Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3332203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32322d3332203d3e20323634393438.roa (raw, json)
Hash identifier:          QuiXLT2+Wj3S4eLZc3Xp6MttjQrd+v4XWYXWnHkVHB0=
Subject key identifier:   C8:69:E3:66:6C:E4:8D:EC:14:51:3B:0E:84:DC:7F:35:B8:49:51:76
Certificate issuer:       /CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
Certificate serial:       68F99F161B82DC4B723CDCC544350BCD9ABCD645
Authority key identifier: AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3332203d3e20323634393438.roa
Signing time:             Wed 05 Jun 2024 10:17:21 +0000
ROA not before:           Wed 05 Jun 2024 10:12:21 +0000
ROA not after:            Wed 04 Jun 2025 10:17:21 +0000
asID:                     264948
IP address blocks:        168.232.196.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f9:9f:16:1b:82:dc:4b:72:3c:dc:c5:44:35:0b:cd:9a:bc:d6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB3FE91804F34348D6CF226CFC7CD62F71E25A1
        Validity
            Not Before: Jun  5 10:12:21 2024 GMT
            Not After : Jun  4 10:17:21 2025 GMT
        Subject: CN=C869E3666CE48DEC14513B0E84DC7F35B8495176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:de:0c:cc:c8:bd:8d:30:16:7e:0b:11:01:
                    ec:45:32:52:b5:40:8c:4d:2a:27:6d:cc:4b:05:45:
                    8f:d6:79:1c:dd:a4:ab:89:d8:0a:fe:55:43:34:57:
                    36:74:42:3c:c0:3c:dc:90:5f:e2:53:93:0c:a9:8a:
                    74:ce:10:2f:e0:a4:40:ba:2e:e0:42:e0:79:d6:e5:
                    be:0e:52:0f:72:8b:35:c4:26:6f:d1:13:7e:ec:14:
                    15:f0:4f:de:65:a0:73:a2:e0:bd:66:eb:1e:1d:e1:
                    86:89:08:8b:2a:37:78:9c:e5:fc:e2:cb:dd:95:f6:
                    31:b0:cc:7c:25:9d:f2:b2:87:0d:60:9b:f7:39:5a:
                    c6:d9:70:2b:bd:26:e0:a5:2e:cb:34:10:2c:32:4d:
                    7e:3a:ba:ef:f2:96:3b:7d:f4:7d:d0:1f:f6:8f:af:
                    4a:f4:85:f1:72:7a:c7:48:83:e0:ae:99:a2:b8:ca:
                    54:32:81:c7:cd:9b:43:33:79:ce:d7:c1:69:0c:24:
                    3e:5a:19:0f:44:12:ed:29:f3:bb:bc:f9:9c:fd:d1:
                    77:d3:51:ee:0f:d0:2a:bc:a8:da:81:d6:4d:b9:7f:
                    4e:a8:33:92:27:1c:92:75:8b:c6:f9:8a:95:2b:e6:
                    a9:a2:d5:ee:d5:60:19:4e:72:03:dc:9b:71:ac:4d:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:E3:66:6C:E4:8D:EC:14:51:3B:0E:84:DC:7F:35:B8:49:51:76
            X509v3 Authority Key Identifier:
                keyid:AD:B3:FE:91:80:4F:34:34:8D:6C:F2:26:CF:C7:CD:62:F7:1E:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADB3FE91804F34348D6CF226CFC7CD62F71E25A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32322d3332203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:b7:41:57:0f:c1:23:2c:e4:9a:5a:7d:48:4e:95:51:3c:
         39:e8:4e:4f:28:83:14:42:46:1c:46:71:e8:bb:e6:4f:a2:fa:
         90:e5:71:b4:6d:3b:73:b3:1f:78:07:ab:f2:64:e9:a2:e8:f2:
         87:a7:f1:05:2b:1b:07:4c:22:a4:e8:9a:e1:9e:64:43:47:74:
         fd:7e:1e:66:09:b3:1e:7d:7d:6e:5b:1d:bc:4d:b5:9d:52:8b:
         70:5b:ee:b2:72:56:bf:33:d3:b7:8f:d4:57:6e:ed:31:29:8d:
         4f:4a:7a:1f:14:b0:89:9f:2f:85:80:b0:5a:71:fe:03:87:12:
         2f:73:f6:c1:d4:30:c9:ea:a6:3d:c3:08:b4:2e:79:e5:a6:9f:
         0d:dd:2d:f5:43:81:df:31:4c:0b:c7:1a:e9:db:94:9d:50:28:
         c3:ea:42:aa:b2:11:cc:98:8d:79:b9:d7:5b:60:fb:a4:97:6e:
         df:8c:ab:7a:65:e0:f4:d3:36:ea:4a:e3:05:95:f7:2c:0a:70:
         a3:9a:90:d9:3b:04:83:5c:3b:19:0a:58:7c:14:12:2d:cb:da:
         c0:8c:d0:55:8a:4a:7a:f9:e9:dd:71:34:a2:ae:64:a6:91:9e:
         7f:6f:c6:73:4f:75:0d:74:9a:b3:b5:0d:eb:a5:ad:7e:7e:f6:
         92:e0:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 21:25:27 2024 by rpki-client on console-fra.rpki-client.org