Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa
File:                     3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          I5iaSSdwpWnsuP+hF6SUANL7voPmdWH0GNEWx12Yko8=
Subject key identifier:   6B:45:82:8D:6C:22:7D:1F:34:52:F9:0D:F1:DD:08:D7:04:FF:91:A5
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       5D451A6BA9939249A499150789E13D975DDB85A3
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:56 +0000
ROA not before:           Tue 25 Jun 2024 12:13:56 +0000
ROA not after:            Tue 24 Jun 2025 12:18:56 +0000
asID:                     262503
IP address blocks:        167.249.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:45:1a:6b:a9:93:92:49:a4:99:15:07:89:e1:3d:97:5d:db:85:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:56 2024 GMT
            Not After : Jun 24 12:18:56 2025 GMT
        Subject: CN=6B45828D6C227D1F3452F90DF1DD08D704FF91A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:25:3f:c2:1b:d8:0d:1f:d7:8a:f2:47:a8:
                    a0:3c:96:01:dd:c8:de:58:77:bf:f7:4a:44:a7:97:
                    78:95:1d:d3:be:77:7c:d5:25:8b:d0:23:c6:70:19:
                    4f:df:2e:2e:17:01:b1:05:7c:b6:2a:21:92:95:61:
                    41:d7:a7:61:90:2a:32:be:25:74:4c:3a:4f:0c:60:
                    50:e1:8a:6c:23:af:62:c9:eb:d8:55:c7:76:9e:97:
                    33:16:bc:06:82:c8:08:d1:e7:f8:a0:0d:58:56:d2:
                    76:eb:7b:55:79:94:09:31:ca:96:f9:8f:9c:4f:2b:
                    57:19:3f:4c:ca:11:29:b9:6b:4f:75:31:95:36:22:
                    15:8c:11:a1:6a:96:62:d8:09:01:9f:f7:8f:91:87:
                    38:56:c0:74:75:64:4b:b3:ab:8a:96:a4:bb:ff:47:
                    81:65:92:01:b9:38:df:b8:0b:f7:ff:0d:7e:17:c3:
                    84:72:4e:3c:03:b0:25:e9:b9:0b:6c:e3:21:7b:03:
                    5b:8d:26:ef:bc:bf:75:70:b8:9a:3c:1f:ce:81:e1:
                    5e:41:a0:b8:b3:61:a4:5c:ba:ea:08:6e:01:8c:24:
                    0d:92:25:a4:71:f4:04:9f:f5:6c:1b:c8:22:ab:ce:
                    7c:bf:53:2c:eb:22:49:16:04:6c:bd:fa:28:47:10:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:45:82:8D:6C:22:7D:1F:34:52:F9:0D:F1:DD:08:D7:04:FF:91:A5
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137312e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:14:05:76:d5:8e:ae:7c:dd:3d:35:24:19:cd:55:a7:41:05:
         6d:bd:4a:97:44:b5:c9:b7:ca:b8:af:6f:c5:90:3b:27:48:e6:
         96:3e:4f:ce:04:cb:42:fd:0d:95:f6:f6:96:d6:65:a8:f9:7a:
         ed:d7:28:f3:0e:cc:3b:ef:b0:7b:e4:8d:69:1f:fe:43:a0:56:
         8a:83:da:ac:ea:b9:8d:eb:16:c6:b0:9e:61:c2:a8:ac:f5:56:
         4a:ef:85:03:2f:39:d4:75:d6:75:d1:e9:6d:3b:61:38:38:51:
         18:74:fe:89:92:18:0d:f5:d5:28:f0:28:cd:ab:cc:2d:8e:02:
         9f:b6:c5:27:c7:fc:9c:eb:a6:ca:ba:67:b6:e8:f3:bc:bd:8c:
         23:1c:fc:01:18:60:76:f8:a7:73:96:1a:bb:d4:e4:c3:d6:a3:
         48:8d:0d:fd:aa:49:61:f5:88:f0:89:7c:f4:4e:2f:32:70:e3:
         9d:8b:10:4f:cd:1a:d3:19:42:b6:34:ec:a3:73:92:00:b5:00:
         7e:e3:90:23:7a:99:e3:40:ff:af:24:54:ee:c3:1f:66:03:ca:
         26:32:bc:b9:1a:d8:6f:be:fb:70:96:d0:e1:c3:a9:73:b2:0c:
         d2:cf:0c:c1:a1:b3:11:0a:f7:b4:54:f7:db:4d:46:05:3d:29:
         13:d4:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org