID:                     265393
IP address blocks:        168.194.165.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5a:fe:2d:68:f9:8e:8f:54:7a:a3:c0:28:24:c3:a1:3f:ab:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: May  2 16:21:55 2024 GMT
            Not After : May  1 16:26:55 2025 GMT
        Subject: CN=2C1934155BD71586F64D676BD132CC708D791F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:5a:eb:d7:90:3c:b4:60:c8:23:de:48:e3:
                    49:f4:7c:1b:8b:d4:9e:0f:91:3b:8f:2f:57:41:e7:
                    7c:fc:bc:08:cb:47:c1:4f:ef:da:0b:9c:48:e0:3e:
                    65:2c:ad:ed:0f:04:11:3e:da:5d:83:58:0a:7f:a9:
                    ab:4e:bd:9b:e3:3f:64:d9:4d:a9:55:0b:4a:0e:8e:
                    58:fb:d5:51:17:f6:2c:e5:fb:e7:2d:45:2c:68:60:
                    5b:d8:4f:11:27:c0:e3:91:3a:29:91:1b:aa:d4:62:
                    60:78:f8:eb:3c:12:f4:d2:fa:33:78:47:6c:30:16:
                    7d:51:7b:b4:99:38:1d:b2:fe:1b:9f:5a:34:d3:e6:
                    d3:9d:11:db:d5:c7:ba:ac:40:87:00:a2:6b:7f:01:
                    dc:a8:22:02:72:d3:d7:65:a8:89:9f:06:44:b8:7f:
                    fa:86:c7:93:fe:88:aa:13:74:3b:58:30:ad:17:13:
                    c8:5f:f6:a1:7f:cd:77:f1:1c:e2:56:8a:55:d9:9e:
                    7c:98:ee:bb:d8:c1:25:50:48:c1:0d:11:e3:93:71:
                    79:99:3f:a0:e6:b0:69:a6:d9:cc:c0:3d:1f:74:d4:
                    00:b0:5a:b7:97:61:41:1a:fa:c7:ce:44:e3:9f:25:
                    8a:5e:e5:e7:68:9f:e1:34:27:1b:36:0f:09:ea:c4:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:19:34:15:5B:D7:15:86:F6:4D:67:6B:D1:32:CC:70:8D:79:1F:28
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136352e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2b:30:e5:39:4b:a8:50:6c:3b:87:64:d7:26:fc:21:71:0f:
         aa:f1:ae:c7:31:51:23:09:75:2d:a1:bf:a3:61:56:7d:64:5b:
         03:87:13:49:2e:7b:59:38:08:f9:67:1b:32:4d:25:73:56:a9:
         f6:5a:78:33:a7:fb:24:54:b2:51:55:68:c7:e7:8b:03:61:6c:
         7e:0b:05:ad:81:f0:80:21:4c:1d:58:dc:80:e4:ea:7e:ec:62:
         02:a3:19:03:08:5a:95:1c:b5:e2:51:94:3e:88:0d:77:bc:bd:
         e4:c3:87:56:1e:e3:32:43:9d:34:9d:9b:25:da:2f:d0:52:a8:
         a7:a1:3d:cd:5d:89:9b:e3:e1:de:e6:f8:4b:dd:6b:ea:df:8d:
         71:4d:9a:7e:66:da:66:d2:e6:c1:86:e9:8e:53:39:5b:0f:b6:
         f4:8c:39:9c:93:bc:87:5b:ff:6f:ad:ca:40:21:e6:75:42:fc:
         0c:a4:46:c9:11:43:9f:a7:e2:e3:e4:96:68:fc:a4:b5:b4:a5:
         f6:3b:77:e1:86:7d:9d:d1:cc:59:a4:e1:81:ae:3c:5d:a3:fd:
         5b:b4:80:97:7c:60:50:29:b6:f6:ff:9e:12:9f:6b:43:5a:b8:
         83:b1:ae:3e:30:dd:7e:36:53:41:64:26:8c:45:71:dd:d1:9d:
         7a:e0:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org