Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          HU/PotU7kgYXBaEm4XqYio0cH9S9u1vYiI/FitrehR8=
Subject key identifier:   C6:4D:FB:05:02:02:42:69:C9:7C:6C:C2:D9:A9:F9:8F:0E:0F:40:E8
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       25086343C8F2A890B3A92A6C6F57B22888F67DA0
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:12 +0000
ROA not before:           Fri 05 Apr 2024 02:41:12 +0000
ROA not after:            Fri 04 Apr 2025 02:46:12 +0000
asID:                     265158
IP address blocks:        167.249.18.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:08:63:43:c8:f2:a8:90:b3:a9:2a:6c:6f:57:b2:28:88:f6:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:12 2024 GMT
            Not After : Apr  4 02:46:12 2025 GMT
        Subject: CN=C64DFB0502024269C97C6CC2D9A9F98F0E0F40E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:8a:58:08:67:61:19:40:27:9f:3d:01:2f:
                    f1:ef:ed:f7:a6:15:59:66:18:57:ee:82:fb:6f:de:
                    c7:90:5c:67:e3:3c:bb:a3:e4:c7:19:d2:67:e6:b3:
                    96:99:f1:1d:a3:fc:49:bd:9a:49:17:fc:13:1f:e3:
                    a1:ab:1c:ed:fd:c0:91:6a:3d:48:40:09:3f:c9:cd:
                    cd:84:a1:17:13:b3:60:19:5f:bc:4e:34:95:ff:33:
                    fa:43:12:9b:c0:5a:1e:66:c6:08:dd:4e:8b:dd:28:
                    13:c1:0d:3c:36:74:27:1c:99:4c:7b:f8:7e:5a:8b:
                    71:73:15:f8:b7:63:29:f2:1d:7f:1f:05:d6:ce:55:
                    07:14:e2:d0:1b:4c:51:98:9d:fa:0e:ba:6a:1e:d8:
                    4f:73:21:c9:c4:0e:89:15:2c:aa:af:5c:90:6c:46:
                    37:e6:d5:13:a8:91:85:8a:9a:0d:bb:49:b2:43:84:
                    10:c0:33:04:c7:a1:ce:6a:29:ea:2f:ba:a8:b9:dc:
                    ba:7d:db:0e:bd:01:a6:72:93:40:a1:8f:74:39:34:
                    88:1f:99:9e:2a:6c:30:5a:02:9d:52:79:cd:ef:28:
                    75:02:fd:4b:0e:86:c1:0a:49:ca:dc:3f:c4:01:48:
                    9d:26:8d:08:59:22:7d:08:6f:fc:59:83:95:97:3f:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4D:FB:05:02:02:42:69:C9:7C:6C:C2:D9:A9:F9:8F:0E:0F:40:E8
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:93:8a:ce:fb:3b:c9:49:4f:8f:f5:7d:1f:64:68:85:46:00:
         2d:08:2c:72:47:56:d5:74:05:3a:99:cf:ec:ab:54:75:d7:d5:
         d9:c7:d3:51:46:22:35:e9:6b:84:d6:67:5b:97:6d:a9:dd:96:
         be:cd:a6:ac:12:7f:ed:0d:6c:12:3d:7e:48:4b:30:8d:60:3f:
         f8:5c:82:ec:35:b4:ee:c0:09:36:8f:43:3e:94:13:21:01:30:
         15:58:66:12:51:84:50:67:a1:98:ec:b6:eb:f8:e8:4e:b1:5b:
         27:e0:65:fe:96:2b:c4:64:b2:49:69:59:a2:6b:a1:e7:d8:58:
         42:c3:2f:77:bc:64:ac:69:8a:c1:55:59:f9:df:b6:d6:87:8e:
         a8:e0:8a:f3:25:f8:9a:14:fe:81:85:a6:2f:a1:48:fe:fd:4f:
         e0:16:08:5c:9a:95:e7:e0:b4:d6:58:59:ed:e7:9b:f1:ed:99:
         77:f7:54:30:fa:a5:90:75:9a:51:b2:91:76:dc:b7:5d:b4:c0:
         4b:ea:db:0a:dc:ae:b3:7e:28:c0:05:32:43:f0:46:53:ce:19:
         5f:cc:0b:87:27:64:65:53:2d:b5:af:ae:73:9a:1d:83:aa:a9:
         02:40:fd:ed:f4:b2:48:91:19:2c:7f:be:b0:65:ff:9b:ac:57:
         6d:43:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:04:03 2024 by rpki-client on console-ams.rpki-client.org