Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          Ua9jYqyNy7KI6ElASqsFFPQZPi6AaQ2OMUzxwMBHBL0=
Subject key identifier:   B9:F3:27:6F:48:C8:82:42:62:2F:4C:1C:CE:DB:36:60:53:6E:1A:C2
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       023574FB5F835FF6C1A2029515DFC635A4FAB883
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa
Signing time:             Thu 04 Apr 2024 02:39:48 +0000
ROA not before:           Thu 04 Apr 2024 02:34:48 +0000
ROA not after:            Thu 03 Apr 2025 02:39:48 +0000
asID:                     265393
IP address blocks:        168.194.166.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:35:74:fb:5f:83:5f:f6:c1:a2:02:95:15:df:c6:35:a4:fa:b8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: Apr  4 02:34:48 2024 GMT
            Not After : Apr  3 02:39:48 2025 GMT
        Subject: CN=B9F3276F48C88242622F4C1CCEDB3660536E1AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:cc:52:4b:fe:97:66:ba:c4:c6:b4:6c:0b:
                    0f:0f:79:f4:7a:a7:e9:f6:c2:59:28:ef:ae:25:8a:
                    e5:f6:82:f5:7c:b2:5c:4c:9e:09:ce:b9:ab:eb:52:
                    df:38:ce:9b:d7:be:8a:11:eb:de:6d:df:60:fd:ca:
                    72:41:ea:21:62:a3:93:a2:2d:c7:d1:89:6f:40:50:
                    89:c6:f4:db:8e:55:28:8b:af:e4:16:c5:67:b5:40:
                    e6:e5:30:23:a3:0e:fb:87:15:16:fb:20:0a:d9:7c:
                    20:dc:f6:87:d2:c9:8b:05:52:97:9f:9c:9e:59:a0:
                    8f:b2:41:f5:80:87:2b:40:de:5d:7e:56:19:57:61:
                    ea:47:e7:f9:23:f8:5f:a8:fa:64:dd:52:2c:42:fc:
                    5e:87:6f:1c:60:f9:27:49:93:6b:fb:02:9a:11:f4:
                    a3:dc:03:fd:c1:8d:44:08:b0:7c:9b:1f:76:6a:ec:
                    37:5a:56:a0:1e:3a:07:a5:1f:aa:6c:cd:4d:71:6b:
                    3b:0f:97:09:90:27:35:4a:67:94:f4:88:b2:1e:b2:
                    eb:91:87:19:9d:d4:2f:ed:8a:22:a9:85:5f:ca:88:
                    1e:09:03:02:e7:5f:e2:b2:ea:ae:d2:9e:b3:07:6a:
                    48:25:6f:2f:30:79:a8:b7:de:78:32:7a:ad:72:94:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F3:27:6F:48:C8:82:42:62:2F:4C:1C:CE:DB:36:60:53:6E:1A:C2
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136362e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:96:90:bc:30:4e:87:d4:0a:a5:95:17:f8:08:2b:86:e1:26:
         b5:51:e0:fb:c8:68:6b:c4:49:1f:3a:ab:07:71:07:c3:97:a5:
         8b:64:f4:40:05:9c:7e:ff:fc:a9:40:f6:ed:1e:0b:3f:b0:52:
         08:d8:d0:34:10:00:3a:20:ec:c3:94:dc:4d:d0:0d:21:23:6e:
         ec:55:b4:09:2b:80:e8:a5:d8:31:08:c5:24:48:6f:2e:dd:f4:
         1f:36:95:1e:17:2f:7c:bf:e6:91:3f:c1:23:01:ba:2c:bc:54:
         61:31:f5:ab:39:77:12:9b:71:03:73:04:f5:d2:7e:5c:cf:4c:
         88:7d:f2:4e:bc:66:01:d0:c8:6f:24:d4:70:35:46:69:db:cb:
         ba:af:c4:80:cc:5b:4d:af:d7:8a:66:c3:d1:ce:f2:68:e8:34:
         04:47:f1:92:27:4a:8e:6c:b7:9c:3e:2c:d1:84:b6:62:87:39:
         63:20:39:d7:a2:ef:35:47:1b:13:27:ea:2d:77:be:21:0e:d2:
         88:5f:86:2b:00:2c:3e:98:6d:c8:cd:cf:42:99:03:3d:88:ff:
         1e:37:5c:0a:67:19:70:9f:6b:6c:d6:05:22:52:9c:37:85:b8:
         af:fe:bb:e8:c2:73:3d:17:40:18:8b:3e:b4:98:83:2c:6c:b8:
         8a:27:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org