Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135322e302f32322d3232203d3e203532393434.roa
File:                     3136382e3230352e3135322e302f32322d3232203d3e203532393434.roa (raw, json)
Hash identifier:          TFIgR9vR8xXFwaFi9gUrGsEtDXmY97zzMVBebivm2ec=
Subject key identifier:   75:4E:CB:AA:9F:17:FA:B0:69:90:4D:3E:BE:7C:AA:42:62:A7:30:FC
Certificate issuer:       /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial:       4D50D7023CAF017F4329678DCFE1E293E538E023
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135322e302f32322d3232203d3e203532393434.roa
Signing time:             Wed 04 Sep 2024 22:46:05 +0000
ROA not before:           Wed 04 Sep 2024 22:41:05 +0000
ROA not after:            Wed 03 Sep 2025 22:46:05 +0000
asID:                     52944
IP address blocks:        168.205.152.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:50:d7:02:3c:af:01:7f:43:29:67:8d:cf:e1:e2:93:e5:38:e0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
        Validity
            Not Before: Sep  4 22:41:05 2024 GMT
            Not After : Sep  3 22:46:05 2025 GMT
        Subject: CN=754ECBAA9F17FAB069904D3EBE7CAA4262A730FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:4b:59:4f:e3:4b:35:d7:e9:07:65:e8:8a:
                    33:e9:64:0c:f9:32:3a:5b:63:4b:21:eb:67:ca:6b:
                    b5:ec:02:2a:2f:e6:13:21:ae:d4:a4:29:fc:d5:35:
                    0f:d4:33:8d:2c:71:3e:3b:26:72:f0:50:3b:9f:1a:
                    5c:c7:8a:dc:fd:e8:4d:d0:fe:d0:61:17:08:68:26:
                    81:32:45:c1:0b:26:93:80:e5:74:24:96:dc:d4:22:
                    b1:19:0c:5f:7a:5c:b0:b7:3c:e0:84:ad:7e:de:2c:
                    8e:33:78:41:e9:76:27:27:57:9a:4a:ae:7c:cb:bc:
                    e7:80:4f:ff:78:ff:98:fa:85:7f:36:7f:5c:68:61:
                    4b:d4:2b:2e:ac:2e:0c:c5:2e:43:96:3d:0a:14:cc:
                    e7:a5:01:83:e9:6b:f7:48:bb:b8:6a:f6:b5:7f:ae:
                    76:0f:3e:63:9d:07:6e:ad:89:f2:06:f3:1a:d1:91:
                    f7:0f:9d:a6:9c:97:44:15:af:cb:dd:86:4c:e9:c7:
                    7e:a0:e4:36:70:72:06:c3:b3:3e:8e:de:06:12:c4:
                    01:b2:ea:0e:28:34:25:1b:9b:a6:75:25:15:ef:ff:
                    32:d8:60:e4:b7:55:97:51:06:ef:80:a2:03:06:35:
                    ff:09:05:fa:5b:70:27:18:d1:13:09:ab:04:58:09:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:CB:AA:9F:17:FA:B0:69:90:4D:3E:BE:7C:AA:42:62:A7:30:FC
            X509v3 Authority Key Identifier:
                keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135322e302f32322d3232203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:f0:9a:ea:69:35:d9:1f:cc:5f:ea:f6:ab:a0:27:53:3d:cc:
         fa:9f:99:ff:09:a5:29:52:6f:f9:b5:81:35:74:9e:7e:15:a8:
         63:13:9e:5a:3b:75:a9:e8:98:b5:01:90:66:c9:b4:ed:dd:c8:
         f4:47:95:30:ae:ee:6f:b1:1b:4c:41:50:be:dd:c2:6b:b3:88:
         82:4d:34:72:98:a4:91:3d:cc:7f:79:bc:79:1b:29:5d:6a:55:
         e4:fe:b2:ca:52:84:91:af:96:e6:ae:85:a3:2e:cb:1c:f0:c6:
         6f:14:9d:64:3b:0a:94:5a:5e:14:da:61:8a:69:e3:7f:02:17:
         3a:89:c9:46:aa:5a:ec:53:5d:6e:b8:c1:e8:fe:95:22:43:7f:
         e4:4f:3d:67:3d:ee:c7:c4:c1:9d:ff:db:38:a2:09:38:4d:6e:
         02:ce:73:66:e3:66:28:f1:f4:ef:06:30:20:a0:0d:26:bd:22:
         2c:9b:2c:e5:55:b4:53:e4:50:2a:80:59:86:92:de:e0:d1:86:
         32:ba:9a:58:9a:b0:3f:fe:cd:ce:db:a5:34:ad:a2:53:f1:53:
         3c:6d:61:7d:65:ee:b0:13:00:21:9d:d9:5c:36:f6:59:06:4a:
         29:a1:c6:28:54:a0:5b:3b:3f:58:79:32:e0:ed:e7:97:fe:c1:
         58:4f:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 00:52:44 2024 by rpki-client on console-ams.rpki-client.org