Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa (raw, json)
Hash identifier:          zNnS/1ePiERJy9u4V3wozwiKOgXkQ5RaGDNyr/mSbY0=
Subject key identifier:   19:B8:B6:52:00:FB:E9:0E:50:F8:73:D0:FC:42:D1:78:19:6B:91:6E
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       5EEBD7FA984A3B309221B23ABBA7E1940C347738
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:53 +0000
ROA not before:           Thu 04 Apr 2024 08:37:53 +0000
ROA not after:            Thu 03 Apr 2025 08:42:53 +0000
asID:                     271134
IP address blocks:        167.249.88.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:eb:d7:fa:98:4a:3b:30:92:21:b2:3a:bb:a7:e1:94:0c:34:77:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:53 2024 GMT
            Not After : Apr  3 08:42:53 2025 GMT
        Subject: CN=19B8B65200FBE90E50F873D0FC42D178196B916E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:ce:de:11:a2:86:62:ec:0e:d4:47:ab:0a:
                    0b:68:5f:82:8e:04:d5:ec:e6:42:26:06:e5:13:1e:
                    e7:dd:41:67:90:31:bc:e9:7a:6b:7b:63:75:d6:11:
                    9d:96:83:e0:ee:56:64:14:de:89:48:dd:88:7a:7b:
                    cc:82:7c:0e:1a:d1:09:96:fa:7d:62:87:73:d3:42:
                    8f:78:85:c0:e9:03:7a:fd:2b:58:6f:8c:84:47:c3:
                    f5:a4:cc:6c:51:03:c3:78:21:6d:32:19:5a:21:2f:
                    8f:3f:b6:90:f6:c5:8b:af:8e:f6:cf:18:f1:53:20:
                    3c:6b:68:e6:85:ef:5c:55:94:fe:82:e0:32:fa:50:
                    8d:8e:c2:b6:32:54:dc:07:7f:06:36:4d:08:ff:4c:
                    c1:c2:09:97:53:43:99:c4:0d:39:b0:8d:a2:70:5d:
                    1e:5c:f9:1e:be:0d:ef:bc:bc:0f:b1:50:32:5a:6b:
                    45:5a:e4:d8:a5:57:12:8d:da:1f:38:97:2f:af:da:
                    9e:b4:92:dd:c8:d4:95:c7:50:8c:84:cb:92:28:61:
                    40:7b:2e:7b:db:17:ec:27:cb:ec:e1:59:74:54:63:
                    44:2e:6e:5e:3b:86:86:b1:1c:89:c9:4a:f4:27:61:
                    f9:32:e2:cc:83:ca:85:f6:e0:41:e5:fc:68:6a:8e:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B8:B6:52:00:FB:E9:0E:50:F8:73:D0:FC:42:D1:78:19:6B:91:6E
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e38382e302f32332d3233203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:56:a4:52:89:24:b3:fd:40:b3:80:d4:1e:63:c7:6f:f5:13:
         30:2d:4a:22:1e:bb:b5:14:11:19:e1:5e:75:5c:4f:fb:9a:f8:
         a1:c6:7c:11:be:59:4c:c0:1c:83:d5:d5:f5:90:71:03:7c:a9:
         bf:17:ff:e1:6f:29:7e:36:bd:d7:68:62:f4:98:23:1a:60:da:
         51:bf:a7:d8:76:33:a5:fe:12:32:03:7f:e4:ec:4b:14:df:98:
         75:31:14:06:3d:8e:56:3d:69:95:8b:eb:1c:ae:b8:d9:dd:03:
         b8:88:b4:0f:fe:35:10:0d:a6:4f:4c:92:d6:c7:3e:eb:6f:12:
         49:46:c4:6e:49:ba:86:5e:cd:ba:d4:d5:53:70:71:42:15:91:
         c6:74:d7:65:5f:30:a2:6e:8f:03:ad:a2:1b:6d:bc:5d:0c:05:
         f9:56:5e:d7:65:51:0d:73:7a:fb:32:ea:2d:22:fd:61:87:7c:
         43:8a:73:7f:6f:91:fc:e8:b7:75:48:df:a0:0d:02:1a:98:91:
         74:9e:18:a2:b9:c1:2a:d2:38:e1:98:62:4f:d8:28:bb:49:90:
         fa:7d:22:59:50:10:a4:29:ea:35:d0:e7:b7:7d:ad:1e:2f:98:
         10:b1:f2:13:3b:f1:fc:cc:ce:b3:90:02:6c:bf:ce:c6:eb:3e:
         2c:90:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org