Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e302e36342e302f32322d3234203d3e203532383634.roa
File:                     3136382e302e36342e302f32322d3234203d3e203532383634.roa (raw, json)
Hash identifier:          oXCY8sIafD/+NpTC8dc2WT9g1tT195/KcaEGA6VitX0=
Subject key identifier:   40:13:4E:10:55:F3:3A:9E:4F:B5:80:63:82:11:76:7C:B4:19:B6:7C
Certificate issuer:       /CN=D6306F515BD6C2EF6956BDA4F31C75940F972320
Certificate serial:       23B1EADB9277F91A6D994D6080D7E038FFAF65BD
Authority key identifier: D6:30:6F:51:5B:D6:C2:EF:69:56:BD:A4:F3:1C:75:94:0F:97:23:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6306F515BD6C2EF6956BDA4F31C75940F972320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e302e36342e302f32322d3234203d3e203532383634.roa
Signing time:             Fri 07 Jun 2024 16:55:40 +0000
ROA not before:           Fri 07 Jun 2024 16:50:40 +0000
ROA not after:            Fri 06 Jun 2025 16:55:40 +0000
asID:                     52864
IP address blocks:        168.0.64.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b1:ea:db:92:77:f9:1a:6d:99:4d:60:80:d7:e0:38:ff:af:65:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6306F515BD6C2EF6956BDA4F31C75940F972320
        Validity
            Not Before: Jun  7 16:50:40 2024 GMT
            Not After : Jun  6 16:55:40 2025 GMT
        Subject: CN=40134E1055F33A9E4FB580638211767CB419B67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:ce:26:26:90:14:5d:47:e4:67:e5:f9:d2:
                    79:94:be:9a:9a:10:1f:c1:16:51:07:d0:4c:61:40:
                    ab:21:f4:46:4f:9e:28:6f:f1:ba:44:2c:a9:c0:ff:
                    73:91:37:9e:f3:e7:fe:97:0e:c7:db:9b:ba:e8:fe:
                    11:dc:77:24:0a:09:a2:ba:2c:fc:17:7c:93:08:2b:
                    6e:c5:4c:4b:55:79:c8:07:be:64:df:9b:dd:0f:73:
                    04:4b:e9:cd:be:57:48:b8:fe:ca:5b:e4:41:e3:e5:
                    02:49:29:d1:4d:a1:50:59:e4:e3:e0:31:88:a8:a2:
                    f7:45:6c:cc:ed:93:ec:d4:69:99:d2:88:63:e9:84:
                    bc:b9:45:fc:3b:cf:d0:22:75:85:b2:8c:b1:43:e8:
                    6a:f1:10:52:9c:7b:b8:80:76:8f:fd:64:72:f8:c3:
                    0a:ce:c3:81:d9:67:37:d3:48:f9:cd:a7:60:c4:8b:
                    ea:49:88:c0:b0:6a:93:fc:43:f6:0d:24:9e:0e:6d:
                    53:ce:db:c8:37:f8:13:2a:31:ab:13:ad:84:ad:7f:
                    cc:3c:df:89:05:3a:83:dd:7b:c3:d1:41:fb:1b:e3:
                    17:89:15:ee:a3:1b:bc:00:35:e7:0f:20:07:68:d6:
                    f1:83:af:a8:9a:ea:a8:01:93:e2:44:6d:84:01:e5:
                    35:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:13:4E:10:55:F3:3A:9E:4F:B5:80:63:82:11:76:7C:B4:19:B6:7C
            X509v3 Authority Key Identifier:
                keyid:D6:30:6F:51:5B:D6:C2:EF:69:56:BD:A4:F3:1C:75:94:0F:97:23:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/D6306F515BD6C2EF6956BDA4F31C75940F972320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6306F515BD6C2EF6956BDA4F31C75940F972320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3136382e302e36342e302f32322d3234203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:26:41:a4:b5:35:32:83:2a:d2:32:8e:09:6b:a7:80:e7:4e:
         0d:82:fe:10:f1:f4:1f:27:58:a9:e6:94:fa:0f:a0:de:8d:7b:
         f8:34:2c:a5:8c:ad:f9:af:a7:43:da:a7:f0:44:ae:6d:06:5e:
         6d:59:50:51:35:b3:04:e2:13:e6:0c:68:11:11:ce:2c:3e:5a:
         86:e1:a0:07:c8:9e:b1:92:58:88:fa:e2:a0:55:8f:66:3c:b7:
         64:79:68:b8:0c:73:f5:4e:d1:04:33:26:5f:1d:71:a8:44:e8:
         fc:fb:c3:c6:21:09:63:c7:b3:d0:28:17:fd:4b:6f:69:36:2a:
         1a:ba:64:b8:3b:1a:9b:1b:7a:8e:fc:08:ff:b5:ce:f3:f1:10:
         18:f2:91:77:7d:63:e1:68:bd:34:19:2b:b0:c2:88:81:c7:aa:
         09:b1:bd:d4:2e:c0:9f:fb:48:4c:43:c7:2f:9b:bc:1b:1c:8a:
         ae:df:8a:31:18:be:91:09:29:c6:bc:04:db:b3:84:a1:db:e9:
         3a:d0:70:a8:c9:91:ec:32:0d:9c:88:6f:6f:cf:f9:df:d6:a8:
         4d:65:8e:65:e9:9a:ed:0a:9e:0e:be:b5:04:d0:91:9b:07:e9:
         22:81:02:97:f9:e4:7a:6b:6d:36:87:fe:0d:71:3a:1b:f8:c8:
         70:bc:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 05:42:07 2024 by rpki-client on console-fra.rpki-client.org