Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa
File:                     3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa (raw, json)
Hash identifier:          /p4ps9T1qiYghH6QYh5ufU6Nqo1+IeNC3PihV5O+nnM=
Subject key identifier:   3D:66:1D:36:6B:DD:F6:BB:1D:8E:90:A5:67:EA:11:45:F9:22:A9:32
Certificate issuer:       /CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
Certificate serial:       1131C084737A442F1DA5DDE03DD75A79C985B76F
Authority key identifier: E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa
Signing time:             Thu 04 Apr 2024 09:54:10 +0000
ROA not before:           Thu 04 Apr 2024 09:49:10 +0000
ROA not after:            Thu 03 Apr 2025 09:54:10 +0000
asID:                     271267
IP address blocks:        168.197.183.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:31:c0:84:73:7a:44:2f:1d:a5:dd:e0:3d:d7:5a:79:c9:85:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51
        Validity
            Not Before: Apr  4 09:49:10 2024 GMT
            Not After : Apr  3 09:54:10 2025 GMT
        Subject: CN=3D661D366BDDF6BB1D8E90A567EA1145F922A932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:34:33:d8:fc:cf:46:53:16:fc:0a:b9:4f:
                    b2:0c:76:54:5a:d6:2d:57:40:08:48:fd:be:e4:6f:
                    0f:d5:b2:0e:4d:55:49:1f:c5:07:5a:f3:b8:95:75:
                    10:f9:28:1d:dc:49:2b:5c:74:e0:99:dd:ba:5e:57:
                    e3:36:32:b2:14:ba:ee:09:41:fd:e0:60:53:83:f7:
                    d6:20:6c:7c:17:1c:1f:65:b5:c1:f6:f8:b9:d9:a7:
                    3a:f2:d0:11:8c:94:76:66:4a:01:f2:a9:72:e2:5d:
                    a6:b1:08:c8:20:e2:3b:59:52:4f:eb:77:5a:3c:19:
                    8f:10:d3:ea:5a:39:96:4f:2a:7d:db:35:48:9e:67:
                    36:7b:9c:e0:c7:50:3c:48:5c:30:7e:1f:87:61:b5:
                    a4:bf:8f:51:d3:49:ac:ff:fd:e0:5f:57:7c:be:d2:
                    8d:63:6d:5c:25:78:0b:4f:8c:0a:49:ea:6d:7c:dc:
                    d5:73:a0:d9:e8:ce:bf:3e:d1:d2:52:7f:e0:7f:3c:
                    a9:b8:c2:03:1b:b5:0b:a1:99:7e:2a:43:6e:a1:e7:
                    85:2e:77:8b:ff:9c:09:2f:23:db:ca:d3:cf:a0:96:
                    fe:03:68:e5:0b:34:f6:79:db:70:ed:de:d8:e8:b3:
                    a8:47:63:d0:95:3b:9f:f5:ad:33:98:33:b2:5c:66:
                    d8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:66:1D:36:6B:DD:F6:BB:1D:8E:90:A5:67:EA:11:45:F9:22:A9:32
            X509v3 Authority Key Identifier:
                keyid:E4:0F:97:17:C0:0A:93:DB:5A:D8:54:AA:EC:1E:08:6E:A0:CE:EB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E40F9717C00A93DB5AD854AAEC1E086EA0CEEB51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hj8eBDfQrFhV8Cu6XqLY7xD47Wy2VJ5iYmEsi8wzB496/1/3136382e3139372e3138332e302f32342d3234203d3e20323731323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:90:37:1a:01:de:4c:6c:4e:b4:16:52:32:c2:84:66:38:cf:
         4d:d8:8a:7d:ec:5a:49:a2:24:fb:d9:c3:79:87:5b:b9:2e:8f:
         86:fc:3b:ce:89:d4:62:bf:c2:6b:6e:da:51:a9:2b:4d:17:90:
         7b:fb:62:64:c5:1b:85:60:9a:4c:23:64:d8:14:6e:94:b7:b1:
         e8:37:ee:b5:9b:81:ee:0c:f8:f2:3d:b2:d6:c6:24:03:24:e2:
         1b:20:7c:c0:e1:51:ca:d5:62:97:84:01:ac:f0:ab:1a:2e:77:
         7f:dc:0f:85:f9:81:e2:be:db:bb:3d:19:66:8a:02:9a:ab:da:
         db:9c:05:4f:50:6b:c4:86:28:fe:b0:4a:4d:58:99:78:97:8b:
         0d:ac:49:8f:00:4d:20:e2:b9:2d:89:6e:c3:c3:76:4d:01:05:
         38:9d:04:76:1e:55:02:10:5d:d1:f8:2e:08:5e:9b:93:8c:3e:
         48:df:bc:73:00:d9:96:35:56:7c:12:12:1b:fb:4a:5f:9c:26:
         06:03:d3:23:15:5c:ae:eb:38:58:67:eb:bf:25:e3:c1:bd:53:
         3e:6b:4f:c6:5d:c3:ba:d0:d6:78:97:c0:68:93:38:7d:96:de:
         92:d9:ec:db:fb:42:fb:b6:4f:8d:75:18:96:5f:19:d0:40:58:
         56:73:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:02 2024 by rpki-client on console-fra.rpki-client.org