Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/3136302e3233382e3233362e302f32322d3332203d3e20323636353737.roa
File:                     3136302e3233382e3233362e302f32322d3332203d3e20323636353737.roa (raw, json)
Hash identifier:          g0+/VQcKHEY01il2OhN8txgsvJRv573ULtwhrj2J+1U=
Subject key identifier:   0E:61:CB:C1:B1:6B:4B:70:24:87:10:62:51:18:E9:BE:43:0A:DF:3F
Certificate issuer:       /CN=7E693FC0717C202DB4CEF639324A1433D6C128C8
Certificate serial:       7FF5F5CEE509228D55F987B88DF0EE0EECDB48CE
Authority key identifier: 7E:69:3F:C0:71:7C:20:2D:B4:CE:F6:39:32:4A:14:33:D6:C1:28:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E693FC0717C202DB4CEF639324A1433D6C128C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/3136302e3233382e3233362e302f32322d3332203d3e20323636353737.roa
Signing time:             Wed 24 Jul 2024 13:32:47 +0000
ROA not before:           Wed 24 Jul 2024 13:27:47 +0000
ROA not after:            Wed 23 Jul 2025 13:32:47 +0000
asID:                     266577
IP address blocks:        160.238.236.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f5:f5:ce:e5:09:22:8d:55:f9:87:b8:8d:f0:ee:0e:ec:db:48:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E693FC0717C202DB4CEF639324A1433D6C128C8
        Validity
            Not Before: Jul 24 13:27:47 2024 GMT
            Not After : Jul 23 13:32:47 2025 GMT
        Subject: CN=0E61CBC1B16B4B70248710625118E9BE430ADF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:15:b1:20:ea:4f:e7:cb:d6:38:eb:cc:5d:
                    cb:8a:e3:e4:3a:f0:ec:67:f0:24:f3:41:5c:81:ff:
                    2b:c1:48:bd:a6:83:09:80:28:99:b2:b1:4a:8e:e4:
                    1c:87:3a:3d:9c:9c:41:7f:2f:35:7f:30:76:c1:85:
                    c1:f7:81:67:a5:89:b8:21:6f:e3:23:37:6b:a2:d5:
                    53:f5:4d:7a:aa:4f:84:41:5d:b5:88:a0:ff:32:04:
                    f1:f4:a6:fe:d1:86:bb:52:b2:16:52:5a:31:86:5c:
                    2d:79:1c:2f:60:61:2c:da:a7:e1:90:43:d0:15:85:
                    f2:89:35:6e:7c:17:3e:00:e5:88:88:c6:19:0a:b5:
                    ed:4b:75:4c:c3:a8:68:7d:cc:41:f1:f3:fe:c7:84:
                    e9:53:6f:73:c4:64:33:d9:54:c6:14:50:17:6a:7c:
                    ac:02:7e:4f:e7:47:02:f4:12:36:d1:44:10:58:33:
                    fa:59:68:da:20:e9:a6:69:c2:19:62:01:17:87:cf:
                    b7:4d:5c:e0:38:91:fc:8a:3e:4e:44:c8:19:30:80:
                    ed:89:98:7a:b2:4f:59:e5:db:c0:4c:75:16:d9:52:
                    06:45:bb:59:45:d2:f0:fe:75:65:88:56:ef:fa:84:
                    f3:0f:19:b4:66:43:25:ef:bf:40:1c:fd:63:5e:3a:
                    33:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:CB:C1:B1:6B:4B:70:24:87:10:62:51:18:E9:BE:43:0A:DF:3F
            X509v3 Authority Key Identifier:
                keyid:7E:69:3F:C0:71:7C:20:2D:B4:CE:F6:39:32:4A:14:33:D6:C1:28:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/7E693FC0717C202DB4CEF639324A1433D6C128C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E693FC0717C202DB4CEF639324A1433D6C128C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBPvxvAjEsGXi34mZKV162G6soZqT2deMFqGxqkXJyCq/0/3136302e3233382e3233362e302f32322d3332203d3e20323636353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:4b:de:30:00:d5:2a:ee:79:35:d1:77:56:c8:50:f7:be:
         d0:39:2d:00:71:cf:5f:43:f5:78:06:e7:e7:17:df:48:95:f2:
         fa:44:e5:d2:43:c7:4d:48:42:04:79:78:dc:43:1b:b0:4b:68:
         b2:a5:97:cc:e3:d6:36:3a:36:2c:41:ee:d7:ac:d8:e4:b6:5f:
         b8:52:cc:58:cc:15:5f:8f:31:6a:fa:7f:48:cf:59:d5:d9:79:
         4d:dd:1d:64:84:59:9c:7e:58:83:22:7e:cc:69:30:81:c3:7a:
         5e:65:fa:51:01:4b:f7:c6:f7:d8:10:01:b3:2e:3e:81:20:f6:
         0e:08:32:07:c8:3e:8b:68:cf:c8:24:0f:80:cd:df:f1:1d:2b:
         6b:ee:14:c5:36:da:56:af:d4:eb:8c:f9:f3:12:28:39:4f:62:
         42:33:d3:32:b0:e2:a9:95:be:d2:5b:4a:f5:8f:fe:97:e4:fe:
         f7:87:c3:ee:31:9d:db:c1:98:e5:1c:2f:d0:88:be:bc:f4:57:
         70:a0:e4:1c:4f:87:67:5e:e4:9f:6a:13:79:73:c0:0a:28:a7:
         04:d0:36:ad:5a:ba:00:01:7a:3c:39:1b:ff:25:de:06:23:d6:
         be:81:05:1e:6c:2e:7f:96:de:bb:00:ba:c9:35:c8:9e:81:b7:
         16:1f:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 19:23:31 2024 by rpki-client on console-fra.rpki-client.org