Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31392e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31392e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          n7ITewypWorn/8BLRqET2ZFInViRYTmkH67vJMBKvvY=
Subject key identifier:   CF:4E:74:81:CC:3E:D5:AC:CA:EB:F8:41:8F:74:75:5D:9F:C1:B3:7A
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       342B2BC8CC37899EB8C6A40CC4473833635DA6A6
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31392e302f32342d3234203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:13 +0000
ROA not before:           Fri 05 Apr 2024 02:41:13 +0000
ROA not after:            Fri 04 Apr 2025 02:46:13 +0000
asID:                     265158
IP address blocks:        167.249.19.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2b:2b:c8:cc:37:89:9e:b8:c6:a4:0c:c4:47:38:33:63:5d:a6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:13 2024 GMT
            Not After : Apr  4 02:46:13 2025 GMT
        Subject: CN=CF4E7481CC3ED5ACCAEBF8418F74755D9FC1B37A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:98:92:63:95:2f:44:d2:cd:59:41:2d:d3:
                    b9:eb:30:a0:9b:24:69:f9:e2:66:32:01:a4:70:fa:
                    48:27:1e:ca:58:42:7e:f8:f0:45:84:e8:c3:6d:91:
                    12:e4:f4:e1:56:86:dc:a8:e7:2a:b7:ea:b5:bf:28:
                    37:50:26:c2:3c:d5:17:6c:fd:0c:07:2e:15:a1:11:
                    ff:30:e1:a7:f2:55:9b:07:37:c4:46:e9:09:28:ca:
                    a9:f5:22:7d:be:b8:22:bc:98:a7:8f:03:5c:14:59:
                    c1:66:a3:fe:d8:c6:a9:91:c1:8c:49:69:50:99:6d:
                    02:d5:1c:16:55:a0:59:53:d8:92:39:19:a4:04:74:
                    99:f9:c9:23:2a:48:b6:f1:ff:33:56:87:d7:aa:71:
                    b1:6f:c8:38:30:85:29:e7:f0:18:60:22:97:89:9e:
                    69:01:5d:94:64:b2:cb:54:1b:aa:5c:28:96:af:ac:
                    23:a0:2b:51:bc:d3:b8:29:30:8b:b2:d0:d8:2c:d4:
                    4a:62:55:7a:3e:17:12:1a:2b:19:78:9c:d0:1b:45:
                    af:db:e8:dd:a7:79:5b:24:dc:a7:69:73:cb:c3:01:
                    1f:09:a8:c7:53:10:08:7d:bb:a8:07:2a:ba:13:18:
                    9d:88:82:9a:a6:5b:17:a9:58:bd:36:ae:2b:b6:a9:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4E:74:81:CC:3E:D5:AC:CA:EB:F8:41:8F:74:75:5D:9F:C1:B3:7A
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31392e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a3:3e:39:11:9c:44:d9:17:92:0b:69:ba:a0:fb:d1:e5:0d:
         25:7a:7b:85:21:84:78:64:14:a3:cf:cf:91:9a:50:82:ab:52:
         ba:5f:da:df:3e:93:e8:5c:4e:8c:ae:3b:b6:a9:88:b0:cb:84:
         fc:87:03:08:93:46:dd:b9:ad:5d:ec:21:90:6e:64:27:e1:01:
         90:4f:1a:cd:49:6a:ca:20:ff:86:57:7a:0d:4e:f3:f0:0b:ec:
         9e:3f:5d:d5:b4:84:4c:5e:32:62:40:34:81:b2:d8:a9:21:3a:
         c8:88:a5:f2:e3:8b:e5:82:2b:f5:41:bd:95:1e:13:71:5d:10:
         ff:9b:bd:b4:2b:20:47:3a:b4:ad:fc:07:b0:3f:e2:14:fb:06:
         31:b8:b5:15:a3:b6:3f:4d:07:26:c4:45:0d:f6:50:78:ab:3d:
         11:33:b1:55:d0:7b:96:31:0f:86:4d:af:5a:d6:1e:18:af:78:
         ef:79:9c:33:8c:15:8e:a3:3a:28:8e:d9:ea:32:64:22:5b:c2:
         22:0d:22:65:29:88:03:24:70:2e:c1:5c:cd:e2:45:54:aa:a0:
         b4:bf:0d:f2:3f:d2:cb:4b:84:3f:af:3e:be:e8:b6:99:61:77:
         2d:0b:a8:10:4b:71:5e:e5:28:d3:04:d7:45:e2:05:52:81:10:
         17:da:dd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:15:43 2024 by rpki-client on console-fra.rpki-client.org