Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa
File:                     3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa (raw, json)
Hash identifier:          t+7lCWyhXIvzz1/msBBMbYHfPZttkrD4AiIGWdhtN/8=
Subject key identifier:   75:06:D0:4F:03:36:48:0B:2B:98:9C:55:6B:2B:18:21:EF:B8:A3:54
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       612ABDDBE7470833C66CE99519CCE4113E1AFF7B
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:56 +0000
ROA not before:           Thu 04 Apr 2024 08:37:56 +0000
ROA not after:            Thu 03 Apr 2025 08:42:56 +0000
asID:                     271134
IP address blocks:        167.249.90.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2a:bd:db:e7:47:08:33:c6:6c:e9:95:19:cc:e4:11:3e:1a:ff:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:56 2024 GMT
            Not After : Apr  3 08:42:56 2025 GMT
        Subject: CN=7506D04F0336480B2B989C556B2B1821EFB8A354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:a2:49:9f:be:a6:1c:27:ae:ba:f9:7e:5e:
                    65:1d:cc:42:29:9d:95:19:ce:cb:b5:8f:ae:b8:7c:
                    d8:26:34:6f:b3:ab:67:09:4d:b1:cf:40:de:83:ce:
                    02:89:fc:3e:85:a7:bd:8b:a4:85:0c:09:de:f2:6b:
                    70:77:76:b2:db:bd:be:e7:44:9e:3e:65:de:08:40:
                    8b:54:08:bd:c5:b2:85:63:67:bc:c2:c4:bc:b5:ae:
                    75:2a:0f:91:19:00:1a:42:bd:60:e7:3e:b2:06:05:
                    72:75:10:fc:80:fe:72:63:2a:2d:28:69:87:b8:e4:
                    88:52:d9:ac:44:49:31:91:52:0f:e2:e3:8b:49:0c:
                    f0:5b:a7:c6:0a:de:8a:5c:c9:b4:12:a9:92:20:40:
                    94:a6:a6:69:86:8c:b8:57:8d:41:e1:a2:9e:de:4a:
                    4e:d7:e6:6c:71:d4:06:49:10:34:94:50:6b:70:8f:
                    6b:bd:36:1a:3d:9b:48:4f:75:93:91:90:83:39:dc:
                    38:6e:3c:0b:74:d2:ab:34:ae:99:20:4e:3b:dc:d9:
                    52:f5:2e:ef:9a:a8:ad:90:f6:83:be:6c:be:4e:0a:
                    c1:44:fa:f7:10:d2:9d:48:52:7f:8d:30:81:3e:2a:
                    c3:c4:df:2f:31:61:77:30:42:f0:f2:87:24:c5:5e:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:D0:4F:03:36:48:0B:2B:98:9C:55:6B:2B:18:21:EF:B8:A3:54
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39302e302f32332d3233203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:8d:1a:19:9e:ad:87:3d:f0:72:01:f8:d9:41:47:d1:97:c5:
         ac:a5:78:1c:df:71:40:8f:5a:92:70:67:1d:16:87:f0:50:6e:
         93:14:f4:50:92:ae:4b:ce:a4:59:f1:6e:66:b6:15:4e:94:e2:
         34:25:7a:05:65:84:b3:e3:fe:e6:a5:57:11:6c:8c:32:cc:eb:
         24:3e:35:93:42:5d:bb:d6:88:fa:44:54:66:db:55:75:9a:eb:
         69:8f:b1:bc:dc:6a:69:97:50:9a:e5:26:d5:2c:a3:3a:68:23:
         06:31:e0:e2:fe:dc:b1:a9:0f:36:89:6f:00:5b:c2:07:ed:0b:
         0e:18:75:35:d3:af:3f:cd:91:37:a9:cf:ab:bb:d6:01:08:3c:
         f7:70:2f:ce:09:ef:b0:85:bd:54:26:a9:1f:26:17:d0:52:28:
         59:17:6a:8f:59:a9:d5:e5:51:59:c2:2d:75:c5:f2:14:91:4f:
         7f:63:cf:7d:5d:9d:50:a3:63:93:4d:47:9e:db:ea:55:cf:dd:
         da:57:14:43:5f:bc:0d:22:6a:30:c3:be:81:d9:db:6c:2f:d7:
         98:58:5e:59:0e:4a:7c:cb:ee:3d:8d:b0:08:3b:b3:08:25:94:
         48:ae:3f:33:05:4f:66:43:3c:b6:d5:88:48:76:c0:a2:5d:5e:
         b3:1a:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org