Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          TttpDhGsu+l63/N7FKyUQymdpdEL8JWNH/CFbpHwss4=
Subject key identifier:   AD:6B:F0:64:42:C4:78:F2:9A:B7:A3:76:B4:4D:DB:68:A9:EB:98:C9
Certificate issuer:       /CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
Certificate serial:       63EB3647F018E35A454DB68E56E8DC0E9459AC8F
Authority key identifier: E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 04 Apr 2024 09:54:09 +0000
ROA not before:           Thu 04 Apr 2024 09:49:09 +0000
ROA not after:            Thu 03 Apr 2025 09:54:09 +0000
asID:                     271267
IP address blocks:        168.197.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:eb:36:47:f0:18:e3:5a:45:4d:b6:8e:56:e8:dc:0e:94:59:ac:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
        Validity
            Not Before: Apr  4 09:49:09 2024 GMT
            Not After : Apr  3 09:54:09 2025 GMT
        Subject: CN=AD6BF06442C478F29AB7A376B44DDB68A9EB98C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bd:f0:7e:b6:69:d7:73:ed:f8:94:85:07:7b:
                    49:2d:94:d0:c6:ab:a8:0c:21:48:79:c7:af:8a:33:
                    c1:3e:0d:85:fb:c7:d7:54:d7:27:27:0c:e0:46:eb:
                    c7:df:9f:3c:59:5a:63:10:84:b0:e0:a0:0d:ec:5c:
                    64:ad:00:dd:e5:82:e2:4e:a3:24:af:20:b9:a2:36:
                    b0:59:3a:d6:e4:8f:8f:9d:b8:fa:aa:72:ec:dc:3a:
                    20:7a:19:95:ce:5f:de:99:c2:be:d4:b1:9e:c8:5a:
                    91:30:c1:cf:e6:d6:7e:46:15:80:75:aa:3d:91:8b:
                    51:be:34:7a:9a:53:bb:60:2d:c4:d4:4c:28:7d:b2:
                    53:4b:f5:4d:92:4e:3e:53:a3:3f:3b:e6:12:61:6f:
                    2a:14:d7:cc:5b:a3:72:99:ca:d3:c0:1e:8c:b1:ea:
                    a6:90:29:da:36:45:bd:66:de:ff:9e:2a:fb:fd:e9:
                    e0:72:f8:4f:76:52:bb:eb:26:e9:77:58:c3:19:7d:
                    4b:05:94:b8:74:95:f7:ed:ea:e2:18:6d:9f:97:6d:
                    1f:86:95:fa:30:41:44:da:3e:83:2a:47:fe:ff:0e:
                    5d:f1:f7:76:c6:a3:bb:02:fa:3c:eb:87:8b:d2:df:
                    6f:f6:3f:ef:ac:86:d6:62:d6:06:75:77:10:61:c6:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6B:F0:64:42:C4:78:F2:9A:B7:A3:76:B4:4D:DB:68:A9:EB:98:C9
            X509v3 Authority Key Identifier:
                keyid:E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138322e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:39:b9:35:13:1b:bf:fa:54:2f:85:68:8a:00:19:12:bb:92:
         2b:04:f8:b3:59:32:7b:4f:21:09:33:a4:5a:15:b4:35:15:85:
         f0:ea:71:92:7d:06:56:09:b2:7d:61:3c:e2:48:2c:fb:72:28:
         29:c5:f2:c8:f8:31:70:00:bb:e0:28:b9:23:a5:27:b5:61:b6:
         14:de:2d:0f:75:c0:71:ee:b7:6e:d6:83:3e:c7:7a:13:19:1d:
         a4:5d:e1:f8:1d:a5:84:47:7d:d6:6f:3d:0d:b2:05:81:a7:69:
         c6:7e:b2:ee:9f:f7:ad:09:9b:e5:ef:ff:19:51:1c:4d:bc:7c:
         b4:14:79:ed:60:b7:d8:1c:25:7e:92:3a:20:88:ab:b8:e4:0f:
         41:4d:58:db:37:a4:5f:15:2b:94:68:3f:a0:aa:77:d6:6b:f2:
         53:d2:ba:53:31:5b:5f:92:85:03:e9:21:c8:5e:68:03:2a:97:
         d3:cb:de:8c:c9:31:fa:eb:f3:03:87:57:5f:ea:6d:bb:83:d7:
         4c:9e:ee:a8:12:15:97:cf:0a:fc:45:21:6e:ae:f5:f6:83:47:
         9e:1b:ac:71:ea:19:51:2e:76:40:dd:e7:e9:1e:ab:c4:85:a8:
         b7:eb:00:53:f0:c0:f1:fc:10:68:25:ca:30:03:53:87:dc:0f:
         be:07:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org