Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3234203d3e20323731343239.roa
File:                     3136342e3136332e342e302f32342d3234203d3e20323731343239.roa (raw, json)
Hash identifier:          ti81J/v4XYN/bmjsdTU2NVmIWBZiAJIz0KyR0e/cB9I=
Subject key identifier:   0D:58:00:04:07:E2:EB:86:B4:53:91:96:F5:08:99:9D:B7:7C:51:C0
Certificate issuer:       /CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
Certificate serial:       248DF64F3CEC38A9E6C33CD4E9028B39E1EDB9A7
Authority key identifier: FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3234203d3e20323731343239.roa
Signing time:             Fri 03 May 2024 11:34:47 +0000
ROA not before:           Fri 03 May 2024 11:29:47 +0000
ROA not after:            Fri 02 May 2025 11:34:47 +0000
asID:                     271429
IP address blocks:        164.163.4.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8d:f6:4f:3c:ec:38:a9:e6:c3:3c:d4:e9:02:8b:39:e1:ed:b9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF08FFB6D0FE39D46098F29E2561500E8827C3B3
        Validity
            Not Before: May  3 11:29:47 2024 GMT
            Not After : May  2 11:34:47 2025 GMT
        Subject: CN=0D58000407E2EB86B4539196F508999DB77C51C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:68:81:ed:5c:26:58:61:2e:56:b8:c8:e5:
                    8d:25:c9:5a:34:c2:26:ff:37:65:62:ea:c2:54:57:
                    3e:5a:a1:82:b2:83:c1:aa:56:ab:b4:ca:3a:8b:c7:
                    b6:e2:01:d2:b0:e1:7b:5a:ac:bc:80:10:0b:0f:8b:
                    db:61:17:00:b7:69:4d:ed:99:97:67:c6:6e:4f:dd:
                    36:67:b8:d0:b7:da:5c:55:a6:7b:d5:c8:a4:10:b9:
                    ed:a1:4c:ab:a1:45:0e:01:9f:04:af:b4:92:d2:e7:
                    74:26:1a:fd:67:f4:0a:eb:9b:c9:27:47:82:5d:30:
                    b5:68:34:2d:21:fc:8c:bc:bf:05:cc:c7:cb:89:da:
                    3b:37:1e:70:8d:f1:cb:a8:01:f5:08:92:09:9d:a6:
                    57:1d:35:a8:b3:bf:9e:3b:ac:0c:33:11:0e:47:a6:
                    bf:27:f1:0e:74:6c:20:6a:7b:35:18:47:d6:bc:ee:
                    29:64:73:f9:79:87:3f:9f:dc:6b:b2:af:17:11:bd:
                    f7:7d:45:05:26:93:29:c9:43:ba:08:b9:2e:77:fc:
                    52:49:b0:9f:9e:8f:b3:d0:88:85:50:7b:a0:46:04:
                    07:fb:49:02:f2:d5:be:8c:7e:5c:62:0c:e8:3c:ae:
                    d5:3e:70:3b:01:a2:38:a3:66:79:dc:e3:88:7a:f6:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:58:00:04:07:E2:EB:86:B4:53:91:96:F5:08:99:9D:B7:7C:51:C0
            X509v3 Authority Key Identifier:
                keyid:FF:08:FF:B6:D0:FE:39:D4:60:98:F2:9E:25:61:50:0E:88:27:C3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF08FFB6D0FE39D46098F29E2561500E8827C3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/3136342e3136332e342e302f32342d3234203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:59:06:fd:62:1f:8c:82:cc:f4:61:0b:a6:c0:54:1f:85:6a:
         fd:d4:7a:85:96:08:ea:6e:17:59:8a:89:b7:4c:8e:00:05:a4:
         eb:6d:55:45:44:24:97:0a:76:9e:f9:c5:3b:82:03:cd:e9:96:
         d0:6b:da:b9:35:a3:15:4d:86:51:27:cb:4e:53:fd:98:53:da:
         75:e7:7c:d1:96:08:91:10:f6:18:5b:5c:e8:55:3b:b7:ed:8a:
         37:df:3f:3c:51:7b:e5:49:e2:29:58:5d:6c:07:b7:44:81:30:
         f3:7f:0f:04:ca:f8:9a:e8:63:cf:ff:7d:29:3c:19:3d:c1:93:
         16:5b:e9:de:4b:e9:24:57:1a:0b:91:3f:fa:7e:de:9e:fe:8a:
         23:b2:ca:d8:93:27:99:57:a5:cd:c3:0b:7b:eb:f1:bf:65:bb:
         c1:74:d9:21:9d:fc:50:34:c6:58:45:94:be:38:7c:7d:c9:23:
         00:a5:05:8e:4c:3d:33:f9:e3:9a:ad:c0:66:39:36:d4:a4:60:
         ca:42:00:16:47:00:f3:17:0c:d4:78:4b:b1:f6:96:05:bc:26:
         83:b0:c3:4b:37:60:bb:2f:83:fb:8f:c8:03:d0:93:8f:16:73:
         bf:05:7d:09:57:3f:1d:f0:1a:5d:bd:8a:98:c6:5e:51:cd:d7:
         f5:26:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:11:37 2024 by rpki-client on console-ams.rpki-client.org