Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3136382e3132312e3135382e302f32332d3233203d3e20323633343231.roa
File:                     3136382e3132312e3135382e302f32332d3233203d3e20323633343231.roa (raw, json)
Hash identifier:          eCn3qDQNZ+eW1Lr29VeCAxvz26tcpvpt1UmZSDa/8yY=
Subject key identifier:   F7:4E:3E:2A:4C:A9:E0:1E:A1:87:58:5C:0B:BB:F3:EC:E1:E6:52:7C
Certificate issuer:       /CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
Certificate serial:       011F9D9D64D8B039FD1862A61B9096F9D6799CA3
Authority key identifier: 0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3136382e3132312e3135382e302f32332d3233203d3e20323633343231.roa
Signing time:             Thu 04 Apr 2024 07:44:47 +0000
ROA not before:           Thu 04 Apr 2024 07:39:47 +0000
ROA not after:            Thu 03 Apr 2025 07:44:47 +0000
asID:                     263421
IP address blocks:        168.121.158.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1f:9d:9d:64:d8:b0:39:fd:18:62:a6:1b:90:96:f9:d6:79:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AA8D7B646E946A90F6891011A6A1CFAB6056A95
        Validity
            Not Before: Apr  4 07:39:47 2024 GMT
            Not After : Apr  3 07:44:47 2025 GMT
        Subject: CN=F74E3E2A4CA9E01EA187585C0BBBF3ECE1E6527C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:69:03:8d:3a:20:33:f9:8b:6f:56:e4:ee:
                    30:40:f6:a6:3e:1b:30:48:1c:a9:12:22:e6:aa:d8:
                    ca:99:12:d2:f3:53:a7:a9:52:78:52:1d:50:52:8b:
                    b3:1a:93:5e:77:b2:b5:c1:04:fa:a0:60:30:f4:9a:
                    34:14:96:42:02:12:fd:3a:86:4a:07:b3:c1:82:d5:
                    ea:c9:22:1a:7d:7b:4a:ac:f2:a2:98:db:48:94:22:
                    2b:09:af:3b:d9:62:da:d4:32:00:a8:a3:01:2f:23:
                    d5:d6:6d:ea:67:9c:93:c0:ab:b8:a3:62:22:63:e5:
                    28:f2:c3:96:14:c7:f9:80:95:2f:c8:76:43:6d:d2:
                    a5:5e:cb:62:89:e0:ce:6e:2b:35:26:06:e6:72:c6:
                    8d:f6:76:a8:33:87:2a:76:c4:a1:e5:c8:68:f2:6f:
                    ed:97:79:4a:d3:14:43:dc:7d:53:0a:b6:c8:8d:d0:
                    a2:6f:7d:62:b0:d7:04:d1:64:3a:84:10:a0:e7:b0:
                    33:e3:09:6f:8d:c0:e4:f6:dc:e9:eb:ce:6b:a6:c1:
                    37:ce:27:4d:e3:40:55:d9:fb:7c:82:89:cf:01:f7:
                    71:44:d1:a2:ae:57:ec:1e:af:af:af:ee:ce:1b:15:
                    8b:7e:14:4f:56:f9:4c:29:39:75:f6:c1:fe:0c:dd:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4E:3E:2A:4C:A9:E0:1E:A1:87:58:5C:0B:BB:F3:EC:E1:E6:52:7C
            X509v3 Authority Key Identifier:
                keyid:0A:A8:D7:B6:46:E9:46:A9:0F:68:91:01:1A:6A:1C:FA:B6:05:6A:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AA8D7B646E946A90F6891011A6A1CFAB6056A95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/1/3136382e3132312e3135382e302f32332d3233203d3e20323633343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:55:51:45:0a:fe:cc:83:cc:e1:85:99:99:74:e1:df:0e:31:
         5c:8d:72:fd:13:3d:0f:fb:18:b5:99:1e:d8:4a:36:fe:3e:1b:
         9a:81:48:63:e9:6b:d3:b2:8b:e0:ca:92:be:51:f4:1f:5e:a5:
         5a:b2:2e:e0:a9:e2:3e:4e:eb:76:b2:e9:25:d1:c7:07:05:8c:
         67:ed:4f:90:27:cf:b7:74:90:78:e7:e3:ef:10:a8:c9:97:7a:
         c6:71:89:50:cd:ad:dd:aa:52:ff:54:ec:87:ae:ca:87:24:77:
         14:64:08:88:c5:4a:93:b0:1e:07:3a:9d:d6:66:0b:a9:1b:34:
         c8:70:fc:a2:fb:e1:8c:d9:30:58:67:f1:5b:a8:f4:e4:b4:97:
         16:19:1b:de:09:00:ff:41:11:23:6f:c6:db:52:95:2d:65:08:
         b7:37:21:b4:4e:20:b5:80:a9:66:79:e0:bd:4a:1e:a0:e3:2d:
         04:0e:16:b4:68:74:40:bc:75:ad:87:7a:65:9f:2d:d2:a6:68:
         14:5c:4c:8c:98:4b:eb:55:01:be:8c:5f:e1:4a:09:d5:06:cd:
         1f:e2:9b:46:66:c1:0e:37:6d:c2:ce:d9:a9:4c:8f:72:72:89:
         ae:a1:8c:bf:a9:bb:12:0c:4b:65:15:c9:9d:86:03:05:85:f5:
         ba:11:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 19:03:06 2024 by rpki-client on console-fra.rpki-client.org