Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          YIBr2Vuc8WkXC4ug2v+qpyYWcdU6Z7h+w6p5dQmDKk4=
Subject key identifier:   0D:BB:68:12:CE:0D:40:05:E4:ED:3C:7D:34:B5:89:DE:42:DB:BF:F4
Certificate issuer:       /CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
Certificate serial:       401D39134249ECCAC475641AF8D3DF066F48DE95
Authority key identifier: E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 04 Apr 2024 09:54:10 +0000
ROA not before:           Thu 04 Apr 2024 09:49:10 +0000
ROA not after:            Thu 03 Apr 2025 09:54:10 +0000
asID:                     271267
IP address blocks:        168.197.180.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1d:39:13:42:49:ec:ca:c4:75:64:1a:f8:d3:df:06:6f:48:de:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
        Validity
            Not Before: Apr  4 09:49:10 2024 GMT
            Not After : Apr  3 09:54:10 2025 GMT
        Subject: CN=0DBB6812CE0D4005E4ED3C7D34B589DE42DBBFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:47:ad:60:52:02:32:b7:7d:0a:a4:5b:9b:
                    97:8a:27:f8:fa:74:e1:4b:3c:08:42:de:a4:c3:fa:
                    8c:d5:1b:a4:d4:7f:b2:b3:7b:81:4f:ae:0a:5f:7d:
                    a0:5c:5d:2b:dc:20:1e:35:84:3e:96:10:11:f7:b1:
                    4f:c0:37:2a:79:3f:28:e1:56:e1:86:0b:19:94:fc:
                    f6:cc:61:0b:9e:67:90:22:e7:30:6d:2e:b3:dd:53:
                    2d:a7:8d:06:bf:f4:b5:28:58:12:fb:8d:f8:80:df:
                    a3:0d:3a:43:bc:90:07:39:e0:67:0d:79:f0:2a:2d:
                    25:c5:c5:05:8c:6f:d4:d7:9a:ad:f3:b2:36:97:73:
                    55:41:e5:be:fe:4e:53:fd:5f:5d:01:c9:27:fc:e5:
                    5a:13:85:c4:53:3e:e0:47:15:79:ca:a2:d6:86:40:
                    5f:41:82:fe:d3:72:ac:fe:38:a6:2c:9e:69:46:29:
                    26:0a:52:27:27:07:05:66:f0:29:3c:2a:86:99:50:
                    b7:8d:54:72:c6:ec:19:2f:7a:91:1d:0a:08:71:96:
                    ca:53:cf:f1:45:48:58:4a:b0:9b:15:df:70:45:42:
                    88:f0:4d:9d:3a:2b:25:d1:8e:53:c5:e5:13:eb:f7:
                    df:46:4c:ec:39:d1:29:09:ef:90:ab:83:31:dd:27:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:68:12:CE:0D:40:05:E4:ED:3C:7D:34:B5:89:DE:42:DB:BF:F4
            X509v3 Authority Key Identifier:
                keyid:E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138302e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:e8:b9:cc:e2:88:27:1c:76:11:52:9c:7d:68:da:bb:a1:
         b4:64:8f:53:48:11:a5:50:a9:fc:70:1f:97:cf:3d:82:22:db:
         a2:b6:c1:5c:dd:3f:84:29:ea:f8:0f:95:ff:08:9a:90:2e:85:
         04:64:82:e1:51:78:c9:24:13:40:5c:0d:10:86:bc:de:c4:c7:
         52:ae:24:cc:da:9d:fa:27:98:ed:4a:e4:94:f1:a1:90:74:83:
         d5:bb:4d:cb:ca:7a:58:d7:2e:88:11:02:1e:a6:ab:4d:9f:89:
         9f:71:dd:13:ca:a3:97:ea:9e:4a:fd:28:c6:80:86:fb:8d:96:
         16:87:c4:34:2b:45:b5:a5:d2:86:09:b0:72:0b:6f:68:8c:2c:
         8c:1b:55:21:59:47:c8:6d:9a:37:ed:9e:62:a9:e3:fb:69:74:
         a9:4a:e6:5a:52:1e:79:4a:14:2c:9c:33:33:64:62:4e:ec:e6:
         7f:5c:f5:97:83:9a:25:ef:14:28:cf:12:d4:2d:20:dd:9f:09:
         99:d4:fb:83:f9:e1:03:56:16:f3:0d:61:a7:29:85:06:2f:f8:
         f4:30:92:2b:26:68:57:76:8e:c7:0d:7b:b5:f1:02:8e:b6:68:
         48:0c:4b:cc:4f:ed:36:d8:5f:c0:72:23:64:70:fb:a4:51:93:
         22:31:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org