Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/AS262316.roa
File:                     AS262316.roa (raw, json)
Hash identifier:          hBoT6m6SXzlr26D3NWD3ncjy5HnSafzABhUmKiF6/74=
Subject key identifier:   17:67:EF:BD:0D:B9:3D:50:C8:42:34:9D:E5:B4:32:D8:6B:53:E8:C0
Certificate issuer:       /CN=1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6
Certificate serial:       08CCACD98B26B1210CE8C6EE2A0BCB71B386B0CE
Authority key identifier: 1E:9D:67:05:D2:69:0E:8C:DA:8A:D3:18:61:DC:8A:33:4D:B2:F5:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/AS262316.roa
Signing time:             Thu 04 Apr 2024 01:46:55 +0000
ROA not before:           Thu 04 Apr 2024 01:41:55 +0000
ROA not after:            Thu 03 Apr 2025 01:46:55 +0000
asID:                     262316
IP address blocks:        131.221.200.0/22 maxlen: 22
                          131.221.200.0/23 maxlen: 23
                          131.221.200.0/24 maxlen: 24
                          131.221.201.0/24 maxlen: 24
                          131.221.202.0/23 maxlen: 23
                          131.221.202.0/24 maxlen: 24
                          131.221.203.0/24 maxlen: 24
                          138.117.192.0/22 maxlen: 22
                          138.117.192.0/23 maxlen: 23
                          138.117.194.0/23 maxlen: 23
                          138.117.194.0/24 maxlen: 24
                          138.117.195.0/24 maxlen: 24
                          167.250.152.0/22 maxlen: 22
                          167.250.152.0/23 maxlen: 23
                          167.250.152.0/24 maxlen: 24
                          167.250.153.0/24 maxlen: 24
                          167.250.154.0/23 maxlen: 23
                          167.250.154.0/24 maxlen: 24
                          167.250.155.0/24 maxlen: 24
                          177.74.64.0/20 maxlen: 20
                          177.74.64.0/22 maxlen: 22
                          177.74.64.0/23 maxlen: 23
                          177.74.64.0/24 maxlen: 24
                          177.74.65.0/24 maxlen: 24
                          177.74.66.0/23 maxlen: 23
                          177.74.66.0/24 maxlen: 24
                          177.74.67.0/24 maxlen: 24
                          177.74.68.0/22 maxlen: 22
                          177.74.68.0/23 maxlen: 23
                          177.74.68.0/24 maxlen: 24
                          177.74.69.0/24 maxlen: 24
                          177.74.70.0/23 maxlen: 23
                          177.74.70.0/24 maxlen: 24
                          177.74.71.0/24 maxlen: 24
                          177.74.72.0/22 maxlen: 22
                          177.74.72.0/23 maxlen: 23
                          177.74.72.0/24 maxlen: 24
                          177.74.73.0/24 maxlen: 24
                          177.74.74.0/23 maxlen: 23
                          177.74.74.0/24 maxlen: 24
                          177.74.75.0/24 maxlen: 24
                          177.74.76.0/23 maxlen: 23
                          177.74.76.0/24 maxlen: 24
                          177.74.77.0/24 maxlen: 24
                          177.74.78.0/24 maxlen: 24
                          177.74.79.0/24 maxlen: 24
                          177.124.48.0/22 maxlen: 22
                          177.124.48.0/23 maxlen: 23
                          177.124.48.0/24 maxlen: 24
                          177.124.49.0/24 maxlen: 24
                          177.124.50.0/23 maxlen: 23
                          177.124.50.0/24 maxlen: 24
                          177.124.51.0/24 maxlen: 24
                          2804:7c0::/32 maxlen: 32
                          2804:7c0::/48 maxlen: 48
                          2804:7c0:1000::/36 maxlen: 36
                          2804:7c0:1000::/44 maxlen: 44
                          2804:7c0:1010::/44 maxlen: 44
                          2804:7c0:1020::/48 maxlen: 48
                          2804:7c0:1030::/48 maxlen: 48
                          2804:7c0:10a0::/48 maxlen: 48
                          2804:7c0:10b0::/48 maxlen: 48
                          2804:7c0:10d1::/48 maxlen: 48
                          2804:7c0:10d2::/48 maxlen: 48
                          2804:7c0:10d3::/48 maxlen: 48
                          2804:7c0:2000::/36 maxlen: 36
                          2804:7c0:2000::/44 maxlen: 44
                          2804:7c0:2010::/44 maxlen: 44
                          2804:7c0:20a1::/48 maxlen: 48
                          2804:7c0:20b1::/48 maxlen: 48
                          2804:7c0:20d1::/48 maxlen: 48
                          2804:7c0:20d3::/48 maxlen: 48
                          2804:7c0:20d4::/48 maxlen: 48
                          2804:7c0:20d6::/48 maxlen: 48
                          2804:7c0:20d7::/48 maxlen: 48
                          2804:7c0:3000::/36 maxlen: 36
                          2804:7c0:3000::/44 maxlen: 44
                          2804:7c0:3010::/44 maxlen: 44
                          2804:7c0:3020::/48 maxlen: 48
                          2804:7c0:3030::/48 maxlen: 48
                          2804:7c0:30a1::/48 maxlen: 48
                          2804:7c0:30b1::/48 maxlen: 48
                          2804:7c0:30d1::/48 maxlen: 48
                          2804:7c0:30d2::/48 maxlen: 48
                          2804:7c0:30d3::/48 maxlen: 48
                          2804:7c0:4000::/36 maxlen: 36
                          2804:7c0:4000::/44 maxlen: 44
                          2804:7c0:4010::/44 maxlen: 44
                          2804:7c0:4040::/48 maxlen: 48
                          2804:7c0:4050::/48 maxlen: 48
                          2804:7c0:40a1::/48 maxlen: 48
                          2804:7c0:40b1::/48 maxlen: 48
                          2804:7c0:40d1::/48 maxlen: 48
                          2804:7c0:40d2::/48 maxlen: 48
                          2804:7c0:40d3::/48 maxlen: 48
                          2804:7c0:9000::/36 maxlen: 36
                          2804:7c0:9010::/44 maxlen: 44
                          2804:7c0:9020::/48 maxlen: 48
                          2804:7c0:9030::/48 maxlen: 48
                          2804:7c0:90a1::/48 maxlen: 48
                          2804:7c0:90b1::/48 maxlen: 48
                          2804:7c0:90d1::/48 maxlen: 48
                          2804:7c0:90d2::/48 maxlen: 48
                          2804:7c0:90d3::/48 maxlen: 48
                          2804:7c0:a000::/36 maxlen: 36
                          2804:7c0:b000::/36 maxlen: 36
                          2804:7c0:b010::/44 maxlen: 44
                          2804:7c0:b0a1::/48 maxlen: 48
                          2804:7c0:b0b1::/48 maxlen: 48
                          2804:7c0:b0d1::/48 maxlen: 48
                          2804:7c0:b0d3::/48 maxlen: 48
                          2804:7c0:b0d4::/48 maxlen: 48
                          2804:7c0:b0d5::/48 maxlen: 48
                          2804:7c0:b0d6::/48 maxlen: 48
                          2804:7c0:c000::/36 maxlen: 36
                          2804:7c0:c000::/44 maxlen: 44
                          2804:7c0:c010::/44 maxlen: 44
                          2804:7c0:c0a1::/48 maxlen: 48
                          2804:7c0:c0b1::/48 maxlen: 48
                          2804:7c0:c0d1::/48 maxlen: 48
                          2804:7c0:c0d3::/48 maxlen: 48
                          2804:7c0:c0d4::/48 maxlen: 48
                          2804:7c0:c0d5::/48 maxlen: 48
                          2804:7c0:c0d6::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cc:ac:d9:8b:26:b1:21:0c:e8:c6:ee:2a:0b:cb:71:b3:86:b0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6
        Validity
            Not Before: Apr  4 01:41:55 2024 GMT
            Not After : Apr  3 01:46:55 2025 GMT
        Subject: CN=1767EFBD0DB93D50C842349DE5B432D86B53E8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:0f:84:9f:9b:98:a9:2d:4c:74:ac:bc:4d:
                    c1:53:9e:ec:f4:2f:36:fc:aa:75:95:b0:2f:43:00:
                    48:1a:8b:03:a3:95:55:dd:8f:b2:20:3a:11:36:11:
                    1d:2c:22:08:06:53:26:04:0d:35:56:75:da:89:c6:
                    ae:98:90:06:84:67:e6:5b:d0:5f:ab:ba:b3:4c:4c:
                    d5:25:09:01:a6:53:b3:35:a7:c9:f2:93:94:92:bb:
                    fe:58:55:16:5e:b7:08:6e:1f:25:3b:1c:40:04:fa:
                    6c:25:73:e1:57:75:ca:40:66:63:6c:d4:68:72:85:
                    0a:9b:34:e6:ff:95:ab:98:3a:aa:0b:cb:36:97:b8:
                    89:38:59:ed:00:f7:8a:99:39:1c:8c:0c:59:5f:e7:
                    11:c5:80:f4:c3:cf:ba:98:92:7d:a9:87:9b:08:01:
                    2c:71:b7:b5:53:11:a1:4d:70:58:51:8c:d9:e8:f2:
                    c2:17:ae:b3:c5:89:0d:7e:31:32:22:20:81:1a:68:
                    c1:f0:c3:f5:d7:78:2d:6b:5a:77:60:64:c7:75:c8:
                    67:91:03:42:a3:39:21:cd:ed:77:29:40:05:75:5e:
                    ca:d4:00:aa:77:cf:46:68:77:b4:f2:5c:51:0e:1b:
                    b9:2a:f1:08:a9:96:b9:2a:9f:7f:2f:b0:22:23:d6:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:67:EF:BD:0D:B9:3D:50:C8:42:34:9D:E5:B4:32:D8:6B:53:E8:C0
            X509v3 Authority Key Identifier:
                keyid:1E:9D:67:05:D2:69:0E:8C:DA:8A:D3:18:61:DC:8A:33:4D:B2:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E9D6705D2690E8CDA8AD31861DC8A334DB2F5A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/1/AS262316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22
                  138.117.192.0/22
                  167.250.152.0/22
                  177.74.64.0/20
                  177.124.48.0/22
                IPv6:
                  2804:7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ef:32:0b:b6:93:69:a6:2e:27:19:06:64:23:4b:4a:af:37:
         9b:4b:b8:99:06:2f:86:69:9f:4a:bd:97:84:27:50:a9:d5:3a:
         5d:03:62:6f:9a:71:2c:81:5e:e2:c5:1f:4f:6b:49:7e:e6:51:
         7a:f0:7c:42:91:10:b0:f1:fe:72:b0:f7:8e:a7:a1:20:93:01:
         47:f7:ad:36:2d:aa:87:f4:4f:b5:05:bc:26:be:b0:41:fb:87:
         9a:33:3f:14:d4:56:21:3e:f6:2b:f8:d7:bb:39:fb:fd:2f:64:
         ab:27:81:08:31:e0:a7:a9:2a:c2:dc:5c:e0:60:de:54:5c:dc:
         c9:52:76:8d:99:dd:41:91:68:1d:eb:2c:d1:5c:74:91:a3:7d:
         4f:70:b4:66:3e:5c:e0:8a:5a:ba:50:a3:a8:b9:b8:5e:b4:78:
         53:34:e5:0b:5d:73:df:e6:88:c9:18:ea:57:90:5c:be:b0:55:
         f0:16:6f:de:db:69:00:27:55:87:e7:3b:0e:5a:bc:54:4e:d2:
         08:41:bf:dd:3d:8a:12:3e:69:8e:4b:19:36:f5:8b:3c:b5:ca:
         db:fa:e4:a4:89:a1:d7:20:99:1f:d5:32:1d:81:1a:94:6f:0c:
         23:1e:c7:36:ce:c2:a8:59:31:cb:4a:73:95:63:e4:f7:04:e3:
         93:ee:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:56:08 2024 by rpki-client on console-ams.rpki-client.org