Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa
File:                     3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          EGwpduJe7OBINQfXOTN4eZdAAdMyBeEys+s1sgoFeAI=
Subject key identifier:   55:AC:7B:EF:D5:74:76:B0:4E:1D:20:61:F4:35:7E:84:CD:79:4C:C8
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       4DBD7F38DFEBFFCE9A82C20640E831D74D70C649
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:56 +0000
ROA not before:           Tue 25 Jun 2024 12:13:56 +0000
ROA not after:            Tue 24 Jun 2025 12:18:56 +0000
asID:                     262503
IP address blocks:        167.249.169.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bd:7f:38:df:eb:ff:ce:9a:82:c2:06:40:e8:31:d7:4d:70:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:56 2024 GMT
            Not After : Jun 24 12:18:56 2025 GMT
        Subject: CN=55AC7BEFD57476B04E1D2061F4357E84CD794CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c7:fc:c3:80:fc:3b:92:fe:3b:16:70:41:1b:
                    28:f3:16:a0:c8:da:c4:57:8e:8d:24:3d:3b:2e:ec:
                    5b:f4:2c:ef:8d:81:a1:a0:55:b3:1a:4b:f5:a1:a1:
                    7a:94:1d:89:ea:62:ad:f8:2f:43:9a:d8:ad:aa:cc:
                    11:36:b3:89:f9:12:20:28:b6:9e:58:bd:57:a6:60:
                    80:37:d7:dd:b3:be:9b:53:c1:13:13:81:bc:63:f1:
                    1c:14:77:43:8f:12:7e:78:99:b2:16:bc:f4:22:f3:
                    3f:77:e7:4e:50:40:7f:bf:23:cf:1c:fd:02:42:e5:
                    11:69:f0:65:41:bc:aa:56:40:3f:8b:99:b4:2d:33:
                    9b:f1:cc:ae:4b:37:3e:8d:35:65:56:e1:82:5c:12:
                    96:ab:32:31:43:65:f3:d4:71:9e:bd:58:4c:13:e4:
                    7c:97:4f:ec:5b:3b:8d:0c:62:86:c8:e5:5b:b8:a6:
                    19:91:b3:c3:e5:d7:dc:5e:8b:2a:3a:f9:ee:1c:63:
                    57:5a:cf:d5:86:7c:07:e7:f7:1b:1f:05:95:da:cc:
                    d1:6d:dc:54:80:47:64:f2:b7:5b:a6:13:92:15:00:
                    8b:d1:b6:2d:ec:b2:05:6f:7f:e4:e2:60:42:52:fd:
                    31:db:7e:10:dc:8e:83:ff:75:8a:d1:56:1f:07:ba:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AC:7B:EF:D5:74:76:B0:4E:1D:20:61:F4:35:7E:84:CD:79:4C:C8
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136392e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:22:01:c5:68:35:7a:ba:23:4b:0a:ea:21:82:3d:e5:29:20:
         39:8b:0b:b5:18:5f:e1:de:42:1c:9b:95:af:cf:77:8b:db:bc:
         c7:04:ac:08:95:b4:ca:03:58:42:62:b5:de:b6:d9:44:0b:b6:
         b4:82:2d:99:eb:ba:b6:16:82:3b:f9:7c:81:9b:08:b1:dc:ed:
         82:20:d5:63:6b:ac:ce:6c:e2:cb:d2:e3:6a:3b:74:04:05:68:
         31:b7:13:e2:96:56:9d:84:a1:27:da:d3:f5:5c:c1:46:3a:71:
         5f:b3:32:71:11:c3:d2:e8:53:b9:9c:6e:f9:27:84:78:9c:ee:
         fa:46:10:2b:5d:d7:6e:e0:d7:39:07:f9:06:75:15:60:a1:88:
         2c:f5:40:f6:44:3d:e8:b3:ae:72:9a:46:09:1d:61:db:ef:04:
         6e:38:12:43:bd:e3:b4:fc:9f:93:d7:da:57:a7:19:0c:eb:40:
         57:e0:32:cb:fe:6c:71:f6:44:d9:84:9b:e2:28:bb:7f:e8:95:
         37:16:0d:04:38:ff:08:62:3c:05:ac:41:4a:e5:50:e3:1a:40:
         3a:e1:cd:79:7a:7a:e9:ba:dd:ff:4f:21:e9:32:da:dd:46:d0:
         54:bf:b3:4f:c1:87:94:bd:51:3b:35:e7:8e:9c:5d:be:af:2a:
         f4:fa:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org