Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
File:                     3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa (raw, json)
Hash identifier:          UJVVsjdu2jYLE6I4DrMUSuup0Q9U/3dqBVErKr+dVUI=
Subject key identifier:   F4:7F:C2:C8:08:3B:1D:B0:15:23:08:39:EE:B8:9A:9F:5A:D3:96:68
Certificate issuer:       /CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
Certificate serial:       176A7565DBFEB6C49DB724943A05FFF86978C2A6
Authority key identifier: 0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa
Signing time:             Thu 16 May 2024 14:23:29 +0000
ROA not before:           Thu 16 May 2024 14:18:29 +0000
ROA not after:            Thu 15 May 2025 14:23:29 +0000
asID:                     264316
IP address blocks:        168.121.216.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6a:75:65:db:fe:b6:c4:9d:b7:24:94:3a:05:ff:f8:69:78:c2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21
        Validity
            Not Before: May 16 14:18:29 2024 GMT
            Not After : May 15 14:23:29 2025 GMT
        Subject: CN=F47FC2C8083B1DB015230839EEB89A9F5AD39668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:2d:61:2b:5b:b5:3c:f5:17:c0:fb:68:00:
                    39:ec:64:cc:db:c0:6c:45:3d:e6:83:68:de:b1:c5:
                    6e:b7:92:59:2b:49:18:f1:bb:9f:ca:fd:58:e2:65:
                    c7:90:8f:6f:1b:97:28:0d:3b:2b:b7:3b:66:6d:04:
                    24:3a:79:c1:2c:e1:e4:6c:3f:d9:11:48:a5:c2:f0:
                    72:11:9f:54:74:52:1a:0e:ba:1d:70:56:be:f0:86:
                    22:b6:5e:91:9f:00:60:2b:7f:e0:42:90:60:d9:64:
                    10:2b:50:1a:8f:ea:66:7a:61:96:33:cd:c2:bd:f1:
                    5c:1b:d7:ed:46:36:96:e7:2d:d8:90:bd:1b:49:bb:
                    ad:a6:7c:f1:26:f0:46:d4:fb:06:77:78:3c:83:a9:
                    5c:0f:6a:3f:c8:31:fa:ad:40:01:39:ac:71:c0:eb:
                    99:85:b1:5e:d6:05:b1:31:8a:91:3a:37:a2:a1:24:
                    b7:ef:68:08:07:de:ed:6f:f8:93:c4:a6:41:d5:a4:
                    09:15:09:12:a9:ad:f4:bb:0f:b0:e2:79:08:cb:21:
                    fa:63:60:e2:5e:d3:9d:fe:f3:13:c0:6d:64:83:ca:
                    8f:04:75:e4:7d:a0:62:2d:b6:72:ab:ee:ee:a1:4c:
                    8d:3b:70:2c:ef:a7:fd:06:63:ec:ef:ad:6c:e6:e9:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:C2:C8:08:3B:1D:B0:15:23:08:39:EE:B8:9A:9F:5A:D3:96:68
            X509v3 Authority Key Identifier:
                keyid:0B:66:FC:EA:6E:34:B7:BC:A3:91:EA:15:59:5B:6C:DF:CE:89:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B66FCEA6E34B7BCA391EA15595B6CDFCE89FF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3234203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:79:5b:b2:e8:03:7c:b8:29:62:ac:dd:a6:e0:8f:e5:2b:f3:
         6b:aa:1e:9f:de:77:31:e0:a5:46:89:ff:ed:da:de:e0:9a:b5:
         40:79:96:f8:48:f4:bd:c2:0e:ee:7b:c9:b9:50:9a:1d:39:26:
         3e:fb:87:46:a9:80:b9:7b:1c:c7:66:df:7c:81:7c:5e:3d:0f:
         cd:5a:18:bf:96:e1:f7:d2:46:c0:44:84:84:ed:b3:b3:42:03:
         88:b0:00:ef:97:e0:f9:a4:66:bd:f7:39:7a:0c:dc:a6:b0:b7:
         3e:e3:5b:42:a3:99:64:a8:1a:5b:3a:3e:82:99:f5:08:5b:cf:
         c0:a7:09:77:f6:f8:82:24:e0:0e:4a:3f:da:f9:46:b2:c9:b4:
         81:ed:30:f1:cf:af:89:be:a5:6d:66:3c:0c:88:55:bc:e4:d2:
         98:1e:8b:79:f1:7c:cf:99:98:d4:e7:6f:34:6b:b8:6c:3b:c4:
         74:48:23:a1:bb:cd:9a:f6:fc:04:83:10:a5:48:45:72:b8:6b:
         e9:9e:eb:98:eb:f4:c3:ed:46:af:7d:0b:82:f9:cd:f4:44:e7:
         ca:a8:c3:d5:e5:d2:9a:3b:22:fa:74:ef:6b:bb:bf:fe:63:d1:
         8a:3b:0c:3b:2c:42:8b:71:dd:e0:53:10:a9:9f:70:e0:a2:ca:
         2f:e9:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 10:45:13 2024 by rpki-client on console-ams.rpki-client.org