Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/3139322e3134312e31362e302f32322d3332203d3e20323637343431.roa
File:                     3139322e3134312e31362e302f32322d3332203d3e20323637343431.roa (raw, json)
Hash identifier:          tajuIvctxLvYjdspFmnvRCiR9PC2Q0WkqotjyikBqLQ=
Subject key identifier:   9C:C1:6B:11:32:8E:84:C8:03:91:52:36:84:FD:6F:2F:AD:16:6A:50
Certificate issuer:       /CN=B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B
Certificate serial:       3E64296E2E1EEE038866A715F8E9918E6BA8153A
Authority key identifier: B0:2B:87:ED:2E:2F:60:30:A1:AE:27:91:C4:9C:0E:0C:88:9C:C0:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/3139322e3134312e31362e302f32322d3332203d3e20323637343431.roa
Signing time:             Mon 13 May 2024 15:47:42 +0000
ROA not before:           Mon 13 May 2024 15:42:42 +0000
ROA not after:            Mon 12 May 2025 15:47:42 +0000
asID:                     267441
IP address blocks:        192.141.16.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:64:29:6e:2e:1e:ee:03:88:66:a7:15:f8:e9:91:8e:6b:a8:15:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B
        Validity
            Not Before: May 13 15:42:42 2024 GMT
            Not After : May 12 15:47:42 2025 GMT
        Subject: CN=9CC16B11328E84C80391523684FD6F2FAD166A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:2f:eb:a6:12:c4:14:48:bf:2f:f0:25:b3:
                    96:ed:16:1c:88:8b:56:c1:1c:8e:aa:d3:53:9e:ac:
                    de:74:02:df:fd:6d:dc:ca:b9:4c:85:7e:7c:f9:20:
                    86:c0:92:4f:77:4d:b4:87:78:c2:05:54:f7:1b:0b:
                    46:4b:9e:88:63:85:1f:20:1e:55:c7:41:da:c6:b0:
                    63:81:75:cd:50:c7:5e:42:de:83:3b:c3:ee:8b:9b:
                    31:ae:1a:72:2d:52:79:95:8e:90:fb:b3:2e:ad:37:
                    68:89:10:b4:70:b6:72:9d:9c:d1:f4:de:33:f5:35:
                    a2:27:ae:85:77:b0:59:e0:8f:04:c4:3e:79:c5:2d:
                    52:64:8e:26:bd:ab:a2:91:15:a1:1d:f3:19:fa:ab:
                    8a:a0:15:e1:c3:c7:15:f9:6b:2c:60:0c:02:70:bd:
                    9c:1a:81:c3:13:88:5c:91:a0:e5:c1:ae:7a:0a:ea:
                    39:f3:05:4b:7e:7b:1c:cb:3f:13:52:e0:e5:52:e0:
                    46:30:f2:75:ee:a6:a0:d0:83:b0:7a:37:16:0e:ab:
                    5b:60:54:a8:50:30:31:81:28:cd:04:f2:7d:36:7d:
                    7e:c8:f3:1f:fe:d3:68:3f:35:b6:7b:b5:a3:36:12:
                    7d:31:cf:6d:ed:ba:1d:8d:d9:e1:76:34:1f:d2:5a:
                    4d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C1:6B:11:32:8E:84:C8:03:91:52:36:84:FD:6F:2F:AD:16:6A:50
            X509v3 Authority Key Identifier:
                keyid:B0:2B:87:ED:2E:2F:60:30:A1:AE:27:91:C4:9C:0E:0C:88:9C:C0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02B87ED2E2F6030A1AE2791C49C0E0C889CC06B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2N7AoZmtbSnP4ZL7RVe5cp8hSDRs5NdGjpcnc1GyAWo/0/3139322e3134312e31362e302f32322d3332203d3e20323637343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:26:29:b9:29:8f:c2:8a:f5:16:65:99:d2:21:3f:39:16:0c:
         47:1a:3c:d5:19:ec:a5:2f:4e:b8:87:c9:09:20:fb:50:e4:03:
         62:01:97:4f:cd:df:e5:b9:a3:04:b9:d9:f2:ec:cd:a0:a8:d7:
         c6:c7:42:26:87:53:f2:35:c3:5e:a9:cc:20:10:3d:3a:70:6e:
         5e:c9:74:8e:e9:61:47:2d:d7:83:77:a3:99:d9:08:49:c8:78:
         15:20:ae:8e:4c:f7:03:17:e8:b1:19:58:63:9c:cb:1c:a6:e1:
         7c:9f:d9:c0:7b:1d:8a:39:73:a2:6c:af:ba:dc:b9:3f:14:12:
         c9:43:60:92:36:60:76:4f:d3:3f:64:e5:68:b3:c4:60:b3:82:
         67:99:87:41:03:db:4f:9d:32:94:11:09:03:8c:92:75:8c:f4:
         ae:70:f6:dd:15:2b:a6:5c:88:f4:54:65:4d:2f:65:a1:7e:41:
         4f:97:85:03:b5:5f:c0:08:b9:66:97:73:e0:41:d5:fb:40:bf:
         a3:4f:fd:0e:e6:09:bd:a6:69:48:c1:45:bb:33:45:78:f7:ba:
         78:76:65:64:9b:21:0e:73:eb:ae:2c:51:a3:fb:79:03:13:6f:
         2f:b5:fa:29:ee:5f:75:26:ad:2b:14:23:23:22:5e:1c:46:02:
         28:be:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 08:01:10 2024 by rpki-client on console-fra.rpki-client.org