Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          2Kh6ybpS5mfvFn/ETVl3X5VxSC8CZC6d5aueBZiXUAs=
Subject key identifier:   BD:CA:86:1D:4F:AB:DC:23:40:A8:30:AF:E3:25:EC:37:97:52:26:F5
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       315C7F6121EE173132EE37C4B55B98E234DD2ABC
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:13 +0000
ROA not before:           Fri 05 Apr 2024 02:41:13 +0000
ROA not after:            Fri 04 Apr 2025 02:46:13 +0000
asID:                     265158
IP address blocks:        167.249.16.0/22 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5c:7f:61:21:ee:17:31:32:ee:37:c4:b5:5b:98:e2:34:dd:2a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:13 2024 GMT
            Not After : Apr  4 02:46:13 2025 GMT
        Subject: CN=BDCA861D4FABDC2340A830AFE325EC37975226F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:6c:7f:e9:b2:9e:db:1f:d9:d9:e2:4e:d7:
                    e5:ee:80:55:88:04:c7:41:6b:57:09:3d:f2:ca:77:
                    dc:56:76:f2:2a:53:71:c3:d9:c4:37:0d:7a:be:7e:
                    c8:31:27:cb:04:c1:d2:db:fd:2e:3b:c2:4c:77:f5:
                    0a:33:f0:3e:53:6f:c8:be:4a:7f:07:81:71:a5:92:
                    ff:ce:97:f8:8d:d8:91:fc:a9:74:9d:65:6e:10:56:
                    38:b6:4c:1f:7f:94:27:e0:71:8d:0a:17:3c:8f:ea:
                    49:29:69:c6:3d:c3:30:ff:6b:75:58:b2:6d:3e:75:
                    de:29:cb:6a:8b:94:4f:ab:49:55:12:10:b6:b9:ff:
                    0c:14:de:15:69:55:3c:72:49:60:53:66:79:5c:a4:
                    93:71:ed:24:7a:9e:b7:c2:5a:01:bd:ec:43:df:11:
                    26:49:fd:63:58:49:4d:bf:27:a4:85:0f:e7:46:98:
                    d6:9e:a0:b4:1d:75:ad:cb:2d:c9:37:05:4d:60:c1:
                    86:8a:ba:0c:99:f5:d0:39:8f:1b:9e:60:cb:c7:37:
                    8d:0d:f3:b3:31:1f:e3:a3:15:95:4a:0f:3f:6f:d7:
                    5a:18:51:97:e1:3e:78:08:b3:f9:ce:bd:0d:92:18:
                    c0:0e:d2:73:02:94:a7:64:7b:27:68:56:b4:4b:42:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CA:86:1D:4F:AB:DC:23:40:A8:30:AF:E3:25:EC:37:97:52:26:F5
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31362e302f32322d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:12:ab:88:74:e1:9b:32:76:39:32:6a:cf:6f:86:5d:47:8c:
         d3:bb:16:19:8f:1b:6d:10:35:e2:02:8d:89:19:95:fe:23:dd:
         b5:c3:e4:46:30:cf:e0:2d:98:bb:a9:5f:ef:92:22:b2:20:56:
         c4:a0:e5:5d:18:13:87:0c:d2:3f:8f:ee:b1:df:8b:4f:4f:09:
         ac:c5:ae:1a:e6:45:4a:78:57:2b:15:d4:32:03:8f:22:07:51:
         da:ce:b2:b9:49:7d:53:36:3f:6d:1b:84:57:6f:46:5d:c2:c7:
         25:a8:9f:41:8b:4d:ab:d4:ad:ca:a5:17:55:20:95:5a:d9:33:
         5a:59:88:76:f6:5f:c5:c4:a0:36:fa:97:33:e0:05:82:29:18:
         5f:f2:60:41:32:6a:6f:df:c2:1b:55:8a:5c:d8:b2:28:4d:99:
         69:01:13:d7:8c:c4:c1:47:d6:94:27:fc:33:1b:82:8f:37:8e:
         de:76:60:28:58:ff:c5:82:80:d0:44:78:99:2c:a6:4e:a8:76:
         78:5c:12:4c:8a:b1:25:ce:55:17:30:99:f0:7b:19:41:01:24:
         1c:9b:f8:e7:55:17:61:46:51:32:02:9d:ed:fc:a0:3b:55:60:
         96:5b:cf:52:a2:e4:e3:fe:81:de:32:a2:96:a1:d4:ea:2a:92:
         b9:75:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:15:43 2024 by rpki-client on console-fra.rpki-client.org