Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32332d3233203d3e20323633343231.roa
File:                     3136382e3139352e3232302e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          4CVKf6fYNBthcSR7LKL+BgDOQp8dZDYCRblVHSL5tU0=
Subject key identifier:   F8:5C:35:37:20:65:9A:2E:45:9A:1B:25:9F:7C:81:07:5F:95:0B:AB
Certificate issuer:       /CN=A0FF9A83436226FF19D020B34271420BD55D7D05
Certificate serial:       30051DBF1BEFD8A072EDD34F751C7D2D12FC0941
Authority key identifier: A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32332d3233203d3e20323633343231.roa
Signing time:             Thu 25 Jul 2024 01:01:28 +0000
ROA not before:           Thu 25 Jul 2024 00:56:28 +0000
ROA not after:            Thu 24 Jul 2025 01:01:28 +0000
asID:                     263421
IP address blocks:        168.195.220.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:05:1d:bf:1b:ef:d8:a0:72:ed:d3:4f:75:1c:7d:2d:12:fc:09:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0FF9A83436226FF19D020B34271420BD55D7D05
        Validity
            Not Before: Jul 25 00:56:28 2024 GMT
            Not After : Jul 24 01:01:28 2025 GMT
        Subject: CN=F85C353720659A2E459A1B259F7C81075F950BAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:b4:0a:47:26:7c:a8:1f:5a:1e:0d:31:81:
                    eb:73:03:23:95:3c:f4:2f:6a:ea:5b:eb:05:66:3e:
                    53:48:17:ac:ea:22:a8:96:5f:c1:ab:8a:6e:a2:af:
                    23:2e:2b:1f:cd:b9:a0:0e:55:8d:e7:0c:c7:6d:25:
                    cf:8e:6a:74:97:0f:04:4a:08:0e:3e:44:d1:7d:9f:
                    af:d3:1a:a1:71:f0:5d:63:5e:51:3b:74:1e:84:69:
                    01:9a:de:bb:08:f5:05:37:5b:b7:80:55:27:56:1d:
                    f8:a5:88:e6:a7:d4:da:3a:17:dc:ce:db:2b:3e:d3:
                    82:cb:2f:ce:7b:41:b9:00:0d:89:0f:6b:44:30:cf:
                    43:39:50:16:7a:1a:0a:e6:62:ad:59:bb:37:7b:45:
                    4a:75:03:91:33:1f:5b:e7:a7:f8:62:90:02:99:02:
                    0f:62:c7:1d:06:a2:82:b1:a5:54:14:1a:bf:03:f8:
                    03:c8:00:55:1c:b0:35:40:d9:9a:ad:53:d8:80:ed:
                    84:5c:f3:65:94:72:94:23:83:3a:4e:97:8f:19:e3:
                    1a:0b:42:96:9a:93:d9:78:1d:24:e1:3a:5a:68:91:
                    82:e8:19:16:c2:e5:bb:b4:ec:86:0d:c9:58:a9:a7:
                    cc:9a:e8:69:ec:e6:fb:09:b7:47:35:ff:57:9d:45:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:35:37:20:65:9A:2E:45:9A:1B:25:9F:7C:81:07:5F:95:0B:AB
            X509v3 Authority Key Identifier:
                keyid:A0:FF:9A:83:43:62:26:FF:19:D0:20:B3:42:71:42:0B:D5:5D:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/A0FF9A83436226FF19D020B34271420BD55D7D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0FF9A83436226FF19D020B34271420BD55D7D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/3136382e3139352e3232302e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:7b:c6:ca:c5:ba:74:9e:ec:5f:3f:2b:8e:77:2a:b7:90:
         d2:be:35:2e:72:be:05:60:9c:91:0d:b2:6a:a3:69:cd:a8:14:
         a1:f1:e2:de:27:3c:bf:5a:71:64:31:e6:27:1b:8c:9e:16:46:
         17:be:a9:42:03:b2:0f:f9:85:e6:c0:ea:31:74:0e:19:fb:5f:
         70:08:82:2a:bc:ae:b9:74:1f:75:32:0f:f2:df:a3:ca:49:90:
         60:1e:39:24:be:bc:3e:df:80:88:75:fd:8a:d2:cd:61:7c:1b:
         1f:65:90:d0:07:f3:ff:3c:01:75:4d:6a:d7:d5:0d:02:de:87:
         f6:13:64:19:10:5c:dc:86:1a:74:01:dc:34:20:36:af:38:e8:
         45:26:f6:dd:9c:1c:a3:5f:6b:4a:f1:78:55:79:4b:e0:31:d7:
         62:27:c1:8e:e4:60:92:9b:45:ec:d5:d3:89:29:e3:1a:3e:03:
         94:d9:71:e6:36:f4:fc:ec:b8:4a:7b:80:30:9b:56:7f:7f:0c:
         f6:7c:23:f2:6e:2a:ef:a8:41:ee:b5:46:20:a8:f0:81:e0:a3:
         1a:8c:ee:f8:68:73:2a:6b:e1:ac:cf:aa:f5:d5:0f:59:54:a0:
         be:d6:fa:60:0d:fa:4b:27:bb:99:7a:40:f4:2e:8a:6f:24:ae:
         0d:11:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 04:47:30 2024 by rpki-client on console-fra.rpki-client.org