Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa
File:                     3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa (raw, json)
Hash identifier:          U/GuriMeUKTD6y2gjGii1vW6Exi+073tF6yFxrd6tzg=
Subject key identifier:   38:3A:30:6E:B6:4B:B3:37:D6:7D:7B:46:15:5D:A8:A8:27:9D:51:34
Certificate issuer:       /CN=B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440
Certificate serial:       029C3EFEE1AE0C65740FEB01B261DACDDDA75C79
Authority key identifier: B4:1F:36:8E:1E:39:1C:8B:1F:C0:4F:D1:A1:0F:BB:0B:0B:43:D4:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa
Signing time:             Wed 15 May 2024 19:16:28 +0000
ROA not before:           Wed 15 May 2024 19:11:28 +0000
ROA not after:            Wed 14 May 2025 19:16:28 +0000
asID:                     265300
IP address blocks:        168.121.68.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9c:3e:fe:e1:ae:0c:65:74:0f:eb:01:b2:61:da:cd:dd:a7:5c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440
        Validity
            Not Before: May 15 19:11:28 2024 GMT
            Not After : May 14 19:16:28 2025 GMT
        Subject: CN=383A306EB64BB337D67D7B46155DA8A8279D5134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:2b:f4:94:07:51:5e:4d:51:c1:98:84:0d:
                    2d:46:0c:66:d7:78:df:8a:34:bf:28:29:51:0a:ed:
                    27:54:02:a3:20:1d:a2:8d:98:53:f0:e1:d3:10:dc:
                    e3:07:9b:c4:c1:3c:11:55:be:92:5f:56:f0:9d:19:
                    26:70:41:de:bd:bb:e2:c5:a1:41:60:b5:d6:b2:ba:
                    f2:d9:85:1a:4f:ab:8a:43:8a:c2:bf:30:df:5a:ab:
                    44:ce:45:b4:49:46:c2:8e:bc:68:f8:48:3b:2d:c4:
                    d9:0d:85:f3:07:d3:44:70:65:b2:10:f7:0b:5e:c1:
                    1f:3a:96:ba:10:98:6f:7d:4d:40:4e:86:df:b7:a8:
                    b0:31:fd:7a:1f:ae:cf:8d:74:29:9b:a4:df:ce:9f:
                    ee:ef:a3:0a:cf:97:d5:60:d7:d0:3f:6e:06:78:94:
                    52:27:a9:5e:cb:f1:77:1e:35:0e:97:a5:84:05:dd:
                    f3:c6:6f:62:d8:d6:f4:4b:e3:d7:8b:25:a7:e0:3b:
                    67:97:fe:46:13:e8:3d:1e:67:ea:2b:24:42:a5:e6:
                    f5:5e:d4:5c:6a:1b:64:37:27:15:ca:e0:a5:3c:31:
                    0b:f6:6f:e1:bc:2f:38:8e:5c:46:91:e7:46:79:24:
                    38:0f:ae:ed:5a:b8:e8:58:71:93:a4:b7:02:b7:26:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3A:30:6E:B6:4B:B3:37:D6:7D:7B:46:15:5D:A8:A8:27:9D:51:34
            X509v3 Authority Key Identifier:
                keyid:B4:1F:36:8E:1E:39:1C:8B:1F:C0:4F:D1:A1:0F:BB:0B:0B:43:D4:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B41F368E1E391C8B1FC04FD1A10FBB0B0B43D440.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3136382e3132312e36382e302f32322d3234203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:5c:ba:5a:b1:a9:44:ee:6c:e8:73:e0:a3:c9:b2:04:e4:
         c9:a3:9e:1b:89:94:6d:ee:2a:f5:df:f9:c4:d7:73:3f:9b:92:
         9e:2f:01:71:1e:68:d5:4a:2a:63:ce:73:01:04:bd:f6:9d:21:
         7c:1c:a3:40:7b:8b:dc:34:80:cc:a2:24:43:77:e2:5d:b4:a4:
         14:23:36:45:4b:86:cb:3e:21:4a:ee:e4:a6:00:9b:79:fd:63:
         e7:fd:07:17:66:8b:83:b3:dc:66:18:f0:cd:9b:24:c7:9f:f7:
         6b:e5:9a:e6:92:fd:34:1b:6f:4e:7f:4e:33:e0:c8:93:21:10:
         a9:1e:bc:9d:81:1f:af:8f:fa:aa:6c:e4:ba:c9:f4:bf:27:27:
         5d:ca:7f:c5:61:a0:67:ee:3a:77:42:68:54:ab:7e:53:41:a6:
         de:71:a8:3a:cb:c5:8d:7b:3f:93:f4:b3:2f:e2:75:b1:6f:28:
         b1:6b:df:77:21:9d:61:19:3b:5a:87:9e:d6:91:c3:c4:4b:f7:
         7d:d6:ac:d5:72:72:b7:b6:78:51:90:a7:f7:09:b6:42:cb:b8:
         97:30:38:0a:fa:81:2d:a3:03:a5:9c:be:52:9b:94:2f:8c:24:
         0e:60:f9:94:fd:9b:09:5c:2e:74:9b:b8:ed:0a:2b:67:56:ef:
         23:91:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 17:58:21 2024 by rpki-client on console-fra.rpki-client.org