Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3332203d3e20323632363434.roa
File:                     3136372e3234392e31322e302f32322d3332203d3e20323632363434.roa (raw, json)
Hash identifier:          ScffZnJnqJfYwcgEkX3gVrsUKZuEVpS8TTtTo44c05U=
Subject key identifier:   2A:10:49:3E:C1:58:F2:0E:B1:2D:DC:E8:0D:FB:C7:6B:0B:FF:81:FD
Certificate issuer:       /CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
Certificate serial:       46FF9C7F9C421873600933AC0F531A29B0C0C792
Authority key identifier: 8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3332203d3e20323632363434.roa
Signing time:             Wed 17 Jul 2024 21:29:00 +0000
ROA not before:           Wed 17 Jul 2024 21:24:00 +0000
ROA not after:            Wed 16 Jul 2025 21:29:00 +0000
asID:                     262644
IP address blocks:        167.249.12.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:9c:7f:9c:42:18:73:60:09:33:ac:0f:53:1a:29:b0:c0:c7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
        Validity
            Not Before: Jul 17 21:24:00 2024 GMT
            Not After : Jul 16 21:29:00 2025 GMT
        Subject: CN=2A10493EC158F20EB12DDCE80DFBC76B0BFF81FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:c0:ef:53:dc:eb:5e:db:16:10:5b:e8:b1:
                    aa:d6:57:7a:01:5d:16:73:31:82:79:a4:85:18:10:
                    51:18:70:4e:09:8e:2d:4a:16:e9:9d:64:56:fd:f2:
                    1b:4c:3b:4e:d6:b5:7f:ff:06:bd:86:df:12:48:26:
                    56:db:d3:d7:fe:a7:9e:df:a5:e5:9e:d9:9c:8f:8a:
                    dc:1c:40:18:89:d1:c3:20:e6:a5:5e:d0:a3:bc:cd:
                    20:06:a2:23:6b:1a:81:dd:2d:30:4f:cb:e3:de:02:
                    5f:be:e0:9c:6b:0c:80:37:d7:9e:6b:91:49:86:e3:
                    8f:f7:0b:97:cb:76:98:85:6d:2c:65:7c:64:44:c8:
                    4b:89:ca:06:9f:dd:5c:e2:4d:c5:3d:6a:db:5a:a1:
                    5a:d5:78:24:1d:70:57:0d:3d:e9:88:4a:b4:90:b0:
                    74:1a:32:f9:28:a7:35:e5:b0:17:5b:1a:95:90:4d:
                    23:d9:b1:30:cd:63:11:13:c3:1d:de:d5:a4:d4:da:
                    72:75:d7:5b:b8:9d:ed:f5:c4:6f:33:c5:50:b8:5b:
                    72:4d:6b:62:a3:b3:60:b1:90:19:e0:07:39:c9:11:
                    b7:ab:68:7b:71:65:19:0f:67:47:5e:d8:6a:fd:34:
                    00:5f:c2:0c:af:44:4b:06:d5:34:7f:de:bf:22:7c:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:49:3E:C1:58:F2:0E:B1:2D:DC:E8:0D:FB:C7:6B:0B:FF:81:FD
            X509v3 Authority Key Identifier:
                keyid:8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/8CA3A7365B156022A19D3103A9AC15C16D55CD75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3136372e3234392e31322e302f32322d3332203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:18:2a:f8:62:40:4e:4e:97:ab:6c:d7:58:a7:e0:e9:16:14:
         8d:54:7d:06:80:66:a9:7d:5b:44:6a:3f:fe:0f:f7:a5:4e:72:
         cb:18:26:55:fb:51:d5:07:cd:20:5d:63:2a:61:4d:13:82:b7:
         dd:fd:1c:18:6e:cc:63:32:d3:64:6c:5f:7c:5f:98:3f:1d:2d:
         00:21:e9:86:d2:8b:c3:ea:51:e0:81:82:48:6e:51:0e:e2:ea:
         10:6d:87:ce:f9:84:c4:5c:55:3f:4e:9b:b3:a1:b0:88:32:0b:
         f0:bf:61:03:6a:06:da:6a:1c:20:d1:7f:4a:cc:16:7b:9a:f4:
         e1:09:b9:44:7a:3e:d0:13:84:72:cf:db:32:6c:bc:bb:e0:39:
         8b:08:7f:1b:fa:de:9b:7d:f7:50:84:cc:a9:b0:c6:a0:60:10:
         3f:31:f6:0a:1c:85:9a:35:3e:b0:40:b3:89:46:2b:0a:e1:b3:
         af:da:dd:5e:73:d9:b0:a7:35:f4:fe:4c:53:3c:e4:2a:8d:48:
         3e:d6:00:db:05:58:4d:c8:77:cd:dc:93:6e:8d:61:52:0c:b9:
         e8:90:5a:85:dd:1f:de:2b:d6:49:0d:05:6d:4c:76:30:77:27:
         6e:62:af:0c:ca:a4:46:d9:2e:5b:16:ca:87:89:f1:a8:fd:09:
         86:ff:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 20:25:15 2024 by rpki-client on console-ams.rpki-client.org