Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39302e302f32342d3234203d3e20323731313334.roa
File:                     3136372e3234392e39302e302f32342d3234203d3e20323731313334.roa (raw, json)
Hash identifier:          88ouAXtSvNIF3SxjU0jWV7QlekTtGbjueh9+5Qp8luc=
Subject key identifier:   FF:58:0E:48:E3:93:2A:5E:20:83:13:DF:A4:58:B5:67:CF:3C:67:86
Certificate issuer:       /CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
Certificate serial:       09AC4E1696EA160E81926036AF87B2B3B7158364
Authority key identifier: E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39302e302f32342d3234203d3e20323731313334.roa
Signing time:             Thu 04 Apr 2024 08:42:57 +0000
ROA not before:           Thu 04 Apr 2024 08:37:57 +0000
ROA not after:            Thu 03 Apr 2025 08:42:57 +0000
asID:                     271134
IP address blocks:        167.249.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ac:4e:16:96:ea:16:0e:81:92:60:36:af:87:b2:b3:b7:15:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19214E5CCA9EB0ED78183894DBE463913F7272A
        Validity
            Not Before: Apr  4 08:37:57 2024 GMT
            Not After : Apr  3 08:42:57 2025 GMT
        Subject: CN=FF580E48E3932A5E208313DFA458B567CF3C6786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:4c:6f:16:89:a0:46:cb:5c:6a:fd:b8:c3:
                    c6:94:a2:71:d4:66:7a:3a:53:8e:69:e9:b2:0d:86:
                    1d:61:70:45:e4:12:10:36:4c:a5:e6:c5:2d:16:b2:
                    6a:ed:33:a9:0d:a3:f4:dd:ce:d6:91:65:2e:6a:31:
                    75:d7:58:aa:9f:bb:f8:76:64:f0:eb:6b:ca:fa:c2:
                    9c:bc:d6:1f:3e:54:e6:08:9f:25:50:49:db:8f:88:
                    8c:6e:a9:1b:b8:11:ae:87:12:67:82:fe:40:6d:02:
                    f6:06:cc:c9:2f:8e:3b:a2:79:cf:5e:8e:d3:21:e5:
                    42:d7:05:8f:de:8f:8b:a9:ee:e5:d6:22:83:ac:41:
                    b6:9d:e1:95:b7:d9:07:aa:2f:ef:8c:f9:ae:0d:db:
                    91:98:d7:60:48:66:ae:6e:2a:6b:9c:d8:b3:ea:5e:
                    ca:c1:38:21:09:f0:9b:32:39:ec:26:8e:0d:01:1a:
                    cc:98:db:21:6e:a7:b7:45:0b:5a:6c:a6:5c:77:da:
                    e5:ea:06:ab:89:59:47:4c:94:a7:bb:40:c7:40:da:
                    9b:be:06:90:66:9b:31:9d:19:02:3f:9a:6e:75:18:
                    16:26:0a:ef:d8:64:d8:6d:e2:16:8b:4c:d5:07:18:
                    6e:18:35:4d:a6:81:10:68:69:10:5a:5e:86:f1:33:
                    ab:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:58:0E:48:E3:93:2A:5E:20:83:13:DF:A4:58:B5:67:CF:3C:67:86
            X509v3 Authority Key Identifier:
                keyid:E1:92:14:E5:CC:A9:EB:0E:D7:81:83:89:4D:BE:46:39:13:F7:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19214E5CCA9EB0ED78183894DBE463913F7272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/1/3136372e3234392e39302e302f32342d3234203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:38:4a:87:d8:8f:5d:e5:95:29:a1:5b:a0:e5:bf:92:cd:6b:
         68:19:28:02:21:22:78:69:52:21:0b:1f:47:64:9b:a5:25:93:
         aa:d6:97:f9:aa:bf:89:2c:1c:68:51:6a:78:60:c6:30:f8:28:
         af:e4:f1:f3:a1:08:83:4a:7a:db:3d:87:ef:ef:44:7c:d6:41:
         0d:56:4d:e3:17:63:71:d5:d8:0d:50:d4:36:4b:eb:25:7d:1f:
         4f:ca:df:da:fa:7e:77:0a:d1:3d:1e:f5:a9:8f:55:f4:2e:66:
         13:86:45:c0:ac:fc:8f:12:9a:6e:e9:30:b9:17:38:e6:20:e2:
         fe:e7:3b:3a:31:b8:4a:f9:63:9c:f2:59:aa:15:6d:06:71:bd:
         ef:3d:ae:ec:23:27:c2:e5:9c:30:78:47:0a:d4:b0:6e:3d:9a:
         e5:13:f9:c2:39:e4:6d:a4:5e:e0:dc:07:ee:85:8c:64:91:a8:
         65:da:7d:b4:4f:ed:11:ef:ac:76:d1:05:53:05:ab:3f:ab:63:
         4c:a1:a2:9c:8c:c5:dc:87:34:07:15:11:a2:2d:e0:e3:c9:46:
         2d:ea:24:0a:83:5c:35:27:48:22:24:ed:b6:cb:9d:9b:aa:0c:
         b9:95:a4:18:6e:34:eb:5f:79:a8:ab:6e:a1:d4:40:03:91:ff:
         d7:90:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org