Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32322d3332203d3e20323636313937.roa
File:                     3136302e32302e3136302e302f32322d3332203d3e20323636313937.roa (raw, json)
Hash identifier:          C0ZTGo2Nq3rLNzlmJDyxgevjQy03dRDpCMx9+Piz+y8=
Subject key identifier:   EA:10:61:57:07:86:40:1E:30:A7:1E:C6:F7:11:C5:57:4C:07:6E:3E
Certificate issuer:       /CN=DD6B559C36EA68FC1C6505F2424BA4086A7AD662
Certificate serial:       4643A00F89BFDC0FF92CD3B237D0F028FF11026A
Authority key identifier: DD:6B:55:9C:36:EA:68:FC:1C:65:05:F2:42:4B:A4:08:6A:7A:D6:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32322d3332203d3e20323636313937.roa
Signing time:             Fri 20 Sep 2024 18:20:13 +0000
ROA not before:           Fri 20 Sep 2024 18:15:13 +0000
ROA not after:            Fri 19 Sep 2025 18:20:13 +0000
asID:                     266197
IP address blocks:        160.20.160.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:a0:0f:89:bf:dc:0f:f9:2c:d3:b2:37:d0:f0:28:ff:11:02:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD6B559C36EA68FC1C6505F2424BA4086A7AD662
        Validity
            Not Before: Sep 20 18:15:13 2024 GMT
            Not After : Sep 19 18:20:13 2025 GMT
        Subject: CN=EA1061570786401E30A71EC6F711C5574C076E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:fb:96:36:b3:c6:13:25:db:a2:d2:9c:db:
                    ea:c9:03:b4:4d:45:ed:df:00:d1:50:f6:1b:97:4e:
                    19:3d:6d:45:15:d8:df:06:84:2a:fe:04:8a:95:d8:
                    8e:1e:c6:5a:78:c3:fb:0a:76:c8:db:78:39:18:1c:
                    0f:ab:80:aa:03:22:6b:c0:39:cf:fe:33:92:98:4d:
                    70:86:db:7e:4d:82:f1:95:d2:76:06:7d:f5:51:4e:
                    16:63:53:6b:3a:be:4c:81:d4:05:ed:b0:b5:80:47:
                    a5:f4:74:ea:97:1c:b4:20:00:0c:2e:24:65:60:3c:
                    cd:f7:33:e3:fc:c9:2f:e2:95:54:44:9d:7c:31:eb:
                    f3:3f:31:8a:5e:ff:7e:ca:3e:83:d3:ee:81:1b:7b:
                    38:bb:19:92:ce:3f:8e:83:45:40:54:e2:55:64:7a:
                    c5:95:bd:62:97:65:95:3b:c5:9c:8c:2f:d6:3c:61:
                    60:dd:68:59:c4:4b:37:36:09:82:c9:6d:f9:30:f3:
                    1b:bc:d5:d9:e6:b8:7d:b0:1a:d0:ee:c5:f2:86:ef:
                    30:a0:40:87:b7:11:66:51:8f:7c:43:5a:ba:20:45:
                    93:fe:e5:75:ca:13:1e:af:a4:45:55:bf:0d:15:43:
                    bc:06:e1:51:fb:e8:43:27:c3:30:64:ff:be:5a:86:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:61:57:07:86:40:1E:30:A7:1E:C6:F7:11:C5:57:4C:07:6E:3E
            X509v3 Authority Key Identifier:
                keyid:DD:6B:55:9C:36:EA:68:FC:1C:65:05:F2:42:4B:A4:08:6A:7A:D6:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B559C36EA68FC1C6505F2424BA4086A7AD662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32322d3332203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:22:50:41:ab:47:34:f3:31:34:49:83:ca:ab:25:9a:8e:
         a0:c7:48:08:22:cf:83:38:e2:35:ed:85:6e:27:51:23:a7:72:
         3d:ef:8c:0c:f0:9f:6e:30:1e:c1:c0:b6:d3:0a:fb:d1:cc:b5:
         65:fe:b6:aa:aa:28:78:1a:03:db:d2:57:81:a6:9c:06:31:19:
         7d:c2:0f:56:21:d5:f5:d1:2b:0a:0d:ee:3e:94:58:d6:4c:6b:
         1d:75:a7:48:4a:54:9b:37:2a:75:e6:c8:d4:06:6f:48:35:33:
         1d:2d:87:3a:a5:fa:81:89:73:25:44:d7:90:e9:fd:69:9f:f9:
         6d:dd:e6:a4:19:50:10:35:90:62:2f:c0:09:b5:77:ad:c3:8e:
         33:a7:96:33:35:6e:63:8c:92:14:c2:d9:cd:0d:13:27:02:fa:
         6b:4e:a1:a0:ec:74:bc:56:50:bd:45:c4:5a:0e:8d:28:79:d7:
         51:07:e2:27:58:45:d9:d3:0f:72:52:8a:df:10:c9:2e:3c:1f:
         8b:56:22:9c:c5:b6:28:78:81:46:69:ea:ed:12:08:79:4f:53:
         0f:c7:51:5a:0e:75:38:1e:30:2e:8b:0b:6e:a9:68:33:aa:af:
         fc:bb:41:e6:ff:75:da:23:07:68:c7:60:33:d0:b8:55:41:cc:
         52:33:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 22:32:25 2024 by rpki-client on console-fra.rpki-client.org