Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa
File:                     3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          5jtc/Upa108uvanR027OrBExGXrUGjT0hodmcyiVqo8=
Subject key identifier:   E6:54:1C:28:D3:9B:3F:4E:E5:66:2D:4A:9E:47:AC:1A:0B:F0:37:6C
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       0EC24B039859AEAC81A5F730398EDE0724AF4767
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:05 +0000
ROA not before:           Mon 26 Aug 2024 19:28:05 +0000
ROA not after:            Mon 25 Aug 2025 19:33:05 +0000
asID:                     269359
IP address blocks:        168.194.250.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c2:4b:03:98:59:ae:ac:81:a5:f7:30:39:8e:de:07:24:af:47:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:05 2024 GMT
            Not After : Aug 25 19:33:05 2025 GMT
        Subject: CN=E6541C28D39B3F4EE5662D4A9E47AC1A0BF0376C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:f9:ef:7b:2b:03:75:25:0c:40:85:f0:5b:
                    b6:46:06:52:f5:31:2b:fc:35:17:2e:72:87:a8:0f:
                    5c:ad:3f:d8:9f:ed:66:ba:05:e7:ee:6a:ec:a5:91:
                    e4:50:60:d0:c5:5e:e9:3a:5b:27:35:2c:9f:43:43:
                    08:b8:78:b9:cf:16:59:0b:7d:24:b9:83:14:b9:b7:
                    73:84:7f:33:21:c5:9e:5f:ad:fc:e3:3b:8b:b8:ca:
                    b9:4f:88:39:5a:98:8f:b1:e6:70:39:4b:1a:13:18:
                    8c:7c:83:a3:21:36:c4:4a:17:12:31:27:55:95:2d:
                    43:2b:26:c6:ca:d1:6c:81:bd:e1:ec:b9:12:6a:56:
                    32:19:50:11:8d:76:ab:7a:c0:9c:f8:34:0b:45:29:
                    7c:3a:62:22:39:d8:ae:36:f3:0f:c5:87:f4:91:d5:
                    f2:34:47:e7:4f:5e:f4:59:84:9c:18:bc:46:c5:e1:
                    29:f6:72:26:f8:02:8b:1b:7b:d2:53:dc:a4:17:86:
                    11:b0:9b:bf:5d:ba:62:ab:ff:99:6a:ab:d3:f9:29:
                    3b:47:3f:a7:92:60:13:cf:9f:2b:b0:b3:62:81:a7:
                    5c:e4:1f:2a:af:bf:37:43:37:b9:13:10:5a:12:93:
                    7a:1a:9e:5f:76:c6:a2:cb:bb:81:e1:21:61:f9:c8:
                    39:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:1C:28:D3:9B:3F:4E:E5:66:2D:4A:9E:47:AC:1A:0B:F0:37:6C
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3235302e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:5b:20:05:c9:18:9f:be:5c:1d:f7:ec:39:fe:c2:af:5b:
         fd:d6:0d:26:ab:51:46:61:8b:c9:fa:4e:b5:30:b0:5e:06:d4:
         cf:0e:e2:53:bd:ba:77:49:7a:98:55:62:f2:57:b0:c0:48:6b:
         b5:7e:eb:3d:a4:78:f2:1b:71:b0:78:c0:fe:72:bc:05:98:26:
         7a:ca:75:bb:12:53:1b:45:cc:f5:d7:4a:4d:c2:36:d9:30:8e:
         0f:24:5a:8c:05:12:0f:59:22:81:e9:d6:e3:f6:fb:ae:07:f1:
         ba:fe:16:34:9a:72:31:77:cb:63:76:bf:c4:e2:f4:e9:55:c7:
         30:a8:82:2a:59:36:a8:22:0c:ad:0f:9d:25:63:c3:53:0c:21:
         e4:1b:6e:50:08:5f:f7:89:ba:4d:e3:4d:2e:92:06:40:e7:d6:
         2d:37:10:d0:c0:5a:1f:e9:66:69:0d:f3:dc:be:03:ff:40:de:
         6a:52:66:e7:60:a4:47:b9:d8:8e:47:f3:3b:db:90:cc:99:ac:
         4e:83:7c:7b:68:c8:76:63:bc:1e:c5:88:2b:15:f0:8b:a4:1e:
         90:97:73:47:bb:2f:ad:62:57:18:1d:54:d5:c0:26:1c:85:d8:
         01:5e:c2:a0:03:c6:71:9a:53:a9:62:0d:4f:b2:ae:54:2f:47:
         2c:31:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:58 2024 by rpki-client on console-ams.rpki-client.org