Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32322d3332203d3e20323730393638.roa
File:                     3138312e3232352e3136382e302f32322d3332203d3e20323730393638.roa (raw, json)
Hash identifier:          iWfWYylCVpvosvv0TWC1vd8vl2/BMtOsZgvNd8S0BC0=
Subject key identifier:   09:2A:30:6D:D2:B0:28:58:AB:DF:2D:21:C4:5C:B9:0E:AD:EB:F8:BC
Certificate issuer:       /CN=A0C53C4472B862583355BBACAFD0255B69389183
Certificate serial:       7D19C9D74846EED69434042809D70BA9842DB54A
Authority key identifier: A0:C5:3C:44:72:B8:62:58:33:55:BB:AC:AF:D0:25:5B:69:38:91:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C53C4472B862583355BBACAFD0255B69389183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32322d3332203d3e20323730393638.roa
Signing time:             Sat 16 Nov 2024 11:59:00 +0000
ROA not before:           Sat 16 Nov 2024 11:54:00 +0000
ROA not after:            Sat 15 Nov 2025 11:59:00 +0000
asID:                     270968
IP address blocks:        181.225.168.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:19:c9:d7:48:46:ee:d6:94:34:04:28:09:d7:0b:a9:84:2d:b5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C53C4472B862583355BBACAFD0255B69389183
        Validity
            Not Before: Nov 16 11:54:00 2024 GMT
            Not After : Nov 15 11:59:00 2025 GMT
        Subject: CN=092A306DD2B02858ABDF2D21C45CB90EADEBF8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:95:dd:8a:9a:b9:cc:3e:52:d0:8c:fc:65:
                    8f:3a:25:1a:e0:be:cc:e8:59:3a:0d:db:9f:f6:b7:
                    3a:61:b2:26:f6:a0:76:68:39:34:bd:a3:f0:a7:28:
                    13:8d:a7:cd:76:63:7a:3b:bc:77:92:88:e9:9c:91:
                    aa:9c:93:f0:54:b2:bd:89:9c:a0:08:8b:49:5b:ad:
                    11:cd:9c:a6:a4:84:46:97:63:7f:d6:5e:3c:48:15:
                    d6:cd:26:60:21:46:01:51:52:d1:94:93:b9:fd:62:
                    89:6e:b7:51:d6:c5:d6:bd:6a:35:9b:5c:d5:01:9c:
                    e2:b0:e1:b1:65:72:79:dc:53:c3:42:40:93:0f:50:
                    72:9b:45:d8:c1:55:f1:f2:a8:35:70:0d:05:6e:9c:
                    3a:0e:4a:46:b5:86:61:79:b3:2c:db:dc:a5:8b:e7:
                    5c:50:8b:99:43:8d:b8:d3:86:c9:b3:9c:34:ba:7d:
                    aa:a9:2e:ab:42:ee:63:93:39:4a:3a:c8:6c:e2:3b:
                    d1:5a:cf:81:ac:e6:e6:11:c8:9f:04:5f:57:99:78:
                    8a:be:a4:dd:a3:20:23:f4:94:ad:08:4b:56:df:03:
                    2c:37:37:4c:b6:1d:96:e6:64:99:43:0b:d5:3f:c9:
                    85:97:42:fd:23:72:d4:d9:94:d0:d6:97:38:12:10:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2A:30:6D:D2:B0:28:58:AB:DF:2D:21:C4:5C:B9:0E:AD:EB:F8:BC
            X509v3 Authority Key Identifier:
                keyid:A0:C5:3C:44:72:B8:62:58:33:55:BB:AC:AF:D0:25:5B:69:38:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/A0C53C4472B862583355BBACAFD0255B69389183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C53C4472B862583355BBACAFD0255B69389183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32322d3332203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:fc:55:04:d7:9a:5b:09:39:c5:0e:3a:c6:fd:a5:ed:62:f5:
         c0:0a:58:09:76:49:b3:5f:74:5d:48:ad:33:b5:7d:ae:89:56:
         e2:7a:a0:9c:3a:db:e7:97:0d:68:bf:52:32:71:60:3b:d0:7f:
         fc:d6:e2:c7:f2:4f:bc:28:40:93:c6:de:53:47:88:10:81:64:
         1d:48:ce:6f:ca:64:e3:8e:0f:a6:43:17:33:7b:e1:1b:f1:3f:
         44:ae:2b:bd:72:a8:e0:af:a5:bc:74:4f:3c:b1:13:96:16:95:
         4a:52:1a:0b:5f:ae:a9:63:93:3e:76:78:3a:d5:b6:28:24:63:
         1a:ea:44:50:94:e0:6a:06:9b:a4:29:8a:94:06:40:2d:07:62:
         bb:55:6b:af:39:6d:14:30:5e:78:cd:52:b0:93:b7:47:4a:2d:
         23:55:01:5e:90:e2:3f:54:d8:ae:36:f9:2f:87:58:39:c8:15:
         71:16:72:b8:5c:80:f8:2e:b9:7b:73:a8:f3:e7:fb:0c:bf:61:
         f8:14:e4:7d:b3:8b:c3:ce:29:b8:aa:e2:c0:14:bc:e2:39:7d:
         e3:ed:b5:a3:de:ea:f6:86:a0:f1:1b:f9:c7:44:b6:68:a6:c4:
         33:83:c6:4c:a7:74:77:66:3c:f1:60:9c:80:15:c5:42:56:34:
         27:95:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:30:18 2024 by rpki-client on console-fra.rpki-client.org