Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3332203d3e20323635343430.roa
File:                     3136382e3139342e3230302e302f32322d3332203d3e20323635343430.roa (raw, json)
Hash identifier:          rHRTkHlsUxIaD0KSdm0YLS552nMLGkhBhCa7NZE7MDU=
Subject key identifier:   92:C1:AA:04:0A:41:CB:6D:1F:E2:F7:87:E7:F8:AF:DA:20:A0:32:DD
Certificate issuer:       /CN=7E127DAC4160F54B8F8A3D6C93701B4C86431DAF
Certificate serial:       535CF21A733A256A1334F7322D413A09483D137C
Authority key identifier: 7E:12:7D:AC:41:60:F5:4B:8F:8A:3D:6C:93:70:1B:4C:86:43:1D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3332203d3e20323635343430.roa
Signing time:             Mon 08 Jul 2024 15:40:54 +0000
ROA not before:           Mon 08 Jul 2024 15:35:54 +0000
ROA not after:            Mon 07 Jul 2025 15:40:54 +0000
asID:                     265440
IP address blocks:        168.194.200.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5c:f2:1a:73:3a:25:6a:13:34:f7:32:2d:41:3a:09:48:3d:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E127DAC4160F54B8F8A3D6C93701B4C86431DAF
        Validity
            Not Before: Jul  8 15:35:54 2024 GMT
            Not After : Jul  7 15:40:54 2025 GMT
        Subject: CN=92C1AA040A41CB6D1FE2F787E7F8AFDA20A032DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:50:c7:d0:03:f7:d5:d8:00:6f:71:ac:e1:
                    54:73:9f:01:0d:a2:aa:79:b9:be:39:5a:d9:09:eb:
                    3b:d2:86:c4:67:6b:a6:65:08:59:0b:21:ed:9a:21:
                    9e:c2:bf:79:88:b3:58:c1:69:20:27:6a:d0:8b:eb:
                    df:44:9a:bd:13:ef:0b:ac:d9:4b:48:12:73:a3:70:
                    13:65:2c:c7:6f:66:5f:fb:df:6f:e3:4f:1e:27:7d:
                    b7:96:c6:48:b5:bc:26:4e:4a:d5:b6:86:df:6a:ea:
                    dd:a8:f2:f0:88:ad:54:a0:3f:58:eb:a0:07:75:2d:
                    85:53:ec:5b:23:13:1f:cb:6b:5c:c5:7b:84:5c:63:
                    8e:15:98:1d:99:f6:39:2e:2c:dc:42:a0:cd:e1:80:
                    1f:73:e4:28:fb:27:ba:9d:85:18:5c:b3:91:09:95:
                    26:e3:a4:1a:53:e0:f1:de:29:0d:cc:0d:bb:78:32:
                    45:b7:92:a2:54:48:00:f6:05:30:20:30:b2:73:63:
                    b5:59:dd:7b:38:b1:ed:2d:2c:0d:63:71:13:8d:be:
                    35:4f:54:52:33:79:82:e4:79:67:63:cc:0f:f4:46:
                    f7:e4:4f:4a:d1:be:19:9b:cd:c4:23:65:6a:91:d0:
                    59:98:a0:8b:26:02:11:0b:b0:f4:ab:7a:f5:54:df:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C1:AA:04:0A:41:CB:6D:1F:E2:F7:87:E7:F8:AF:DA:20:A0:32:DD
            X509v3 Authority Key Identifier:
                keyid:7E:12:7D:AC:41:60:F5:4B:8F:8A:3D:6C:93:70:1B:4C:86:43:1D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E127DAC4160F54B8F8A3D6C93701B4C86431DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3332203d3e20323635343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:aa:a4:fe:cd:87:91:cc:03:58:30:48:19:1c:a8:fc:1b:
         dd:36:ee:34:ff:30:0c:ed:96:65:4d:60:71:fa:59:54:58:e1:
         de:79:c7:ed:ee:04:71:64:d4:9a:df:0f:58:54:18:d1:84:fb:
         62:e6:83:c1:73:ae:bf:26:e1:57:02:24:c1:f9:e7:a8:45:56:
         44:c4:bd:38:43:85:96:fa:1b:e1:d1:04:9d:f2:d9:d2:fb:33:
         a8:4c:cf:e5:97:6f:eb:c5:87:9a:98:41:2b:2a:bf:86:dc:45:
         04:88:4e:8d:d4:38:e6:37:22:5a:29:71:b5:76:0c:b9:aa:20:
         4a:29:2b:71:a0:dc:17:9d:6d:31:fd:ee:38:11:6a:2e:d7:9f:
         85:24:e0:d2:e3:dd:f9:00:25:af:c7:d9:e6:79:db:c5:89:e1:
         e6:90:53:9f:9b:3a:6a:10:39:7b:b4:b0:3a:29:ea:8f:54:67:
         4a:b8:fa:be:28:b4:1a:d8:d2:05:1d:9a:28:f0:6f:ea:3e:0f:
         5e:6e:94:5b:be:a2:70:3b:62:b7:2e:fa:b1:bd:ef:f6:12:3f:
         43:9c:ce:99:ae:6d:15:82:87:6d:4b:19:76:54:3d:7e:03:7b:
         64:38:96:0b:9d:2f:69:2c:8b:db:63:20:49:49:df:8f:78:67:
         28:f1:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 20:06:09 2024 by rpki-client on console-fra.rpki-client.org