Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/3136342e3136332e3230382e302f32322d3232203d3e20323637343237.roa
File:                     3136342e3136332e3230382e302f32322d3232203d3e20323637343237.roa (raw, json)
Hash identifier:          5wz+/XJZQr5TLjNLXxN0gTzBB1oXKHnW5cu+4nd9RY0=
Subject key identifier:   C6:43:93:E5:49:63:32:95:2D:14:2C:0C:89:D1:0E:DA:F6:D3:E3:F4
Certificate issuer:       /CN=B7926A9DB608C6944F9364A81239EC10CF5E2752
Certificate serial:       1757BE3191C1EE0D050EC4DBF94CDD84A1149FD4
Authority key identifier: B7:92:6A:9D:B6:08:C6:94:4F:93:64:A8:12:39:EC:10:CF:5E:27:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7926A9DB608C6944F9364A81239EC10CF5E2752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/3136342e3136332e3230382e302f32322d3232203d3e20323637343237.roa
Signing time:             Thu 04 Apr 2024 04:51:16 +0000
ROA not before:           Thu 04 Apr 2024 04:46:16 +0000
ROA not after:            Thu 03 Apr 2025 04:51:16 +0000
asID:                     267427
IP address blocks:        164.163.208.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:57:be:31:91:c1:ee:0d:05:0e:c4:db:f9:4c:dd:84:a1:14:9f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7926A9DB608C6944F9364A81239EC10CF5E2752
        Validity
            Not Before: Apr  4 04:46:16 2024 GMT
            Not After : Apr  3 04:51:16 2025 GMT
        Subject: CN=C64393E5496332952D142C0C89D10EDAF6D3E3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:21:ef:6a:02:fe:97:14:96:ba:ad:fe:9d:
                    f3:96:2c:32:b0:77:2f:92:75:b6:66:96:bc:78:11:
                    85:34:e3:51:d2:63:01:ab:c7:9a:26:62:ea:bf:bb:
                    e7:3b:f2:f5:23:13:0a:75:fa:c6:2b:dd:81:d3:f5:
                    23:a6:73:fc:58:8b:07:70:e2:be:77:a7:da:76:1d:
                    55:50:d5:d3:42:61:cd:b9:aa:f8:7a:89:84:18:ef:
                    80:fa:32:47:62:01:00:95:3f:7d:a0:40:3b:ad:f5:
                    24:b8:75:48:c3:ce:c8:69:c1:13:9f:12:ef:50:e2:
                    bd:1b:cf:eb:b4:46:16:50:61:7e:56:9a:6c:f2:cc:
                    3d:fe:60:48:9f:2d:b6:46:82:4d:36:b1:16:f2:eb:
                    c5:5d:bb:dc:fc:c7:5a:13:9c:c6:f4:bb:60:33:a4:
                    34:72:71:8e:ac:9a:3e:57:86:fc:08:26:c1:d1:16:
                    4b:ef:be:d0:9f:bf:c3:cb:ba:ec:2e:2c:f9:de:af:
                    82:56:ec:24:a1:2b:b4:e8:ab:4c:88:ff:c4:2e:f0:
                    00:0b:d6:15:81:42:5c:31:35:e5:e5:95:6b:27:59:
                    ae:cc:8a:45:89:47:90:a6:c5:ed:e7:14:30:c2:3b:
                    d4:e8:b9:af:96:49:9a:45:af:47:bc:f7:f5:5e:b7:
                    79:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:93:E5:49:63:32:95:2D:14:2C:0C:89:D1:0E:DA:F6:D3:E3:F4
            X509v3 Authority Key Identifier:
                keyid:B7:92:6A:9D:B6:08:C6:94:4F:93:64:A8:12:39:EC:10:CF:5E:27:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/B7926A9DB608C6944F9364A81239EC10CF5E2752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7926A9DB608C6944F9364A81239EC10CF5E2752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/1/3136342e3136332e3230382e302f32322d3232203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:01:c7:98:4a:33:79:cd:80:0b:c5:e1:92:6e:54:5a:48:c7:
         aa:2b:87:57:fb:8f:e3:8c:97:35:74:01:f1:bc:64:a4:a5:d3:
         d3:c5:8a:07:eb:7a:7a:f3:1a:96:50:b4:e6:56:cb:47:ac:8b:
         90:5c:c7:6e:65:bc:81:e1:8f:a3:38:55:66:71:58:67:cd:28:
         1f:5e:ec:96:cb:93:40:b9:bd:4b:17:90:95:f3:7a:1d:62:3a:
         af:dd:d8:f0:35:4a:3c:8b:e8:5e:2a:f2:d5:3b:80:b7:cd:72:
         34:8b:84:d5:7a:8a:0d:2a:4b:c7:56:c2:e9:79:2c:46:ff:75:
         12:2a:95:12:50:ae:c6:db:39:78:ee:77:0d:80:44:08:d3:0d:
         2a:c0:17:d9:c9:c5:42:b3:07:7c:8f:54:33:0f:46:4a:7f:43:
         95:4c:80:fb:aa:60:1e:00:6a:7c:df:30:98:94:ee:16:95:12:
         37:2b:6e:f7:d6:50:eb:9d:6a:74:6e:dd:b4:55:89:1f:02:2d:
         c8:cf:ca:a5:f6:ab:8c:44:ec:1e:e9:0c:e6:86:cf:c9:21:60:
         0e:ac:27:d9:6f:63:87:17:01:94:79:db:9e:7c:24:4a:61:18:
         96:ff:b6:4b:ef:f3:79:35:ae:fc:4e:77:81:73:fe:f4:03:7a:
         47:b3:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 21:46:38 2024 by rpki-client on console-fra.rpki-client.org