Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa
File:                     3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (raw, json)
Hash identifier:          mb8LoBHJXodfNNQO6uj6rW/t3XvsMU4aormVBGJ4UTw=
Subject key identifier:   D1:7E:08:39:12:5C:E8:5C:84:7B:08:7F:EB:A8:73:3E:07:E7:54:F2
Certificate issuer:       /CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
Certificate serial:       265D286364555B137BBE561991091178FE917CED
Authority key identifier: 08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa
Signing time:             Thu 04 Apr 2024 12:40:35 +0000
ROA not before:           Thu 04 Apr 2024 12:35:35 +0000
ROA not after:            Thu 03 Apr 2025 12:40:35 +0000
asID:                     265246
IP address blocks:        167.250.128.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5d:28:63:64:55:5b:13:7b:be:56:19:91:09:11:78:fe:91:7c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
        Validity
            Not Before: Apr  4 12:35:35 2024 GMT
            Not After : Apr  3 12:40:35 2025 GMT
        Subject: CN=D17E0839125CE85C847B087FEBA8733E07E754F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:fd:ba:45:3f:26:29:e9:0c:4b:84:93:47:
                    c7:58:ee:be:79:cc:d3:f9:f9:a5:f2:8e:33:b2:76:
                    ce:38:01:05:b6:e8:19:7a:67:32:33:df:6f:d4:76:
                    15:a3:fd:0e:49:6c:cd:a4:7b:ad:84:97:f9:2e:30:
                    21:9a:83:49:a8:bc:ad:92:83:32:ed:1a:ef:d2:2e:
                    0a:cb:48:2a:6e:3a:30:9d:17:5b:6a:51:a9:83:45:
                    a7:58:65:4b:39:d4:ee:68:4e:44:67:86:63:39:39:
                    59:d5:0d:8b:2d:27:6e:6d:ec:10:aa:97:e0:34:dd:
                    55:34:d1:bc:ed:56:0a:19:56:7a:3d:8c:51:56:e1:
                    79:0f:89:2e:40:4c:90:7d:76:93:21:02:eb:65:60:
                    97:cc:1d:51:d8:33:05:da:f8:0a:5c:32:6d:aa:75:
                    02:92:96:1b:61:65:4d:d9:f1:8b:4f:7c:97:b2:50:
                    15:a6:91:3e:ad:ac:a6:bb:52:6f:21:3b:d4:91:72:
                    57:b0:92:7b:8a:35:f7:43:e6:d1:a9:e3:13:58:ad:
                    f1:35:9d:d8:82:17:fc:eb:ca:d0:8d:fb:7f:28:45:
                    7b:f8:aa:13:f7:fd:12:32:09:b1:d7:f4:dd:dd:72:
                    eb:b7:f8:8f:4c:0a:e4:e3:d2:7c:0d:d0:00:70:94:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7E:08:39:12:5C:E8:5C:84:7B:08:7F:EB:A8:73:3E:07:E7:54:F2
            X509v3 Authority Key Identifier:
                keyid:08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:c3:81:ea:6e:7e:39:68:b0:43:d2:f3:13:1e:da:ba:09:
         dc:ca:a3:2b:31:e0:62:76:9e:76:ff:1a:bd:5c:d4:7b:77:13:
         91:e4:60:87:d7:62:73:23:bc:10:d8:03:9f:68:de:0d:a8:e1:
         8b:10:f0:30:ed:05:68:f1:43:9a:da:bb:f4:20:76:62:c9:c3:
         f4:10:e8:f8:53:07:cc:5d:1c:3d:6b:b6:87:1b:db:1d:ed:e0:
         05:71:33:73:17:ae:f1:ac:70:e4:7d:54:1b:38:24:94:0f:60:
         70:71:d5:f9:93:dd:a7:19:01:ad:6d:e0:b1:6b:48:e3:4e:39:
         f0:c7:26:6e:38:c8:23:71:6e:2d:9c:ee:ae:8c:07:2b:83:7a:
         ec:88:59:41:07:ef:49:ad:0e:1b:97:ba:f1:25:dc:17:46:e3:
         de:64:41:65:8a:ac:2d:0e:72:f7:da:9d:90:12:92:d2:06:88:
         5c:d2:82:d9:85:d0:c6:c0:83:3b:ae:fa:43:f7:f8:da:46:f1:
         cd:bb:01:19:d4:dd:46:b6:33:2e:ce:ce:e3:14:f4:46:f6:8b:
         e2:3e:dc:05:91:d6:ee:d5:22:80:d7:1e:02:83:4d:38:1d:8a:
         75:a1:de:13:18:9b:37:df:6b:99:87:78:a5:ce:2d:b3:9b:5f:
         91:bb:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 09:28:41 2024 by rpki-client on console-fra.rpki-client.org