Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa
File:                     3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          Zery1MZJD9+0oYZto/fP7oJPm6Tnc/3LUD6XV55dBwo=
Subject key identifier:   A4:81:82:A2:98:61:1D:6D:83:39:3E:EC:4C:58:CB:BD:60:4A:46:82
Certificate issuer:       /CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
Certificate serial:       3E89A61A8BE1CF135600E85DA757E0A50AB8CB92
Authority key identifier: D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa
Signing time:             Thu 04 Apr 2024 08:11:35 +0000
ROA not before:           Thu 04 Apr 2024 08:06:35 +0000
ROA not after:            Thu 03 Apr 2025 08:11:35 +0000
asID:                     262346
IP address blocks:        177.125.160.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:89:a6:1a:8b:e1:cf:13:56:00:e8:5d:a7:57:e0:a5:0a:b8:cb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70
        Validity
            Not Before: Apr  4 08:06:35 2024 GMT
            Not After : Apr  3 08:11:35 2025 GMT
        Subject: CN=A48182A298611D6D83393EEC4C58CBBD604A4682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:47:fb:92:4b:1c:14:64:73:85:25:e4:6b:
                    17:d7:e4:58:d6:63:55:e2:61:2b:df:a0:5e:84:3c:
                    e4:0e:64:d5:bc:59:9e:79:14:ab:ee:f9:5f:90:dd:
                    5e:7d:04:69:d4:dd:b3:96:46:58:c5:60:d2:51:c9:
                    b1:4d:90:d9:76:34:0d:0b:f5:5a:ed:2f:60:57:ab:
                    5a:83:c4:62:6f:55:aa:ae:05:6a:ad:08:31:7e:e6:
                    86:58:02:f4:cd:6f:1c:1d:56:89:65:a1:5a:91:f7:
                    1f:4f:e4:7c:b5:84:a5:b9:9e:bd:e3:d1:88:e1:79:
                    74:da:35:a2:02:73:53:fd:e6:01:3c:39:b8:0d:cd:
                    d0:56:d6:29:df:15:13:cb:68:5c:74:0a:60:7e:01:
                    8f:94:a4:9e:3b:e7:44:b4:9e:85:7e:c7:15:1a:4f:
                    e3:37:cf:96:bb:be:8e:e2:7f:ee:28:0e:78:00:c5:
                    27:65:89:c0:cc:85:4a:e2:70:c7:56:80:5e:db:e0:
                    18:25:9a:15:b6:b7:1b:62:d0:07:8a:c1:25:54:26:
                    6d:9f:85:ca:20:14:c0:8b:c4:b8:d1:78:2e:24:ed:
                    5e:f8:54:34:b5:a2:c0:db:62:5b:41:ce:84:8d:08:
                    ad:f6:e0:76:1e:99:ac:c0:10:bb:b9:c3:83:92:d2:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:81:82:A2:98:61:1D:6D:83:39:3E:EC:4C:58:CB:BD:60:4A:46:82
            X509v3 Authority Key Identifier:
                keyid:D1:FE:02:A4:C1:26:A3:FA:7B:9D:44:BE:A1:8A:15:96:2D:71:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FE02A4C126A3FA7B9D44BEA18A15962D71BF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/1/3137372e3132352e3136302e302f32312d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:e6:30:93:cd:7f:f8:dc:bc:bc:6d:aa:da:43:4d:f4:d1:
         09:03:06:0e:e7:db:1d:09:d1:53:07:c4:49:24:c8:b4:3d:ae:
         a0:dd:41:77:8f:1d:c6:0e:aa:28:9c:18:83:a3:48:da:52:a1:
         b9:71:11:0f:04:c9:88:ad:94:ec:d6:69:e9:fb:20:6b:eb:0c:
         ea:d7:44:92:8a:c9:21:2f:0a:b0:b7:22:3d:32:5b:dc:7f:24:
         b4:0e:c6:70:f5:8f:03:6f:a1:5e:1b:e0:9f:5d:1f:d1:15:17:
         5d:2b:0f:46:44:a4:64:9e:77:83:e3:7c:b2:d1:9e:bc:97:31:
         5e:83:2a:fd:12:42:c6:47:cf:c0:4b:18:90:92:35:24:05:8e:
         fc:88:a1:37:1f:c2:5c:f5:23:22:b2:3b:80:02:ab:9b:a5:75:
         f6:52:e1:45:b1:f0:c6:29:be:52:43:08:e0:64:df:13:a3:85:
         c8:e4:59:db:f5:bd:0b:72:0d:29:ac:57:32:19:76:cd:6f:8d:
         19:9a:50:24:fe:41:1e:12:61:9d:a0:ed:4d:56:62:6a:ba:f6:
         08:59:c8:f2:7d:de:27:03:3a:df:da:af:ac:a5:6d:5f:d7:1b:
         a1:f2:6d:99:f6:4d:a7:ce:b6:24:d1:ba:58:4a:7a:19:36:10:
         51:b8:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 07:42:58 2024 by rpki-client on console-fra.rpki-client.org