Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa
File:                     3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa (raw, json)
Hash identifier:          vqR0ZtAwrGuXPiRM70+n9Eh79ByhyucFVdEDZ1YHvIY=
Subject key identifier:   35:39:5A:E0:34:8C:28:3C:8D:BE:84:20:7E:A6:61:37:F0:E8:02:49
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       5C231C708FF2B9C22282D8C61714FA64E7276DBD
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa
Signing time:             Mon 06 May 2024 14:46:12 +0000
ROA not before:           Mon 06 May 2024 14:41:12 +0000
ROA not after:            Mon 05 May 2025 14:46:12 +0000
asID:                     265979
IP address blocks:        164.163.252.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:1c:70:8f:f2:b9:c2:22:82:d8:c6:17:14:fa:64:e7:27:6d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: May  6 14:41:12 2024 GMT
            Not After : May  5 14:46:12 2025 GMT
        Subject: CN=35395AE0348C283C8DBE84207EA66137F0E80249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:e0:83:78:f6:b1:33:36:9b:1f:d4:21:43:
                    40:c5:bb:08:eb:4e:8a:e5:46:c2:e8:c3:3f:6b:ed:
                    f2:7a:89:45:15:47:2b:2f:8c:a9:91:d5:eb:7d:b1:
                    cd:7d:61:e2:eb:41:ba:fe:65:db:47:81:ab:cc:f9:
                    92:f1:84:03:ff:71:0c:e2:41:19:45:0c:8b:ac:2a:
                    7a:53:ea:d9:dc:4d:97:f2:c0:15:35:33:0b:a6:fb:
                    c7:f1:e7:c0:98:55:79:54:db:1e:ab:48:81:e9:05:
                    f4:cf:40:d6:61:33:67:a1:21:f6:6e:a1:25:73:a3:
                    d3:e2:21:06:1c:d8:0a:fa:1b:8e:63:77:1e:e8:b0:
                    73:31:52:f0:5f:61:1f:b0:37:cd:bb:c9:5d:ac:08:
                    1b:43:4f:ad:ee:e7:1f:8e:70:49:84:7e:53:74:3f:
                    55:24:e2:9e:81:b0:d8:52:eb:bf:57:0c:61:ae:ff:
                    2b:3f:d4:8a:1b:88:b7:62:23:02:7a:d1:a0:67:2c:
                    92:f5:f2:7e:ca:2f:c8:b1:2a:97:32:88:a7:31:2e:
                    71:d4:2b:4b:d8:06:12:50:90:c7:0e:c7:a1:d1:f1:
                    a0:a2:c3:29:4a:b7:93:8e:3b:f4:16:2b:7f:b3:cd:
                    08:fb:11:95:7f:74:29:80:2b:09:9e:f1:df:86:1d:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:5A:E0:34:8C:28:3C:8D:BE:84:20:7E:A6:61:37:F0:E8:02:49
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:97:0d:57:79:13:bc:95:87:f8:c4:3a:e8:28:2c:e7:07:c3:
         be:37:eb:64:69:c7:70:e4:20:af:de:58:0c:aa:1a:f0:79:12:
         61:ec:88:ef:e4:b3:bd:9b:3b:43:8e:40:ba:28:03:bf:51:ce:
         c7:f9:52:41:39:6e:a6:db:b9:61:d2:56:3d:64:b6:d8:7e:bc:
         2e:a7:64:21:c0:47:ca:91:8e:62:d0:ca:d4:2e:b7:c8:00:61:
         7f:62:d5:eb:90:ed:93:68:f5:d0:a8:68:a7:a2:e5:64:25:3a:
         bd:f4:01:8e:5b:ae:b6:63:d6:6e:63:fe:bb:b2:dc:65:10:e3:
         a7:84:91:e4:38:94:f8:6e:11:74:df:96:ac:51:27:6d:7d:dc:
         0e:59:b1:82:bf:ed:2e:19:30:69:c2:75:76:e3:3c:10:0d:e9:
         55:ee:71:38:76:8b:0c:4b:30:59:a9:b4:93:73:08:1d:f9:ff:
         1f:11:ef:14:cb:de:fd:3c:65:79:75:5a:31:52:f2:61:ce:c1:
         88:a9:21:5d:d7:5c:9c:41:19:cb:90:9e:e1:7b:a9:96:3e:72:
         f7:a8:e3:b5:f9:75:35:71:86:16:6e:c4:95:8b:20:6b:73:fa:
         22:f3:78:43:a8:ba:20:98:5e:47:69:bf:3e:4e:80:a5:80:69:
         54:e1:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:36:00 2024 by rpki-client on console-ams.rpki-client.org