Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa
File:                     3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa (raw, json)
Hash identifier:          syzZY1c+P8Ox1q1IaWgqQjoGfcIAZzZGo4NYvXG5efc=
Subject key identifier:   E7:65:4B:57:2F:EA:BC:D6:59:3A:63:38:32:2C:F2:77:E5:04:60:4F
Certificate issuer:       /CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
Certificate serial:       113ED025FB0736573B252941BE70133C98466F9D
Authority key identifier: E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa
Signing time:             Thu 04 Apr 2024 09:54:10 +0000
ROA not before:           Thu 04 Apr 2024 09:49:10 +0000
ROA not after:            Thu 03 Apr 2025 09:54:10 +0000
asID:                     271267
IP address blocks:        168.197.180.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3e:d0:25:fb:07:36:57:3b:25:29:41:be:70:13:3c:98:46:6f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
        Validity
            Not Before: Apr  4 09:49:10 2024 GMT
            Not After : Apr  3 09:54:10 2025 GMT
        Subject: CN=E7654B572FEABCD6593A6338322CF277E504604F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:a5:a1:bb:3d:5f:39:e2:06:b0:ca:08:4f:
                    ef:90:09:59:7c:1a:ed:c3:1e:2f:1f:34:37:e8:e9:
                    04:e3:73:90:56:b6:c5:b2:0c:91:20:df:c8:fe:fb:
                    e1:4f:a3:03:14:5c:ff:f5:05:01:40:dd:22:6e:e6:
                    94:25:df:5c:c5:f3:7b:18:80:5b:1f:7a:7c:28:5b:
                    d4:dc:7d:15:12:14:18:9c:f6:02:eb:ab:02:7b:5b:
                    b7:fb:d0:e5:4c:2f:d1:e5:4d:ba:5d:42:d1:e8:66:
                    ec:62:f5:8d:5d:52:21:f7:1a:51:d8:9d:e8:9a:0b:
                    05:bf:2d:68:b6:2c:67:8d:dd:98:e4:bf:c5:0e:6b:
                    9a:4b:30:fe:ab:a4:15:85:c8:82:cd:fb:9c:78:19:
                    8c:88:70:dc:6d:81:b0:0a:7f:ab:3e:cb:6d:02:30:
                    8b:26:a1:28:97:7b:f1:ec:a8:1d:c7:6e:0d:ba:db:
                    7e:b2:7b:57:28:91:bd:0c:c3:78:24:fb:1d:ac:55:
                    26:fc:4e:44:dc:81:2b:3e:8b:31:74:b1:26:46:6e:
                    bd:42:a1:89:a7:a0:0f:9f:5f:e2:ee:ba:90:8d:59:
                    55:09:11:c8:0f:8c:5d:27:46:75:4f:ca:5b:f7:e6:
                    f7:bb:a0:76:fa:51:18:61:5e:a1:08:46:51:c9:ec:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:4B:57:2F:EA:BC:D6:59:3A:63:38:32:2C:F2:77:E5:04:60:4F
            X509v3 Authority Key Identifier:
                keyid:E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138302e302f32332d3233203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:92:58:12:c5:85:3f:a7:f9:71:de:9e:1e:1d:7b:86:20:
         8f:43:60:92:4c:57:0c:78:33:2c:3c:ae:af:e8:de:0f:66:80:
         81:06:3f:3d:5b:76:f2:8c:f5:33:e2:31:30:a2:43:e5:e5:1c:
         66:6f:09:59:0b:44:0b:43:e7:8b:9f:73:53:a2:b0:8a:2e:96:
         d1:47:2c:fd:ec:b6:ed:eb:2d:1f:36:83:c0:89:c1:c5:4b:d1:
         ea:39:9c:18:f4:88:35:21:ef:d0:3e:ed:fc:b0:1d:4c:58:ba:
         97:74:86:97:2e:49:3f:36:32:47:25:0c:96:c1:f8:4f:32:d0:
         21:36:70:e3:2d:fb:ec:c6:56:00:a5:44:01:42:11:e2:29:a6:
         b7:75:f2:e5:de:e4:b8:83:6b:d0:23:f4:f9:3e:87:db:d1:3a:
         65:d5:34:24:91:62:e0:c1:a4:f6:f2:63:c8:72:2a:32:fc:a5:
         57:76:43:13:38:60:d4:a8:9d:71:3b:4e:12:8f:44:b9:19:36:
         00:19:ce:37:d5:e4:f3:5d:4b:d6:5d:ca:26:5e:a7:f7:44:6f:
         f0:e0:63:52:e9:74:25:26:97:c7:e4:23:55:2b:02:e3:01:7f:
         d1:1b:99:f9:61:13:7a:0d:77:f2:d4:56:75:01:e4:55:c2:00:
         16:44:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org