Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          9DyScdMFfRW5QI8UgaYz6NViMs9NcViOlprCndqFcAQ=
Subject key identifier:   E7:EC:42:87:E6:9F:F1:82:27:6E:21:35:4A:A7:A5:CD:0A:C9:C6:64
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       7334B455766DF972AF365A367E514BF75EB1E7A4
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:55 +0000
ROA not before:           Thu 04 Apr 2024 08:37:55 +0000
ROA not after:            Thu 03 Apr 2025 08:42:55 +0000
asID:                     271134
IP address blocks:        167.249.88.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:34:b4:55:76:6d:f9:72:af:36:5a:36:7e:51:4b:f7:5e:b1:e7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:55 2024 GMT
            Not After : Apr  3 08:42:55 2025 GMT
        Subject: CN=E7EC4287E69FF182276E21354AA7A5CD0AC9C664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:13:98:d5:3d:47:43:a9:0a:ff:c8:1c:27:
                    44:51:1c:84:7c:b8:e9:ca:27:f6:1b:eb:77:c6:42:
                    95:d6:0c:41:3d:22:6a:4f:79:9b:fb:47:8a:59:e2:
                    8b:32:59:69:be:74:26:9e:e7:b7:72:e7:15:49:ea:
                    27:16:fb:f5:fe:54:71:46:03:b4:26:d5:57:f8:7b:
                    bf:78:b8:9d:9b:9a:87:7e:42:14:6c:90:d7:bc:90:
                    2d:51:4f:f8:7e:42:6f:40:93:d7:6f:e6:a2:d2:d9:
                    e5:72:de:17:66:fc:8a:3f:53:cf:18:c9:1a:e5:52:
                    2c:56:da:1f:e4:ca:d3:bb:2c:28:fd:fb:eb:37:45:
                    05:4b:e0:f2:0a:9a:40:ba:88:9e:3d:fc:75:35:3d:
                    6e:08:ac:82:a3:6f:a5:89:53:b0:2b:3a:ab:2b:1e:
                    c1:23:30:c2:9c:cc:ea:70:4a:25:64:0d:de:e3:87:
                    21:db:7e:02:2d:ad:43:26:2a:fe:92:1f:ab:26:fe:
                    73:71:50:fc:e0:9d:2c:93:be:ec:79:28:52:8b:da:
                    45:62:3c:3d:e0:19:40:95:3c:a5:ef:73:99:6c:54:
                    94:d2:6b:b8:d3:f6:63:cc:0b:79:83:6e:91:9c:c1:
                    20:55:35:d8:23:af:a4:0a:d4:f9:c4:52:40:35:a7:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:42:87:E6:9F:F1:82:27:6E:21:35:4A:A7:A5:CD:0A:C9:C6:64
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e38382e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:3b:b5:27:14:7c:3a:ef:6a:86:34:f5:a5:40:87:3d:d3:90:
         79:6f:33:6c:f1:37:80:7f:53:9a:7e:14:42:cb:11:41:4a:49:
         8e:90:cb:b3:5f:c7:b9:3f:d5:9d:cf:ac:ad:e5:3c:b9:1f:cd:
         00:ae:99:8c:51:9c:0e:7c:59:3a:b1:93:a9:b9:c8:f4:ed:53:
         8b:bb:da:e7:ae:15:50:df:73:49:a7:e2:a7:ae:54:99:b4:d2:
         6c:34:22:5b:c6:40:17:19:08:50:35:00:d6:fe:d7:4f:4b:e1:
         33:b7:f0:7a:6b:82:7c:3e:de:5f:e5:98:fd:8a:07:ba:9a:29:
         6f:24:4a:25:ea:9b:c6:3b:cf:60:0a:5d:13:c8:9a:60:a1:7f:
         b4:b2:fb:cd:fd:32:5f:e3:01:a7:2c:55:8a:6b:74:1e:1f:ec:
         af:c5:90:fc:1d:ac:07:98:07:fa:6f:e5:94:e5:c4:58:2f:43:
         c8:5f:a0:28:26:44:c1:20:35:ac:a0:ed:51:8f:a4:71:3e:46:
         60:e7:1f:61:93:f6:29:92:f8:0e:2f:99:6a:71:bf:29:c7:e7:
         5b:e3:91:bb:b8:9a:2d:42:7d:17:9c:9d:b6:66:20:7f:aa:6c:
         4f:73:e8:e7:5d:b4:7a:8d:25:53:d3:33:55:ff:8b:90:63:e1:
         07:27:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org