Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa
File:                     3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          sTV9EEvuhU4T6WGBci24Ec5suIzsSAjNy05veGME+WI=
Subject key identifier:   31:62:10:98:A2:7A:F2:7B:EB:AC:6F:71:B8:79:78:A3:02:FA:BF:D5
Certificate issuer:       /CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
Certificate serial:       5BCDEDDC6E351A9EA1E1AAD37206D02082A1DF6D
Authority key identifier: FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa
Signing time:             Thu 25 Jul 2024 13:18:20 +0000
ROA not before:           Thu 25 Jul 2024 13:13:20 +0000
ROA not after:            Thu 24 Jul 2025 13:18:20 +0000
asID:                     268786
IP address blocks:        168.196.204.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cd:ed:dc:6e:35:1a:9e:a1:e1:aa:d3:72:06:d0:20:82:a1:df:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0A9222DC08A63B5F325E52AF79B0BB4820EA45
        Validity
            Not Before: Jul 25 13:13:20 2024 GMT
            Not After : Jul 24 13:18:20 2025 GMT
        Subject: CN=31621098A27AF27BEBAC6F71B87978A302FABFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:26:94:29:cd:f6:4d:51:83:01:45:eb:8e:
                    0a:28:bb:56:82:1e:fe:b2:95:31:b4:9d:ac:35:d0:
                    db:d5:c6:44:b4:d7:f9:10:9e:47:f6:40:df:80:2e:
                    c4:f2:c3:d7:20:18:dc:d1:ec:7f:c4:2a:25:bc:66:
                    a1:d6:d1:02:37:41:21:2a:ca:61:6f:17:53:28:01:
                    7a:34:1e:23:c4:a4:02:da:9e:48:71:b6:c5:61:95:
                    7a:1b:66:a0:5c:a3:bb:7c:84:d0:d9:87:8a:41:b6:
                    a2:8c:97:03:21:d4:4e:f2:ed:ca:e1:6f:e0:41:fa:
                    44:60:50:2c:29:e4:35:2e:aa:f5:8a:31:84:25:36:
                    5f:a2:11:dd:0e:3c:d2:42:d2:13:68:80:aa:71:b6:
                    d2:4d:29:d1:62:10:fd:fe:ab:fe:30:9a:3f:45:02:
                    77:6d:c6:7a:1f:11:ed:91:8b:ec:d4:d9:16:4d:c9:
                    71:d2:6d:00:de:d0:d3:b3:39:7a:fa:6c:4c:99:f2:
                    02:72:58:bf:26:b0:20:cc:c1:11:6e:a8:18:1b:10:
                    cc:a5:f4:7b:6a:11:9c:a3:9a:75:55:59:9c:23:0a:
                    e1:46:71:fb:e7:af:1c:61:00:85:b4:bd:55:46:96:
                    c6:68:ff:76:45:c1:6b:7e:22:c0:a0:a8:e6:94:a6:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:62:10:98:A2:7A:F2:7B:EB:AC:6F:71:B8:79:78:A3:02:FA:BF:D5
            X509v3 Authority Key Identifier:
                keyid:FF:0A:92:22:DC:08:A6:3B:5F:32:5E:52:AF:79:B0:BB:48:20:EA:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0A9222DC08A63B5F325E52AF79B0BB4820EA45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:91:27:5f:16:bf:6d:03:05:80:7b:ab:4e:47:15:08:52:bc:
         2d:1c:c7:82:97:d1:80:3f:ec:f0:39:9d:39:77:7b:a8:ba:04:
         cb:51:dc:90:9e:c5:68:90:4a:0e:6e:87:f4:92:23:46:7d:31:
         30:a1:01:c5:5e:18:9f:43:b3:4d:05:29:50:a2:5b:f3:d3:79:
         92:20:ef:95:ec:ae:5c:8e:8a:e9:04:12:18:ce:7f:8f:10:e1:
         57:38:bf:7b:eb:33:60:de:91:cd:3b:ec:d7:66:44:4a:80:99:
         92:cc:65:1f:12:1c:62:27:c8:6c:b1:16:05:cf:6f:92:95:92:
         31:8c:87:bd:6f:c3:91:a2:9b:9a:bb:f7:91:ad:5c:5a:fc:16:
         b8:f1:f7:72:b7:83:7e:96:5d:6c:9a:98:d5:9c:99:ba:54:bb:
         72:4e:0e:2b:12:e3:85:59:95:66:ce:ba:b4:84:36:7d:c7:1d:
         34:58:b5:39:0c:2a:fa:63:ad:5c:ee:9f:c4:48:2b:43:fa:ab:
         8c:0d:1a:f2:7d:13:bf:5f:93:64:cd:71:35:79:ab:4a:67:58:
         12:26:e1:03:ad:c2:bd:0b:a4:aa:f4:36:53:7d:73:6e:45:71:
         9a:1e:1c:1f:b8:bb:a3:cf:c4:44:0d:4d:9e:de:0f:a5:90:03:
         35:91:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 06:41:50 2024 by rpki-client on console-ams.rpki-client.org