Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32332d3233203d3e20323633353138.roa
File:                     3136382e3139372e38362e302f32332d3233203d3e20323633353138.roa (raw, json)
Hash identifier:          7YorQqrxabvjIxutGlvowPxiM7c9/tfJgmZy45o579I=
Subject key identifier:   B4:DB:4E:24:4F:4C:B1:8F:9A:A5:29:2B:85:C6:17:DB:57:C9:7C:10
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       32DCF3BE8C453984418E6AFA6FA6E79E3AC7A340
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32332d3233203d3e20323633353138.roa
Signing time:             Mon 14 Oct 2024 15:21:09 +0000
ROA not before:           Mon 14 Oct 2024 15:16:09 +0000
ROA not after:            Mon 13 Oct 2025 15:21:09 +0000
asID:                     263518
IP address blocks:        168.197.86.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dc:f3:be:8c:45:39:84:41:8e:6a:fa:6f:a6:e7:9e:3a:c7:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Oct 14 15:16:09 2024 GMT
            Not After : Oct 13 15:21:09 2025 GMT
        Subject: CN=B4DB4E244F4CB18F9AA5292B85C617DB57C97C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:9a:c9:23:d2:d4:68:db:1f:83:08:a9:10:
                    84:63:e0:97:fc:d4:99:76:c1:97:d4:4f:c3:f3:15:
                    56:15:9f:57:6f:86:bd:79:bd:fe:68:63:21:77:53:
                    4c:c1:8f:78:54:f3:8f:31:53:b2:05:06:8a:4e:af:
                    48:db:7b:dd:29:8d:42:02:70:b4:b4:fe:60:81:42:
                    15:fd:b7:06:54:5f:d3:d9:d6:70:bc:ee:f3:59:db:
                    db:52:bd:89:04:67:ff:cd:ea:bc:04:6c:1d:30:e4:
                    d8:95:99:80:f2:5f:5e:bc:2a:e8:95:54:d8:bc:a2:
                    d7:2e:4e:c3:64:fc:10:73:ee:77:73:ca:46:a4:43:
                    5c:6c:b0:ed:68:ba:b2:ff:da:c9:78:07:e4:85:da:
                    be:0b:bf:c6:a9:46:5c:d3:36:d4:ba:24:ee:ad:01:
                    97:a7:3e:16:5d:00:cc:ba:e5:24:8e:b8:54:f0:56:
                    35:a7:6e:44:3c:de:a1:5d:05:aa:64:15:49:87:d5:
                    8e:7c:78:bf:19:a1:53:2a:98:e2:53:2d:ad:ad:12:
                    76:a4:cf:56:98:55:b3:44:47:80:59:ab:e3:cc:de:
                    77:10:28:55:df:41:b1:3f:05:0d:8e:79:aa:c5:a8:
                    89:80:05:a8:2d:8a:6b:9c:4c:e9:6f:90:11:8d:d5:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DB:4E:24:4F:4C:B1:8F:9A:A5:29:2B:85:C6:17:DB:57:C9:7C:10
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38362e302f32332d3233203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:71:02:14:4d:85:f0:4b:6b:a0:ff:6a:7f:02:de:2e:7a:
         0c:f8:90:4e:a7:11:28:d7:2c:87:cd:56:4e:ea:8c:45:59:5c:
         5e:db:32:51:56:48:2a:17:be:60:87:66:a0:b8:4c:59:16:40:
         72:78:86:b9:15:dc:17:73:46:57:bc:6b:91:2a:a4:2f:d1:ed:
         49:b5:df:0b:1a:e1:a1:86:85:e1:d9:9c:32:3f:19:e7:20:9e:
         da:67:38:af:9a:f4:39:18:39:38:5a:17:df:e2:7d:ea:ea:1a:
         ac:53:be:a3:04:2f:8d:1e:5b:74:87:54:2d:02:94:1b:60:1e:
         8d:dc:61:58:4d:c5:a1:82:c0:36:24:0e:8b:58:42:de:0d:5c:
         2e:36:67:89:b5:d6:55:4d:cd:d1:9f:3d:23:45:15:3b:38:e3:
         b9:d4:13:e9:f1:1a:57:74:24:5e:09:22:2b:63:5e:f4:bf:11:
         c4:3a:d2:c4:9a:b0:3b:ec:2c:c1:31:41:a6:dc:f8:8f:aa:8e:
         9d:5e:79:40:36:75:f9:8e:a4:1c:34:06:a1:22:22:03:2d:3c:
         52:eb:22:63:5c:a7:60:44:9a:18:24:1a:c7:f9:b6:2c:89:6a:
         16:f4:45:b9:0d:aa:12:e6:2a:9c:a4:95:c4:e0:5a:6f:b1:03:
         31:f1:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 05:02:42 2024 by rpki-client on console-ams.rpki-client.org