Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa
File:                     3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa (raw, json)
Hash identifier:          G+C7VGMkf48OMpx/z71gxU3Dd7PuD5CdtOHDla6VaUs=
Subject key identifier:   B6:B5:00:46:70:55:AB:D3:6B:EF:FA:16:D9:0D:7C:DA:89:FA:23:2A
Certificate issuer:       /CN=A5CAB69B324D77E7069383E1585A8C071704B85E
Certificate serial:       07AC5CD90745669DD7ADE624CD823DB9E4805D90
Authority key identifier: A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa
Signing time:             Tue 16 Apr 2024 14:05:52 +0000
ROA not before:           Tue 16 Apr 2024 14:00:52 +0000
ROA not after:            Tue 15 Apr 2025 14:05:52 +0000
asID:                     265285
IP address blocks:        168.90.149.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ac:5c:d9:07:45:66:9d:d7:ad:e6:24:cd:82:3d:b9:e4:80:5d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CAB69B324D77E7069383E1585A8C071704B85E
        Validity
            Not Before: Apr 16 14:00:52 2024 GMT
            Not After : Apr 15 14:05:52 2025 GMT
        Subject: CN=B6B500467055ABD36BEFFA16D90D7CDA89FA232A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:66:cb:cb:f4:3a:e7:1d:1d:e2:d3:fc:f5:af:
                    b3:8c:61:a8:2d:15:8a:12:e4:17:28:48:b6:db:6a:
                    c0:f1:3b:85:43:91:eb:ac:4f:28:bf:4a:a1:73:c5:
                    b3:f4:2f:a8:40:18:d8:48:c5:8a:a7:08:71:fc:e2:
                    dc:88:98:8b:3a:7d:b7:af:8e:db:1d:9f:86:0a:51:
                    b7:14:1d:09:49:69:81:45:3d:2e:09:8a:15:d5:e9:
                    5e:db:7a:6c:f7:7c:f9:17:c8:17:ee:de:1f:5b:79:
                    d0:93:c0:a8:a1:7e:0d:4d:7d:05:34:0a:32:6a:b4:
                    1d:e8:49:1d:b8:d4:a7:66:b6:2d:5b:09:0a:c6:2d:
                    dd:17:04:4f:de:6e:6a:76:73:c8:87:c7:45:e0:00:
                    81:00:03:20:79:3c:f5:28:01:fe:20:83:5d:81:4d:
                    2e:6b:fb:13:c1:1e:fb:9a:33:9d:43:69:29:c0:77:
                    a1:5e:1e:d8:51:f6:15:9f:c2:13:e1:f3:90:49:bd:
                    cf:69:44:48:f1:de:a3:37:2e:e0:0b:31:7e:96:5a:
                    bd:89:ba:95:92:e4:86:14:4c:9a:bf:7c:59:fa:f7:
                    97:49:08:d1:0b:36:73:56:4b:61:9d:12:68:58:b8:
                    bb:8f:e0:3a:b1:ab:c9:8f:02:ba:0c:85:97:22:39:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B5:00:46:70:55:AB:D3:6B:EF:FA:16:D9:0D:7C:DA:89:FA:23:2A
            X509v3 Authority Key Identifier:
                keyid:A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/A5CAB69B324D77E7069383E1585A8C071704B85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134392e302f32342d3234203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:8d:ee:85:e7:1d:18:10:9f:ff:10:54:51:41:e4:e3:16:74:
         c2:fe:de:be:39:66:a7:38:1e:f4:69:12:9c:63:a1:53:b2:36:
         11:1b:79:59:5c:1c:25:6c:60:38:74:5d:3d:1c:1d:8e:c0:57:
         bf:9c:49:41:eb:07:dc:70:e1:ef:3a:6b:69:45:67:a6:64:e5:
         d5:4a:26:de:1b:5d:8b:61:21:d3:78:7a:39:6a:a2:16:87:56:
         b5:90:54:15:3e:b4:35:b4:9d:d1:d3:0e:07:22:c3:96:6d:e8:
         e5:55:2c:82:17:ed:74:7f:ff:52:07:2f:ba:32:e4:67:b6:af:
         5d:3f:eb:ce:3e:ad:d6:cc:ed:81:03:a6:dc:8f:5c:ea:98:7b:
         83:2e:b3:f5:fb:ca:c0:bd:80:8b:54:cd:84:16:1f:5d:50:88:
         7e:ef:56:67:0d:76:0a:85:fc:e3:20:ec:39:85:2f:16:de:d3:
         30:d8:8e:b1:13:0a:df:42:3b:f7:3f:81:e9:8e:54:f1:6b:dd:
         14:04:6d:39:e5:42:3d:11:e6:b1:64:a4:cd:34:92:56:0b:4c:
         75:c3:a4:8d:79:e8:36:aa:c3:5f:5a:a7:cb:cd:5f:1d:14:ad:
         fe:b7:17:22:87:46:3a:18:30:a1:9f:5c:5c:21:6d:1f:b2:6d:
         3a:3e:fd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 21:10:43 2024 by rpki-client on console-ams.rpki-client.org