Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32332d3233203d3e20323632353033.roa
File:                     3136372e3234392e3136382e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          7HpA8YlrO30KwoVwDgu0xPOYCzkz06QPz2EbtijehPk=
Subject key identifier:   D2:42:03:DC:05:1A:B8:AB:F3:C6:94:3F:59:CE:93:87:C4:CC:AF:46
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       657B12242EFF3D2D687E5EDE148E3AD9A2820981
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:54 +0000
ROA not before:           Tue 25 Jun 2024 12:13:54 +0000
ROA not after:            Tue 24 Jun 2025 12:18:54 +0000
asID:                     262503
IP address blocks:        167.249.168.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7b:12:24:2e:ff:3d:2d:68:7e:5e:de:14:8e:3a:d9:a2:82:09:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:54 2024 GMT
            Not After : Jun 24 12:18:54 2025 GMT
        Subject: CN=D24203DC051AB8ABF3C6943F59CE9387C4CCAF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:d0:15:82:10:f3:64:e2:33:fa:83:02:ad:
                    f6:a7:e0:a0:f3:18:bc:96:ae:ec:42:5e:ff:88:2b:
                    65:c1:b5:3e:75:d1:ee:27:48:83:c8:c8:73:21:2e:
                    0b:05:96:ca:3f:fc:e1:22:34:83:4e:ef:f3:a7:ac:
                    08:a1:88:e8:fc:2b:87:b9:a0:bf:94:53:4a:9a:ce:
                    b3:75:06:44:ed:c0:2c:44:b3:0c:2e:ad:f8:8d:c7:
                    d1:19:60:50:66:4c:08:9c:76:9f:5b:ba:31:e9:4c:
                    10:a4:22:74:bb:d0:e7:b5:4b:50:ce:02:1c:2f:5b:
                    db:e8:dc:f7:91:b2:49:d3:24:d3:21:3d:76:78:fe:
                    00:e1:97:04:c6:b5:8b:c7:5d:c6:82:9e:20:2f:c1:
                    c9:79:e0:9e:da:9a:2f:2e:13:7c:46:91:6c:d1:84:
                    f0:c0:dd:be:0c:29:9a:0e:51:6f:4b:96:c4:af:8b:
                    b2:39:f2:95:06:e0:2b:28:c5:74:36:64:ae:75:78:
                    d8:43:08:a0:f2:fe:7b:4a:28:e0:d3:f8:fc:30:68:
                    99:96:f7:56:f9:2e:f8:1b:ec:32:ea:6a:b2:a8:ab:
                    ee:4e:42:02:2d:27:12:0b:64:62:68:2b:ae:b2:fa:
                    48:11:b6:a0:ff:88:f7:46:2b:da:26:0f:fd:38:55:
                    11:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:42:03:DC:05:1A:B8:AB:F3:C6:94:3F:59:CE:93:87:C4:CC:AF:46
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:d2:f8:30:2d:bc:6f:15:6c:b1:7c:94:0c:4a:c0:a2:70:46:
         9f:95:46:12:73:6e:64:37:ff:b9:51:34:08:3c:66:27:58:a8:
         13:c1:8a:83:e5:49:51:e0:0d:bf:ff:d9:9b:26:0d:42:30:c6:
         bc:53:15:93:37:ab:b4:9a:e2:a0:fd:92:56:4b:03:e2:a6:73:
         33:28:fb:74:83:68:84:c1:c3:c7:3e:2e:f5:99:64:23:3c:3a:
         b9:8d:42:9c:ce:be:37:e9:51:38:93:cd:c3:b9:d9:3f:d0:9f:
         cc:df:51:a3:e6:08:86:ea:97:68:0c:b0:14:b3:68:d5:4e:e8:
         be:61:d8:13:4f:ba:c4:0d:33:11:91:8e:b3:4f:4d:c4:bc:16:
         3e:1a:7d:77:d4:57:c3:d3:71:3a:cc:36:2d:45:0b:d8:4a:8b:
         86:49:87:c6:37:a6:8a:dd:41:58:db:35:32:92:2c:44:27:b7:
         f2:ba:8b:2c:3e:e3:cf:84:0b:21:fd:f5:dd:1a:64:bd:88:d3:
         00:77:d8:18:89:24:18:1a:6e:df:95:bd:b1:ad:fb:e9:89:6b:
         ca:0a:ad:24:4c:a8:dc:f4:92:d3:3d:1e:68:f6:1e:22:66:82:
         20:b1:a3:e9:e6:33:7b:b9:6a:a0:c3:97:c7:1d:51:2a:ed:03:
         0c:f2:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org