Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/3136382e3138312e36302e302f32322d3332203d3e20323635333330.roa
File:                     3136382e3138312e36302e302f32322d3332203d3e20323635333330.roa (raw, json)
Hash identifier:          dIHO0/X/Y5VnIKo+N6HPm3hBLzyt63dxdiQVKDWEOVY=
Subject key identifier:   F7:59:CD:58:89:A0:2C:AE:57:84:DC:C9:1B:CA:B3:E3:C8:07:63:6F
Certificate issuer:       /CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
Certificate serial:       4CA9FD9532D9150BB55CD13A635F1285D18A7D5C
Authority key identifier: 2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/3136382e3138312e36302e302f32322d3332203d3e20323635333330.roa
Signing time:             Mon 07 Oct 2024 02:44:41 +0000
ROA not before:           Mon 07 Oct 2024 02:39:41 +0000
ROA not after:            Mon 06 Oct 2025 02:44:41 +0000
asID:                     265330
IP address blocks:        168.181.60.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a9:fd:95:32:d9:15:0b:b5:5c:d1:3a:63:5f:12:85:d1:8a:7d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2
        Validity
            Not Before: Oct  7 02:39:41 2024 GMT
            Not After : Oct  6 02:44:41 2025 GMT
        Subject: CN=F759CD5889A02CAE5784DCC91BCAB3E3C807636F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:67:a5:ad:74:44:62:e7:05:dd:4f:09:fc:
                    ae:82:71:39:69:4b:66:06:83:10:fa:a0:40:82:c1:
                    aa:cd:1d:b6:ec:56:29:e7:03:9e:cc:70:6f:cc:c0:
                    8f:cd:39:50:43:d1:f3:be:ef:22:22:5e:4f:ff:0b:
                    77:3b:6e:1d:19:b7:91:6f:a2:48:b1:f2:a4:7d:86:
                    01:25:79:f6:22:d2:d4:ea:0d:76:7a:8f:e0:98:ad:
                    7f:53:b2:8d:93:87:00:9f:a8:55:e4:0a:f6:1f:6d:
                    6f:41:5e:12:26:66:a6:3d:16:39:53:ad:26:5f:d5:
                    fb:28:96:7a:92:80:56:ea:c9:32:96:f5:f3:2d:66:
                    4a:fd:e0:d4:03:cb:cd:cd:e0:53:f9:94:00:6a:64:
                    38:5f:35:91:fe:c7:62:7f:42:c1:21:2c:65:19:29:
                    fc:66:69:a3:2a:11:16:41:f2:83:cb:48:cb:f2:11:
                    ea:e8:a4:86:6f:51:0b:3e:e5:3d:83:26:9a:15:50:
                    3e:79:7a:36:9b:b0:c3:bd:fd:b0:9b:39:74:fe:86:
                    1f:7c:d6:c0:49:f3:8e:ce:8c:a6:61:b1:03:2c:12:
                    69:22:03:65:f9:f6:76:17:27:eb:46:f7:9e:be:e7:
                    78:0c:b4:d0:d9:7d:1a:b0:9e:af:f3:9c:d1:a3:91:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:CD:58:89:A0:2C:AE:57:84:DC:C9:1B:CA:B3:E3:C8:07:63:6F
            X509v3 Authority Key Identifier:
                keyid:2D:C0:0B:D8:E4:49:D5:C4:8C:9E:93:44:1D:48:BC:93:72:BC:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC00BD8E449D5C48C9E93441D48BC9372BC9DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/3136382e3138312e36302e302f32322d3332203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:06:2f:2f:e3:d8:f5:8a:7e:c7:5c:3b:87:af:55:0b:a7:
         1e:d4:c4:6b:ea:5a:8c:21:74:35:ce:21:44:c7:5e:35:4b:ae:
         8a:0d:41:36:92:62:d8:23:6f:73:26:29:04:48:48:c0:47:9d:
         01:1a:db:5b:9f:03:8a:2c:0c:3b:80:29:0b:db:ac:11:d0:7a:
         0a:fa:4b:ed:6e:76:68:d0:db:22:10:f9:22:5c:3d:c6:b8:e9:
         86:88:76:19:d4:94:ca:c3:d6:b8:c2:66:0f:69:b1:f0:87:d8:
         52:0a:16:28:54:ee:26:60:16:40:ae:c7:40:2c:6b:d2:8c:5e:
         49:6f:7c:c7:6e:16:aa:02:4d:cd:be:ea:d4:0f:9a:5c:bd:f6:
         91:d2:d9:42:bd:30:0a:e9:87:80:3f:7b:9c:54:42:43:b2:af:
         5e:f9:90:63:03:5a:9e:71:3d:37:74:49:87:21:d8:83:39:6b:
         b3:0b:ca:4d:bb:3e:9e:d3:70:05:05:fe:54:d9:60:91:46:5f:
         2e:bc:f7:05:c9:79:09:16:f8:d1:74:18:a4:8c:1d:f8:60:44:
         74:1d:75:4d:fc:bb:aa:0c:2b:23:65:9e:19:a2:0a:43:0d:62:
         94:87:fe:20:f7:a0:4d:76:52:b8:17:08:a1:8f:1f:28:1c:13:
         95:c6:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 20:42:47 2024 by rpki-client on console-ams.rpki-client.org