Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa
File:                     3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          dmOtc6Ph3lvpJtyZGZW74VVYgiNbZdi5bjB/mrYMPBM=
Subject key identifier:   37:69:9C:51:2F:90:67:C8:19:18:2F:81:59:63:4E:6F:18:64:E2:D1
Certificate issuer:       /CN=E03CF531484EF901E008EB682C28C97D40536BB3
Certificate serial:       3902B8E0D852C8A8C6FBDEDA88548EB1B404E5B2
Authority key identifier: E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa
Signing time:             Fri 09 Aug 2024 20:26:23 +0000
ROA not before:           Fri 09 Aug 2024 20:21:23 +0000
ROA not after:            Fri 08 Aug 2025 20:26:23 +0000
asID:                     268786
IP address blocks:        168.196.204.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:b8:e0:d8:52:c8:a8:c6:fb:de:da:88:54:8e:b1:b4:04:e5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E03CF531484EF901E008EB682C28C97D40536BB3
        Validity
            Not Before: Aug  9 20:21:23 2024 GMT
            Not After : Aug  8 20:26:23 2025 GMT
        Subject: CN=37699C512F9067C819182F8159634E6F1864E2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:98:78:6f:6f:d5:24:13:3a:b2:4b:3d:70:
                    04:af:76:3e:a7:2c:5e:e5:56:c4:73:ed:4d:9f:07:
                    a2:e8:85:7e:d2:f7:a3:76:d9:a0:6e:75:55:94:81:
                    26:3d:5c:ba:5d:8b:d2:7a:a4:e4:c0:1a:a0:b5:7e:
                    bf:f3:73:b3:34:86:eb:57:87:85:8b:aa:0a:0e:1a:
                    47:74:14:ba:86:b3:b9:fe:ee:a4:6e:3a:30:6d:f8:
                    37:4e:90:07:1c:fb:26:f7:bc:90:21:44:c1:e6:ca:
                    60:36:db:ad:bf:08:df:70:59:3d:d7:95:4d:d0:88:
                    89:80:0c:44:57:2a:9f:38:a3:79:cf:6f:79:e5:da:
                    77:65:55:e2:d9:54:9a:94:20:6b:ed:5f:5f:09:69:
                    14:ab:64:83:a9:5a:61:36:fe:06:a9:b7:ef:d9:95:
                    d4:51:29:11:c1:81:bd:9f:78:2a:e0:42:5d:cc:5b:
                    a0:bf:64:fb:85:74:33:fb:5a:de:65:c5:04:66:2d:
                    05:98:ec:61:15:0a:f4:4b:49:80:75:7e:b1:5e:04:
                    68:d7:ab:97:e8:dd:5f:77:7e:7c:72:f7:32:45:e8:
                    c4:7f:47:11:c3:94:27:3f:ad:66:56:57:6b:50:6e:
                    b5:ce:f2:eb:a1:42:4f:48:db:a4:33:62:d0:32:9d:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:69:9C:51:2F:90:67:C8:19:18:2F:81:59:63:4E:6F:18:64:E2:D1
            X509v3 Authority Key Identifier:
                keyid:E0:3C:F5:31:48:4E:F9:01:E0:08:EB:68:2C:28:C9:7D:40:53:6B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/E03CF531484EF901E008EB682C28C97D40536BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E03CF531484EF901E008EB682C28C97D40536BB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:40:7a:52:44:9a:cf:ea:a8:f3:ea:dd:93:df:87:b1:fe:c5:
         70:b3:d2:62:63:a7:f2:d7:0e:6c:e1:be:67:a7:b9:ba:49:0f:
         66:4e:ed:9b:e0:f2:93:3c:94:a4:79:73:52:3c:ef:8d:39:15:
         9f:79:94:e0:4f:db:64:b8:d6:85:ac:88:12:d3:d0:b7:d2:23:
         cf:51:64:95:ce:34:3c:b2:cb:20:c3:95:da:3b:ac:63:9e:7c:
         bd:fe:94:87:7f:df:7a:7d:ff:2d:e7:4d:0c:e5:45:69:1b:5b:
         85:fc:6b:d3:8b:50:9b:2c:7f:35:7a:67:a8:46:8e:ef:ee:f8:
         07:dd:d0:b9:16:3d:2d:a5:c0:3d:83:bd:30:20:09:b2:ee:e7:
         13:2d:2d:2a:fe:41:f0:90:5d:cc:00:03:46:03:e7:dc:40:3d:
         ac:a5:82:94:61:fd:89:c8:ef:3f:72:bc:db:48:95:67:41:88:
         4b:34:bc:15:6b:73:ad:b9:db:12:18:0d:0a:28:13:bb:21:cf:
         79:f0:f9:4f:7c:b0:54:80:4c:d6:da:44:c9:44:bd:80:b8:c7:
         8b:27:89:b7:91:8a:1c:d5:22:e1:87:4f:b8:e2:6a:71:87:9a:
         42:35:2d:10:b0:7f:a2:fc:78:37:86:7a:b1:f9:9e:9d:37:07:
         a0:f8:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:59:11 2024 by rpki-client on console-fra.rpki-client.org