Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa
File:                     3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa (raw, json)
Hash identifier:          +oZKKMooVhMM0TktZEzlAbvdh6ox9nCABxEeWLmkczI=
Subject key identifier:   78:9F:AC:31:3D:AF:13:D3:3F:E3:74:54:1E:A5:99:B2:8F:1A:20:82
Certificate issuer:       /CN=CB745AB4F91116BCB5A32D53003A38244EF9AC13
Certificate serial:       1EF73C9244426EC65713A03E7F35747D1EC5A21F
Authority key identifier: CB:74:5A:B4:F9:11:16:BC:B5:A3:2D:53:00:3A:38:24:4E:F9:AC:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB745AB4F91116BCB5A32D53003A38244EF9AC13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa
Signing time:             Wed 03 Jul 2024 20:44:42 +0000
ROA not before:           Wed 03 Jul 2024 20:39:42 +0000
ROA not after:            Wed 02 Jul 2025 20:44:42 +0000
asID:                     265472
IP address blocks:        168.196.212.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f7:3c:92:44:42:6e:c6:57:13:a0:3e:7f:35:74:7d:1e:c5:a2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB745AB4F91116BCB5A32D53003A38244EF9AC13
        Validity
            Not Before: Jul  3 20:39:42 2024 GMT
            Not After : Jul  2 20:44:42 2025 GMT
        Subject: CN=789FAC313DAF13D33FE374541EA599B28F1A2082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:64:f8:ae:62:bc:ee:94:51:fd:23:c3:c0:
                    69:d1:7b:9e:ba:53:00:97:58:eb:b4:4b:52:04:28:
                    7d:0e:a0:db:0c:46:77:a4:a2:96:4d:62:76:12:d3:
                    49:2b:60:c4:98:74:f3:15:f5:40:dc:f5:d4:8a:c6:
                    53:19:80:bc:f9:0d:6c:f5:a4:46:ec:f3:d6:47:57:
                    af:63:5b:d2:30:16:21:6b:1e:58:73:21:d0:a9:55:
                    66:4d:f9:d0:ac:a5:d0:a6:d0:fd:47:46:40:f0:bf:
                    91:94:5c:59:73:fe:17:f8:dc:4c:f9:ae:7e:d0:72:
                    a2:1e:19:1f:99:59:cc:c1:18:8e:21:5d:63:fc:e5:
                    9b:5f:6c:8a:52:f7:28:82:6a:bd:f0:a0:47:ad:2f:
                    4b:12:ce:1c:61:df:36:75:6a:78:4d:0d:ef:57:45:
                    6b:75:f3:a8:de:fc:55:2f:05:fa:b4:f6:41:76:82:
                    6c:0e:af:9a:0c:10:99:5d:77:78:66:2a:a6:93:37:
                    d2:cc:94:6a:21:e3:d0:bd:ca:fc:49:6c:db:ae:0c:
                    af:c1:7b:02:ce:cb:90:d7:9c:e8:fb:83:d8:0f:51:
                    b7:c4:8b:a9:83:e3:b7:d7:f7:2f:92:58:66:b3:4d:
                    d2:8e:a2:03:a6:0e:b0:0e:2c:d1:9a:a6:e0:7d:17:
                    b1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9F:AC:31:3D:AF:13:D3:3F:E3:74:54:1E:A5:99:B2:8F:1A:20:82
            X509v3 Authority Key Identifier:
                keyid:CB:74:5A:B4:F9:11:16:BC:B5:A3:2D:53:00:3A:38:24:4E:F9:AC:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/CB745AB4F91116BCB5A32D53003A38244EF9AC13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB745AB4F91116BCB5A32D53003A38244EF9AC13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/3136382e3139362e3231322e302f32322d3234203d3e20323635343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:69:98:e4:a7:91:1d:76:eb:c2:46:4a:29:91:74:71:bf:a5:
         58:90:29:e6:de:88:ff:c6:9b:63:5e:34:c6:c9:e6:7f:63:bc:
         f1:7b:9a:f6:25:e2:4d:ae:26:81:c1:38:f7:8b:93:17:b9:73:
         5a:b3:aa:6d:23:3b:ef:7d:0c:ad:e3:63:99:89:28:42:27:b7:
         df:02:b9:a4:52:f3:70:2e:2f:fd:a8:a5:a8:84:5d:bc:78:60:
         a6:fe:d1:77:d9:5b:ef:ff:14:92:a9:72:37:f1:7e:ad:64:be:
         bc:de:95:ce:67:62:a2:14:f4:5d:5c:3c:ac:c7:dc:7b:00:e0:
         96:fc:25:1b:04:7e:62:c7:61:a1:12:08:50:f4:1e:25:81:bd:
         49:06:c2:f1:24:50:7a:14:dd:e4:dc:80:62:54:22:3e:4a:aa:
         1d:5c:fa:db:d3:f5:8e:0c:1f:e3:e3:c9:cd:ef:09:38:a3:58:
         b9:48:8e:1b:44:54:f4:34:e0:d6:af:43:81:71:c6:f1:4b:8c:
         fc:35:e8:33:c4:69:da:d0:68:b4:0c:88:4b:da:f3:e0:56:01:
         d8:be:fe:db:6f:67:7f:bf:cf:69:62:d0:76:ec:31:56:f7:42:
         af:1a:1a:87:2a:18:22:93:6a:1b:fb:b2:28:3a:47:73:fb:c1:
         58:29:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:06:45 2024 by rpki-client on console-fra.rpki-client.org