Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa
File:                     3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa (raw, json)
Hash identifier:          zXTj8v0D+u5EaN0PTsIZU9AsU+Lg7JEBjMFenwCHedQ=
Subject key identifier:   85:1C:93:1A:ED:29:7C:5D:9F:34:4C:D4:E4:80:4C:00:CB:7A:E4:D3
Certificate issuer:       /CN=DC624F8841FFED451F1A9D746E838491790743C0
Certificate serial:       1FFA6B8659D00C5A06346D16FE498F6D0B1E0940
Authority key identifier: DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa
Signing time:             Thu 04 Apr 2024 03:03:04 +0000
ROA not before:           Thu 04 Apr 2024 02:58:04 +0000
ROA not after:            Thu 03 Apr 2025 03:03:04 +0000
asID:                     265439
IP address blocks:        168.195.188.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:6b:86:59:d0:0c:5a:06:34:6d:16:fe:49:8f:6d:0b:1e:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC624F8841FFED451F1A9D746E838491790743C0
        Validity
            Not Before: Apr  4 02:58:04 2024 GMT
            Not After : Apr  3 03:03:04 2025 GMT
        Subject: CN=851C931AED297C5D9F344CD4E4804C00CB7AE4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:18:a9:e2:20:bd:8a:f8:94:56:64:6a:e5:
                    cd:31:95:e6:fb:ac:3e:04:5f:2b:b8:e0:e4:64:12:
                    a7:99:81:f9:a0:15:bf:da:58:7d:ca:d4:ee:00:b6:
                    00:77:9e:3a:88:8b:7d:b0:77:60:e8:68:03:82:60:
                    b5:a0:bd:72:fe:6a:0d:e8:c1:e4:30:d5:03:5c:c1:
                    38:98:fa:c0:c5:d9:32:6a:5a:0a:1f:b6:ed:df:6f:
                    a5:92:a8:73:f7:5b:a2:ea:ed:62:1d:67:74:ab:94:
                    1c:a1:69:7a:6f:a9:22:fd:4a:15:3b:5c:10:fa:fa:
                    d1:3e:e5:4b:7a:64:5f:06:62:b1:0e:5d:ea:eb:ae:
                    be:bc:67:df:9c:11:63:7e:e6:a7:d9:6d:b9:3f:0e:
                    72:3a:58:66:b1:0c:6f:46:3f:9c:ae:67:60:3d:66:
                    6c:ac:f7:4d:c3:fc:09:9c:0a:cd:f3:82:b4:d8:5a:
                    2a:a3:b0:e7:6a:1b:28:0e:8e:79:ab:b3:7a:26:bf:
                    db:15:09:c3:a2:a9:fa:63:05:a8:0a:7d:45:eb:4a:
                    5c:e3:d2:c8:0c:d4:a0:da:97:70:e1:7d:bf:ef:f0:
                    ba:c2:33:f0:7d:18:61:a3:e9:1f:9a:1f:dd:bb:2a:
                    51:13:57:a1:c1:25:ec:a8:d9:43:24:10:21:c6:ec:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1C:93:1A:ED:29:7C:5D:9F:34:4C:D4:E4:80:4C:00:CB:7A:E4:D3
            X509v3 Authority Key Identifier:
                keyid:DC:62:4F:88:41:FF:ED:45:1F:1A:9D:74:6E:83:84:91:79:07:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/DC624F8841FFED451F1A9D746E838491790743C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC624F8841FFED451F1A9D746E838491790743C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/1/3136382e3139352e3138382e302f32322d3234203d3e20323635343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:a4:3f:05:6d:30:ba:45:ac:43:e7:f1:0a:19:4b:df:30:50:
         fe:5f:c5:67:ba:bb:33:f4:04:a4:93:66:5e:3c:42:b1:eb:fb:
         ff:67:b4:1f:a1:ed:5f:47:16:67:b4:48:aa:51:70:53:5d:3f:
         c4:ef:9b:8e:78:77:67:bd:48:43:8a:d3:91:2b:29:e2:ce:c8:
         13:5d:89:d5:34:6a:18:88:8b:d2:9a:06:ab:17:03:1b:e6:84:
         48:c2:75:e2:a3:ac:68:20:47:80:5b:7e:1e:b0:94:d9:73:ac:
         92:90:44:fa:78:92:3d:a4:70:c0:8d:c3:a9:d7:a4:1d:5b:62:
         f9:d1:ea:58:56:79:1a:7e:b7:9e:d8:52:e2:47:98:27:7e:a5:
         87:01:13:31:ea:87:7e:4e:14:e1:e7:69:29:33:a3:27:16:4c:
         ae:0f:7e:40:88:2c:0a:5a:49:51:87:8a:73:8b:c7:02:8a:98:
         b0:ef:17:e5:e2:a6:08:64:df:02:12:db:0e:03:3f:44:a8:27:
         80:ad:74:fa:5f:08:ba:c2:67:bd:86:b8:87:fe:46:e1:63:a0:
         45:2c:1c:c7:5b:ee:e4:77:ed:c2:e9:28:5f:58:70:8f:75:53:
         db:dd:32:25:19:ad:03:1b:62:0d:a0:73:fe:52:56:29:37:81:
         94:91:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 07:46:30 2024 by rpki-client on console-fra.rpki-client.org