Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3134332e302e3137362e302f32322d3332203d3e20323634323934.roa
File:                     3134332e302e3137362e302f32322d3332203d3e20323634323934.roa (raw, json)
Hash identifier:          cOSFrFCzUg9mYHpWgSqdyjd6rCAd7LmYMX02zc/7TyY=
Subject key identifier:   AC:69:F2:BC:11:C8:0D:6D:99:DA:A0:F5:CA:E8:41:3D:EC:B5:F0:04
Certificate issuer:       /CN=93FE839003F5610824C29206ED0F21C45CE3A5B4
Certificate serial:       30B06AC80AAA5ED69DB6367C646E9DC960DF0E65
Authority key identifier: 93:FE:83:90:03:F5:61:08:24:C2:92:06:ED:0F:21:C4:5C:E3:A5:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FE839003F5610824C29206ED0F21C45CE3A5B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3134332e302e3137362e302f32322d3332203d3e20323634323934.roa
Signing time:             Mon 05 Aug 2024 14:09:11 +0000
ROA not before:           Mon 05 Aug 2024 14:04:11 +0000
ROA not after:            Mon 04 Aug 2025 14:09:11 +0000
asID:                     264294
IP address blocks:        143.0.176.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b0:6a:c8:0a:aa:5e:d6:9d:b6:36:7c:64:6e:9d:c9:60:df:0e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FE839003F5610824C29206ED0F21C45CE3A5B4
        Validity
            Not Before: Aug  5 14:04:11 2024 GMT
            Not After : Aug  4 14:09:11 2025 GMT
        Subject: CN=AC69F2BC11C80D6D99DAA0F5CAE8413DECB5F004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:e3:d2:b1:e0:de:db:95:d4:25:38:a2:ca:
                    1f:69:dd:45:dd:66:c6:63:da:45:10:eb:20:29:d4:
                    ab:6e:57:f4:8a:87:a4:c7:59:ba:ec:f6:32:3a:8f:
                    dd:65:be:4d:bc:b4:c0:fd:01:68:df:a4:df:1d:25:
                    02:89:6c:b0:7d:5f:cb:ff:69:4d:98:57:f8:4f:8a:
                    d1:73:b8:44:1e:e2:c7:14:5a:db:f3:cc:74:99:14:
                    4b:e0:f1:05:eb:bf:27:30:d2:2d:51:e4:f4:59:16:
                    ac:f9:fc:93:98:39:83:ad:2f:78:00:82:9f:a6:13:
                    8f:2c:83:1d:0e:b5:5e:19:1e:e4:d7:17:00:0e:de:
                    8f:5c:2f:5b:4f:38:3e:66:75:ba:4a:f5:20:07:89:
                    f2:01:af:72:4f:a9:a4:79:d8:ff:5d:b4:6a:4f:34:
                    fd:0b:d0:4b:4c:b2:95:d2:9e:ce:52:fb:14:32:a4:
                    83:07:e6:1f:bf:15:45:9b:73:26:83:72:c9:13:60:
                    af:c3:ef:d0:df:03:b7:2f:41:b7:e5:b7:2e:6f:20:
                    1a:f0:b5:bf:9e:9b:a2:ae:7e:3b:d3:57:56:32:e9:
                    bc:5b:cb:a5:3c:1e:c7:db:a1:b1:d5:16:ff:f9:4e:
                    e6:1f:a1:a3:e2:23:60:7b:51:93:4b:d2:94:49:99:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:F2:BC:11:C8:0D:6D:99:DA:A0:F5:CA:E8:41:3D:EC:B5:F0:04
            X509v3 Authority Key Identifier:
                keyid:93:FE:83:90:03:F5:61:08:24:C2:92:06:ED:0F:21:C4:5C:E3:A5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/93FE839003F5610824C29206ED0F21C45CE3A5B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93FE839003F5610824C29206ED0F21C45CE3A5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3134332e302e3137362e302f32322d3332203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:41:13:ce:db:e2:bb:d2:99:1b:24:4e:81:89:9a:49:72:7a:
         fd:49:97:92:d1:2c:ed:dc:d2:2f:2f:6e:22:eb:3b:88:8a:d1:
         ce:a7:1a:c1:de:d3:fc:d3:ac:4c:d4:7a:a9:87:e1:a6:32:ad:
         4b:0f:72:9f:26:3a:7d:02:58:34:90:e5:37:6b:bb:03:67:e8:
         31:0a:d3:6e:9e:a7:a1:32:20:49:9d:e8:97:1e:74:16:c0:42:
         cb:84:c9:45:e9:72:61:74:50:0c:5c:6d:9b:74:a3:20:f7:42:
         5e:35:9e:57:c7:bf:35:ae:c9:09:69:77:b3:ef:e0:a9:bc:9d:
         0b:8e:60:af:19:dd:30:0b:41:c9:d3:99:e3:c3:0d:f6:2c:03:
         52:15:ae:65:14:2c:fd:7b:e1:a7:9a:84:43:57:08:e3:84:09:
         96:e9:d4:16:3f:5f:4b:9f:58:fc:c0:b6:6f:1e:9a:c5:eb:38:
         64:dc:b6:a9:7b:a0:33:f2:e3:11:f9:6c:36:5c:f5:1a:de:88:
         87:ae:77:a4:dc:40:c2:ea:ca:9e:0a:23:78:f0:b4:02:d1:59:
         c6:52:0c:b3:bf:19:f4:93:47:1b:cb:d3:1e:bc:a7:5e:df:25:
         26:37:af:b8:ea:ec:83:07:4b:26:a1:a6:c0:27:f7:69:ac:ef:
         00:d4:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org