Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          /Q5Ll+MTobKj6tAVlhWWlAu9rF8mETTqXLTUHdwvZQo=
Subject key identifier:   53:9D:6E:94:D8:9F:2F:E1:51:3D:F7:E2:B6:87:9A:D9:7F:97:3E:AA
Certificate issuer:       /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial:       56A33FEE0020DB57A853D3A05E68D9F8A3FD65A7
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa
Signing time:             Thu 02 May 2024 16:27:12 +0000
ROA not before:           Thu 02 May 2024 16:22:12 +0000
ROA not after:            Thu 01 May 2025 16:27:12 +0000
asID:                     265393
IP address blocks:        168.194.166.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a3:3f:ee:00:20:db:57:a8:53:d3:a0:5e:68:d9:f8:a3:fd:65:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
        Validity
            Not Before: May  2 16:22:12 2024 GMT
            Not After : May  1 16:27:12 2025 GMT
        Subject: CN=539D6E94D89F2FE1513DF7E2B6879AD97F973EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:0e:0f:d8:e3:b2:bc:00:fa:de:52:99:bb:
                    1e:c6:67:3d:dc:07:1c:90:a8:77:76:c5:e7:5e:af:
                    c8:8d:13:c3:30:58:fb:67:1d:c2:50:6a:73:a1:fd:
                    9d:47:ea:52:50:d3:5d:3a:6f:d5:2d:b5:5b:98:29:
                    3c:60:da:ea:3d:c3:72:03:a9:95:91:bd:cd:6e:4d:
                    d0:66:55:e5:1d:70:64:d1:8e:8e:a1:c5:c4:90:13:
                    61:bc:d7:06:d1:e6:26:8b:93:f3:10:ef:c9:e9:21:
                    ac:6f:af:bf:77:4c:63:02:b3:e2:ec:85:c6:43:a0:
                    b8:eb:2c:bd:1e:ec:73:63:b2:da:1a:f7:8d:71:9a:
                    5d:fc:8b:8c:2d:3b:83:34:bc:96:cc:6e:56:11:63:
                    6b:64:88:d1:b9:df:77:e2:c8:b1:d8:5b:db:3c:99:
                    88:41:d2:d0:5f:d2:df:fd:35:cb:bb:b0:f9:ca:ea:
                    b1:3d:9f:4d:3a:7f:f4:59:99:9a:ea:f7:2c:df:e1:
                    1b:2c:bf:60:b9:84:02:22:06:f5:6a:33:e4:16:44:
                    88:49:e2:f7:c0:62:3e:f5:69:20:fd:4d:c9:e4:67:
                    c7:25:2f:44:a5:c2:08:4c:6a:67:85:ec:d2:f8:1b:
                    31:1c:3d:2e:91:04:e3:74:73:99:d0:a6:e3:d7:f0:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9D:6E:94:D8:9F:2F:E1:51:3D:F7:E2:B6:87:9A:D9:7F:97:3E:AA
            X509v3 Authority Key Identifier:
                keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136362e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:96:27:19:ae:a7:47:63:1a:d1:4b:3a:a9:b8:df:50:a0:
         c9:12:c5:37:37:53:5b:87:8b:93:74:72:3a:0b:61:b0:a4:68:
         96:cf:9f:ae:18:85:c9:31:1d:b8:34:9b:57:5e:64:94:9f:a0:
         ee:c6:d4:5d:37:09:fb:82:fe:9b:0a:ce:43:ce:03:ab:3d:ad:
         00:5f:aa:06:e2:81:36:79:15:3d:0f:85:62:0d:75:3a:4f:7f:
         a4:91:18:25:44:73:aa:a8:5c:e6:8a:b6:8c:b7:fe:10:f1:e7:
         12:50:28:65:3c:49:f4:21:22:0d:66:55:77:2f:6f:70:7f:61:
         0b:a8:1a:2e:1d:b2:b2:35:68:7e:a4:67:6b:72:2d:f0:ad:f2:
         53:64:0f:e9:b4:9d:6c:3e:77:5e:74:72:30:3c:bc:b5:b5:41:
         de:1b:6f:4b:08:6a:cb:d3:f6:4e:24:fa:a9:7c:aa:31:e9:9b:
         fa:70:ad:0d:35:16:4d:d4:47:89:b9:5a:40:30:4a:ee:0c:f5:
         2d:80:06:3d:2f:1f:39:85:5c:4b:7d:12:68:fa:6a:8d:0a:59:
         39:10:50:88:d9:32:64:3d:06:27:4f:35:5d:16:00:63:55:07:
         9e:02:76:ca:b5:6a:84:65:59:f8:44:88:b1:79:0d:a4:80:c4:
         74:a9:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 20:57:57 2024 by rpki-client on console-fra.rpki-client.org